Privacy

What we collect

Only what the airline requires: names, date of birth, gender, contact details, and passport data only when the airline asks for it.

Why

To create and manage your booking (contract), to meet accounting obligations (legal duty), and to prevent fraud (legitimate interest — based on transaction behaviour, never on protected characteristics).

Security

Passport data is encrypted at rest (AES-256-GCM). Card data is handled by our payment provider; we never store your card number or security code.

Retention

Passport data is deleted 30 days after your last flight; search history after 90 days; financial records as long as the law requires.

Your rights

Download your data from your profile, or ask us to correct or delete it.