Privacy Policy
1. Introduction
VFlyTickets values your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information. It applies to users globally, with additional rights for residents of the European Economic Area (GDPR) and California (CCPA).
2. Information We Collect
We may collect the following categories of information:
- Identity data (name, date of birth, gender, passport info)
- Contact data (email, phone number, address)
- Travel preferences and itinerary data
- Payment and billing information
- Technical data (IP address, browser, device type)
- Usage data (pages visited, time on site, interactions)
3. How We Use Your Information
We use your data for the following purposes:
- Fulfillment of travel bookings and customer support
- Sending confirmations, changes, or itinerary updates
- Marketing communications (when you opt in)
- Fraud prevention and payment verification
- Legal compliance and service improvement
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area, we process your data under the following legal bases:
Performance of a contract (e.g., issuing tickets)
Compliance with legal obligations
Legitimate interests (e.g., customer service, marketing)
Consent (e.g., newsletters or promotional offers)
5. Your Rights (GDPR & CCPA)
Depending on your location, you may have the right to:
- Access, correct, or delete your personal data
- Object to or restrict certain uses of your data
- Withdraw consent for marketing at any time
- Request data portability (GDPR)
- Opt out of the sale of personal data (CCPA)
6. Sharing of Information
We may share your information with:
- Airlines, GDS systems, and ticket consolidators
- Payment processors and verification partners
- Customer service providers and CRM platforms
- Government authorities as required by law
- All third parties are bound by confidentiality and data protection agreements.
7. Data Retention
We retain your data only as long as necessary to fulfill your booking, comply with legal obligations, or for recordkeeping purposes—typically no longer than 7 years after your last transaction.
8. Data Security
We implement industry-standard safeguards such as encryption (SSL), firewalls, secure access controls, and secure hosting environments. While no system is impenetrable, we are committed to continually improving our data protection measures.
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies for:
- Website performance and traffic analytics
- Personalized experiences and content
- Advertising and retargeting (with your consent)
- You can manage your cookie preferences through your browser or opt-out tools provided in the footer.
10. Children’s Privacy
Our services are not directed to children under 13. We do not knowingly collect personal data from minors unless submitted by a parent or guardian for travel purposes.
11. International Data Transfers
Your information may be transferred to or stored on servers located in countries outside your own, including the United States. We ensure adequate protection through standard contractual clauses and security protocols.
12. California Consumer Notice (CCPA)
If you are a California resident, you may:
- Request disclosure of personal data we collect
- Request deletion of your personal data
- Opt out of the sale of personal data (note: we do not sell personal data)
13. Updates to This Policy
We may periodically update this Privacy Policy. Any significant changes will be posted on this page, and you will be notified by email where required. Continued use of our services indicates your acceptance of the updated terms.