Privacy policy

Who we are

Afghan Guest Tourist & Travel Agency ("Afghan Guest", "we") is registered in Kabul, Afghanistan. Contact: sayed@afghanguest.com.

What we collect and why

Bookings: your name, email, phone, nationality, stay details and requests — to reserve your room with the hotel and contact you about your trip.

Letters of Invitation: passport details, date of birth, occupation and itinerary — only to prepare your invitation letter and support your visa application.

Payments are handled by Stripe. We never receive or store your full card number.

Security logs: a keyed hash of your IP address (not the address itself) to prevent fraud and abuse.

Who we share it with

The hotel you book receives the lead guest's name, contact details, dates and requests.

For a Letter of Invitation, your details may be shared with Afghan consular authorities as required for the visa process.

Stripe processes payments as an independent controller. We do not sell personal data, and our partners agree not to sell customer data.

How we protect it

All traffic is encrypted with TLS. Passport numbers, dates of birth and staff two-factor secrets are additionally encrypted at rest with AES-256-GCM.

Staff access requires a strong password and two-factor authentication, and every access to booking or visa data is logged.

How long we keep it

Letter of Invitation personal data is deleted 90 days after your planned departure.

Booking records are kept for as long as required for accounting and legal obligations, then deleted or anonymised.

Your rights

You can ask to access, correct or delete your data, or object to its use, by emailing sayed@afghanguest.com. We respond within 30 days.

Cookies

We use only strictly necessary cookies (for example, to keep staff signed in). We do not use advertising or tracking cookies.