Travel, hospitality & leisure

Travel & tourism. Travellers book on trust.

The total price, the refund and the reply have to hold.

Online travel agencies, tour operators, destination bodies and journey operators, where the traveller compares everything and forgives little. We build booking experiences with honest prices and policies, itinerary and service journeys that work on the move, and destination brands that make a place worth the trip.

The number we move
Search-to-booking conversion
Where we work in travel & tourism
  • Online travel agencies
  • Tour operators
  • Destination marketing
  • Rail, cruise & coach journeys
  • Corporate travel
Rules mapped
8 rules · 6 areas
Disciplines that lead
TechnologyProduct
Frameworks we build to
PCI DSS v4.0.1 — Payment Card Industry Data Security StandardDPDP Act 2023 — Digital Personal Data Protection Act, 2023GDPR — General Data Protection Regulation (EU) 2016/679WCAG 2.2 AA — Web Content Accessibility GuidelinesCore Web Vitals — Loading, interactivity and visual stability
Two riders on decorated white horses pass the pink sandstone façade of the Hawa Mahal in Jaipur
Travel & tourismA place is the product; the booking has to live up to it.

Where the rules biteMap of all forty-one industries

  • Claims Advertising & claims: Shapes most of the work
  • Regulator Sector regulator: Shapes most of the work
  • Payments Payments: Shapes most of the work
  • Data Personal data: Shapes most of the work
  • Security Security & incidents: Often shapes the work
  • Access Accessibility: Often shapes the work
  • AI AI governance: Often shapes the work

What is shifting

The traveller compares everything, and the rules now watch the checkout.

Refund rules tightened, dark patterns were named, and assistants started planning trips. Each shift names what it demands, with a fact you can check.

Low evening sun falls across empty seats in a quiet departure lounge
Plans change at the gate; service has to keep up.
  1. Refund and change rules for flights tightened.

    It demandsBooking flows that show cancellation and refund terms clearly, and process them as the rules now require.

    SignalSince 26 March 2026, DGCA’s refund rules give flyers 48 hours after booking to cancel or change free, except close to departure; agent and portal refunds are due in 14 working days.

  2. Dark patterns in booking flows are named and penalised.

    It demandsTotals from the first screen, scarcity messages that are true, and no pre-ticked add-ons.

    SignalThe CCPA’s 2023 dark-patterns guidelines name drip pricing, false urgency and basket sneaking as unfair trade practices.

  3. Travellers expect service on the phone they travel with.

    It demandsItineraries, changes and help in chat and app, ending with a person when needed — usable by everyone.

    SignalThe EU Accessibility Act has covered booking websites, apps and e-tickets for passenger transport sold in the EU since 28 June 2025.

  4. Packages sold across borders carry their own law.

    It demandsPackage pages and contracts that give EU travellers the information and protection they are owed.

    SignalUnder the EU Package Travel Directive, organisers give standard pre-contract information and protect travellers against their own insolvency.

The rulebook

All-in prices, honest scarcity and refunds on time.

The e-commerce and dark-pattern rules, the aviation refund requirements, package-travel law for EU travellers, payments and data, read for a booking business. Your counsel keeps sign-off.

Frameworks we build to

  • PCI DSS v4.0.1 — Payment Card Industry Data Security Standard
  • DPDP Act 2023 — Digital Personal Data Protection Act, 2023
  • GDPR — General Data Protection Regulation (EU) 2016/679
  • WCAG 2.2 AA — Web Content Accessibility Guidelines
  • Core Web Vitals — Loading, interactivity and visual stability

Frameworks we design and build to — not a claim of certification.

Advertising & claims

Shapes most of the work

  1. Central Consumer Protection Authority

    CCPA dark-patterns guidelines, 2023

    Names practices such as drip pricing, false urgency, basket sneaking and confirm-shaming — thirteen in all — as unfair trade practices.

    We designEvery booking step is audited against all thirteen patterns before launch.

    CCPA · Guidelines for Prevention and Regulation of Dark Patterns, 30 November 2023 Official text: CCPA dark-patterns guidelines, 2023

Sector regulator

Shapes most of the work

  1. Department of Consumer Affairs

    Consumer Protection (E-Commerce) Rules, 2020

    Online travel platforms show who the seller is, the total price with its breakdown, cancellation and refund terms, and a grievance officer.

    We designProduct and checkout templates carry the required fields by design.

