Privacy Policy for EasyFlights

Suggested text: Our website address is: https://easyflights.com.au.

1. Introduction

At EasyFlights, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, use our services, or interact with us. By using EasyFlights, you agree to the collection and use of information in accordance with this policy.

2. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person.
• Processing: Any operation performed on personal data, whether automated or not, such as collection, recording, organization, structuring, storage, alteration, retrieval, or erasure.
• Data Controller: The entity that determines the purposes and means of processing personal data.
• Data Processor: The entity that processes personal data on behalf of the data controller.
• Cookies: Small data files stored on your device used to track your usage of our services and personalize your experience.

3. Information We Collect

We may collect and process the following types of information:

3.1 Personal Data

When you book a flight or create an account, we may collect the following personal data:

• Identity Information: Full name, gender, date of birth, passport or national ID details.
• Contact Information: Email address, phone number, and postal address.
• Payment Information: Credit or debit card details, billing address, and transaction history.
• Travel Preferences: Meal preferences, seat preferences, frequent flyer numbers, and other travel-related data.

3.2 Technical Data

When you visit our website, we automatically collect technical information, such as:

• Device Information: IP address, device type, operating system, browser type, and version.
• Usage Data: Information about how you use our website, including page interaction, clicks, and navigation patterns.
• Location Data: If enabled, we collect geolocation data via your device.

3.3 Cookies and Tracking Technologies

We use cookies, web beacons, and other tracking technologies to enhance your experience, provide analytics, and improve our services. You can manage cookie preferences in your browser settings.

4. How We Use Your Data

We may use your personal data for the following purposes:

4.1 Providing Services

• To process your flight bookings, manage reservations, and provide customer service.
• To send you booking confirmations, itinerary details, and flight status updates.
• To process payments, prevent fraud, and handle refund requests.

4.2 Customer Support

• To respond to your inquiries, complaints, or requests for assistance.
• To improve our customer service and resolve technical issues.

4.3 Marketing & Promotions

• To send you marketing communications, promotional offers, and news updates, where you have opted in.
• To provide personalized recommendations based on your booking history and preferences.

4.4 Legal and Regulatory Compliance

• To comply with legal obligations, such as reporting to regulatory bodies, handling disputes, or responding to lawful requests from law enforcement.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: Where you have provided explicit consent for marketing or specific uses.
• Contractual Necessity: To fulfill our contract with you (e.g., to process your booking).
• Legal Obligation: To comply with legal requirements (e.g., fraud prevention, tax reporting).
• Legitimate Interest: To improve our services, protect our rights, or analyze usage patterns, provided that your rights and freedoms are not overridden.

6. Sharing Your Data

We may share your personal data with the following parties:

6.1 Airlines and Travel Partners

• We share your data with airlines, hotels, and other service providers to complete your travel bookings and provide related services.

6.2 Payment Processors

• Payment information is shared with third-party payment processors for the purpose of completing transactions. These processors are compliant with industry standards such as PCI-DSS.

6.3 Third-Party Service Providers

• We engage third-party service providers for services such as web hosting, customer support, analytics, and email marketing. These providers are contractually obligated to protect your data and only process it for specified purposes.

6.4 Legal Authorities

• We may disclose personal data to law enforcement or regulatory authorities when required by law or to protect our legal interests.

6.5 Business Transfers

• In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner, subject to the same privacy commitments outlined in this policy.

7. Data Security

We implement strict security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data, including payment information, using SSL technology.
• Regular security audits and vulnerability assessments.
• Restricted access to personal data, limited to employees and contractors who need it to perform their duties.

8. Data Retention

Our data servers located in Australia and We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods are:

• Booking Data: Retained for 7 years to comply with accounting and audit requirements.
• Marketing Data: Retained until you unsubscribe or request deletion.
• Technical Data: Retained for a period of 3 years for analytics and website optimization.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

9.1 Right to Access

You have the right to request a copy of the personal data we hold about you, including how we process it.

9.2 Right to Correction

You have the right to request the correction of any inaccurate or incomplete personal data.

9.3 Right to Deletion (Right to be Forgotten)

You can request the deletion of your personal data under certain conditions, such as when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent for its use.

9.4 Right to Data Portability

You have the right to request a copy of your data in a structured, commonly used format and transfer it to another data controller where technically feasible.

9.5 Right to Object

You can object to the processing of your personal data for marketing or in cases where we are relying on a legitimate interest as a legal basis.

9.6 Right to Restrict Processing

You can request a restriction of processing in specific circumstances, such as if you contest the accuracy of the data or object to the processing.

10. Cookies Policy

For details on how we use cookies and how you can manage your cookie preferences, please refer to our Cookie Policy.

11. International Data Transfers

We may transfer your personal data to countries outside Australia for the purposes outlined in this policy.

12. Children’s Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect or process personal data from children. If you believe we have unintentionally collected such data, please contact us to request deletion.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the “Effective Date.” If the changes are material, we may notify you via email or a prominent notice on our website.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: