Privacy Policy

1. Introduction

TMS AM LLC (“Company”, “we”, “us”) operates the TMS.AM platform (“Platform”). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Platform.

By using the Platform, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Platform.

2. Data We Collect

We collect the following categories of personal data:

2.1. Account Information: name, email address, phone number, and password (encrypted) provided during registration.

2.2. Booking Data: travel trips, dates, passenger names, passenger types, seat selections, and ticket details associated with your orders.

2.3. Payment Data: payment method type and transaction identifiers. We do not store credit card numbers, CVV codes, or full payment credentials. All payment processing is handled by PCI-compliant third-party processors.

2.4. Device and Usage Data: IP address, browser type, operating system, pages visited, referral source, and session duration collected automatically through cookies and similar technologies.

2.5. Communication Data: messages, feedback, and support requests you send to us.

3. How We Use Your Data

We use your personal data for the following purposes:

• Processing and fulfilling ticket bookings and orders.
• Issuing electronic tickets and sending booking confirmations.
• Communicating trip reminders, delay notifications, and status updates.
• Processing refunds and handling cancellation requests.
• Providing customer support and responding to inquiries.
• Improving the Platform’s functionality, performance, and user experience.
• Detecting and preventing fraud, unauthorized access, and misuse.
• Complying with legal obligations under Armenian law.

4. Data Sharing

We share your personal data only in the following circumstances:

4.1. Transport Carriers: we share passenger names, contact information, and ticket details with the Carrier operating your booked trip, solely for the purpose of fulfilling your trip.

4.2. Payment Processors: payment data is transmitted to our third-party payment providers to process transactions securely.

4.3. Insurance Partners: if you purchase travel insurance, relevant booking data is shared with the insurance provider.

4.4. Legal Requirements: we may disclose personal data if required by law, court order, or government request, or to protect the rights and safety of the Company, its users, or the public.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. Data Storage and Security

5.1. Personal data is stored on secure servers located in data centers that comply with industry-standard security practices.

5.2. We implement technical and organizational measures to protect your data, including encryption of data in transit (TLS/SSL), secure password hashing, access controls, and regular security assessments.

5.3. Despite our efforts, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

6.1. Account data is retained for as long as your account is active. You may request deletion of your account at any time.

6.2. Booking and transaction records are retained for a minimum of 5 years to comply with tax and accounting requirements under Armenian law.

6.3. Usage and analytics data is retained in anonymized form and may be kept indefinitely for statistical purposes.

7. Cookies

7.1. The Platform uses cookies and similar technologies to maintain user sessions, remember preferences, and analyze usage patterns.

7.2. Essential cookies are required for the Platform to function and cannot be disabled. Analytics cookies help us understand how the Platform is used and may be declined through your browser settings.

7.3. Third-party services integrated into the Platform (such as payment processors) may set their own cookies subject to their respective privacy policies.

8. Your Rights

Under applicable data protection laws, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data, subject to legal retention requirements.
• Restriction — request restriction of processing in certain circumstances.
• Data Portability — request your data in a structured, machine-readable format.
• Withdrawal of Consent — withdraw consent for data processing at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at info@tms.am. We will respond within 30 days.

9. Children’s Privacy

The Platform is not intended for children under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we will take steps to delete it promptly.

10. Changes to This Policy

10.1. We may update this Privacy Policy from time to time. The updated version will be posted on the Platform with the revised effective date.

10.2. We encourage you to review this policy periodically. Continued use of the Platform after changes constitutes acceptance of the updated policy.

11. Contact Information

For questions or requests regarding your personal data, please contact us:

TMS AM LLC

Email: info@tms.am

Phone: +374 XX XXX XXX

Address: Yerevan, Republic of Armenia