    Consumer Protection (E-Commerce) Rules, 2020 Official text: Consumer Protection (E-Commerce) Rules, 2020

  2. Directorate General of Civil Aviation

    DGCA rules on air-ticket refunds

    Card refunds within seven days of cancellation; refunds of agent and portal bookings within 14 working days; a 48-hour window after booking to cancel or change without extra charges, except close to departure.

    We designBooking and change flows show the window and the refund route for each fare.

    DGCA · Civil Aviation Requirements on refund of airline tickets, revised 24 February 2026 (in force 26 March 2026)

  3. European Union

    EU Package Travel Directive

    Packages sold to travellers in the EU need standard pre-contract information, an organiser liable for performance, and protection against the organiser’s insolvency.

    We designPackage pages and confirmations carry the standard information for EU travellers.

    Directive (EU) 2015/2302 Official text: EU Package Travel Directive

Payments

Shapes most of the work

  1. PCI Security Standards Council

    PCI DSS v4.0.1

    Card-data security, including the controls on scripts running on payment pages (6.4.3) and tamper detection (11.6.1), in force since 31 March 2025.

    We designPayment pages ship with a script inventory and change detection.

    PCI SSC · PCI DSS v4.0.1 Official text: PCI DSS v4.0.1

Personal data

Shapes most of the work

  1. Government of India · European Union

    DPDP Act, 2023 and GDPR

    Traveller data from many markets, collected with purpose-bound consent and withdrawal as easy as consent.

    We designTraveller profiles hold consent per purpose, and marketing never sees what the traveller did not agree to.

    DPDP Act, 2023 · Regulation (EU) 2016/679 Official text: DPDP Act, 2023 and GDPR

Accessibility

Often shapes the work

  1. W3C · European Union

    WCAG 2.2 AA and the European Accessibility Act

    WCAG 2.2 AA as the floor; since 28 June 2025 the EU Accessibility Act covers e-commerce and the booking websites, apps and e-tickets of passenger transport sold in the EU.

    We designDate pickers, seat maps and payment steps are tested with assistive technology.

    W3C WCAG 2.2 · Directive (EU) 2019/882 Official text: WCAG 2.2 AA and the European Accessibility Act

AI governance

Often shapes the work

  1. European Union

    EU AI Act · Article 50

    From 2 August 2026, people are told when they are dealing with an AI system — such as a travel assistant — unless it is obvious.

    We designAssistants say they are AI and hand over to a person on request.

    Regulation (EU) 2024/1689 · Article 50 Official text: EU AI Act · Article 50

Compiled 3 October 2026. Our reading of typical programmes, not legal advice. Rules change; your counsel confirms how each one applies to you.

Challenges

What gets in the way in travel & tourism.

The problems that surface in nearly every travel & tourism programme: the ones customers feel, and the ones teams carry.

Your customers

  1. The real total, early

    Fares, fees and taxes shown together from the first screen.

  2. Changes without a call

    Cancellations, changes and refunds handled where the booking was made.

  3. Help on the move

    Updates and support that reach the traveller wherever they are.

Visitors walk through a hall of carved stone arches at the Red Fort
Every visit runs on timings, tickets and guides.

Your operation

  1. Inventory from many suppliers

    Airlines, hotels and local operators each update in their own way.

  2. Refund and complaint rules

    Timelines that differ by product, payment method and market.

  3. Seasonal peaks

    Service and systems that hold when everyone books at once.

What we build

What we build for travel & tourism, discipline by discipline.

A typical programme here draws on each discipline in this mix. Every line names what it builds for the industry and links to the capability that does the work.

Leads Core Supports Share of a typical programme, by role · illustrative
  1. Booking platforms, supplier integrations and fast, accessible sites and apps.

  2. Search, booking and change journeys that beat the comparison site on clarity and speed.

  3. 03

    Brand Design

    Core

    Destination and operator brands that make a place, and a way of travelling, worth choosing.

  4. Destination content and campaigns produced for every season and market.

  5. 05

    AI Design

    Core

    Itinerary and service assistants that answer from live inventory and policy.

  6. Traveller profiles, pre-trip and in-trip messaging, and loyalty on one consented record.

Programmes

Book it the way travellers do, then fix what they trip on.

The way in books your products the way travellers do — on your site, on comparison sites and through assistants — and ranks the gaps in price clarity, speed and policy.

The way in

Booking-flow and price-clarity audit

We book your products the way travellers do and test every step against the dark-pattern and e-commerce rules.

