Privacy Policy

Overview

This Privacy Policy explains how SkyTrip Smart ("we", "us", "our") collects, uses, shares and protects personal information when you use our website, call our booking line, or otherwise interact with our Services. We are committed to handling your data responsibly and in accordance with applicable privacy laws, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), where they apply to you.

Information we collect

Information you give us

• Booking and traveler details: names, dates of birth, gender and passport/ID details as required by the airline; travel dates, routes and preferences.
• Contact details: phone number, email and, where relevant, billing address.
• Payment information: processed securely by our PCI-DSS compliant payment partners; we do not store full card numbers.
• Communications: the content of calls, emails and messages with our agents, which may be recorded or logged for quality and training.

Information we collect automatically

• Device and usage data: IP address, browser type, pages viewed, searches performed, and referring pages.
• Cookies and similar technologies: see our Cookie PolicySitemap for details and your choices.

How we use your information

We use personal information to:

• search and compare fares and present relevant flight options;
• complete, confirm and service your booking, including issuing tickets and coordinating with airlines and suppliers;
• provide 24/7 customer support and handle changes, cancellations and refunds;
• process payments and prevent fraud;
• send booking confirmations, itinerary updates and essential service messages;
• with your consent where required, send offers and travel deals you can opt out of at any time;
• improve and secure our Services and comply with legal obligations.

Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Contract: to take steps at your request and to fulfil your booking.
• Legal obligation: to meet tax, accounting, aviation-security and other legal requirements.
• Legitimate interests: to operate, secure and improve our Services and prevent fraud, balanced against your rights.
• Consent: for marketing communications and non-essential cookies, which you may withdraw at any time.

How we share information

We share personal information only as needed to provide the Services:

• Airlines and travel suppliers — to book and issue your tickets and manage your travel.
• Global distribution systems and consolidators — the reservation platforms used to source and ticket fares.
• Payment processors — to charge and secure your payment.
• Service providers — vetted partners who host our systems, provide telephony, analytics or fraud-prevention, bound by confidentiality and data-processing agreements.
• Legal and safety — authorities where required by law, or to protect our rights, users or the public.

We do not sell your personal information and we do not share it with third parties for their own independent marketing without your consent.

International data transfers

SkyTrip Smart operates internationally, and your information may be processed in countries other than your own, including the United States. Where we transfer personal data outside the EEA, UK or other regulated regions, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or an equivalent lawful transfer mechanism.

Data retention

We keep personal information only for as long as necessary for the purposes described in this Policy — typically for the duration of your booking and thereafter for the period required to meet legal, tax, accounting and dispute-resolution obligations. When information is no longer needed, we securely delete or anonymize it.

Your privacy rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct inaccurate or incomplete information;
• request deletion of your information ("right to be forgotten");
• restrict or object to certain processing, including direct marketing;
• data portability;
• withdraw consent at any time where processing is based on consent;
• for California residents: to know, delete, correct, and to opt out of "sale" or "sharing" (we do not sell or share personal information as those terms are defined), free from discrimination for exercising your rights.

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by applicable law and may need to verify your identity first.

Marketing choices

You can opt out of marketing emails at any time using the unsubscribe link in each message or by contacting us. Even if you opt out of marketing, we will still send essential service messages relating to your bookings.

Data security

We use technical and organizational measures designed to protect your information, including TLS encryption in transit, access controls, and PCI-DSS compliant payment handling. No system is completely secure, but we work continuously to safeguard your data and to detect and respond to incidents. If a breach is likely to affect your rights, we will notify you and the relevant regulator as required by law.

Children’s privacy

Our Services are intended for adults. We do not knowingly collect personal information directly from children under 16 except as part of a booking made by a responsible adult. If you believe a child has provided us information without authorization, please contact us and we will delete it.

Changes to this Policy and contact

We may update this Privacy Policy from time to time; the "Last updated" date shows the latest version, and material changes will be highlighted on this page. To contact our privacy team or exercise your rights:

• Email: [email protected]
• Phone (24/7): +1 (844) 595-3635
• Post: SkyTrip Smart Travel, Data Protection Officer, 1201 Orange Street, Suite 600, Wilmington, DE 19801, USA

If you are in the EEA or UK and believe we have not resolved your concern, you have the right to lodge a complaint with your local data-protection authority.