Package
Sprint · Fixed fee
Typical length
2–3 weeks
It sets
Search-to-booking conversion, as a baseline
  • Product experience audit
  • Technical & code audit

What it hands over

  • A dark-pattern and disclosure audit, with evidence for each step
  • A fix list ranked by conversion and by risk
  • A refund and change map by product and payment method
Start here
  1. 02Milestone · 4–8 months

    Booking and self-service rebuild

    Search, checkout and self-service changes rebuilt around all-in prices, integrated with your inventory and payment systems.

    MovesContacts per booking

    Services: End-to-end UX & UI design · Website · System integration

    Enquire about Booking and self-service rebuild
  2. 03Milestone · 3–6 months

    Traveller lifecycle and loyalty

    One consented traveller profile, with the messages that come before, during and after a trip.

    MovesRepeat booking rate

    Services: Customer data & identity foundation · Lifecycle journey build · Loyalty strategy & programme design

    Enquire about Traveller lifecycle and loyalty
  3. 04Project · 8–12 weeks

    Destination brand and content

    A destination positioning, identity and content plan that guides visitors beyond the famous sights.

    MovesEngaged visits to destination content

    Services: Brand foundation & positioning · Logo & identity system · Content strategy & editorial plan

    Enquire about Destination brand and content

How success is measured

The number we moveSearch-to-booking conversion

  • Search-to-booking conversion
  • Refunds processed within the required time
  • Contacts per booking
  • Direct share of bookings

AI, under the rules

Where AI does the work, and what keeps it safe.

Every use case runs inside a guardrail, with a person approving what matters and a log a supervisor could read.

Use case 01

Itinerary assistant

Measured byAssisted booking conversion

Tested forOWASP LLM01 · Prompt injection

agent / itinerary-assistant Guarded
  1. TaskBuilds and changes itineraries from live inventory, prices and policies.
  2. GuardrailQuotes only bookable prices with all fees included, and says it is an AI.
  3. HumanTravel consultants take over complex trips.
  4. LogRequests, options shown and bookings made.

Ships only with its evaluation set, its guardrail and an owner

Use case 02

Refund and change helper

Measured byRefunds completed within the required time

Tested forOWASP LLM05 · Improper output handling

agent / refund-and-change-helper Guarded
  1. TaskExplains a booking’s change and refund options and starts the request.
  2. GuardrailOffers only what the fare rules allow, and promises no exceptions.
  3. HumanService agents handle exceptions and disputes.
  4. LogRequests and their outcomes.

Ships only with its evaluation set, its guardrail and an owner

Use case 03

Destination guide drafts

Measured byAccuracy complaints per guide

Tested forOWASP LLM09 · Misinformation

agent / destination-guide-drafts Guarded
  1. TaskDrafts destination guides from maintained local information.
  2. GuardrailOpening hours, prices and rules come from a maintained source, never from the model.
  3. HumanAn editor checks every guide before it is published.
  4. LogThe sources used for each guide.

Ships only with its evaluation set, its guardrail and an owner

Work and insights

Published work follows client approval.

We publish travel & tourism projects only once a client signs off the write-up. Meanwhile, here is the reading that applies.

A typical programme · composite

A tour operator rebuilt its booking flow with all-in prices from the first screen and self-service changes, so travellers stopped calling to ask what they would actually pay.

Anonymised and illustrative: the shape a programme takes, never a named client.

Questions

What travel, product and destination teams ask us first.

Something else on your mind? Ask us directly

Q.01Do you work with booking businesses or destinations?

Both: online agencies, tour and journey operators, and the boards and bodies that market destinations. The rules differ — destinations rarely take payments — and so does the work.

Q.02Can you integrate our suppliers?

Yes: airline, hotel and activity inventory through the distribution systems, channel managers or direct APIs you already use.

Q.03How do you handle the CCPA dark-pattern rules?

We audit every booking step against all thirteen patterns and design totals, scarcity messages and add-ons so they are honest from the first screen.

Q.04Will an assistant replace our travel consultants?

No. It handles simple searches and changes, says it is an AI, and hands complex trips and exceptions to people.

Let’s build what happens next.

Tell us what you’re building. We’ll answer straight.

Book a discovery call

Three ways to start

  1. 01About 2 minutes

    A quick question

    You get A reply from a lead, not a sales queue

  2. 02About 8 minutesMost useful

    A project brief

    You get Options and a first scope after one call

  3. 03About 15 minutes

    A formal RFQ or RFP

    You get Receipt confirmed and a named bid lead

Every engagement starts with a written scope and a quote agreed before work begins. How each package is priced