FlyZafy
Sign in

FlyZafy

Privacy Policy

1. Information we collect

  • Account information — when you create an account we collect your name, email address, phone number and password. This is required to identify you and provide access to our services.
  • Booking data — when you book a flight, hotel or visa service, we collect passenger details (full name, date of birth, passport number, nationality), travel itinerary, payment method details (processed by our PCI-DSS certified payment partner — we do not store full card numbers) and billing address.
  • Usage data — we automatically collect information about how you interact with the platform, including IP address, browser type, device identifiers, pages visited, search queries and referring URLs. This is used to improve performance and personalise your experience.
  • Communications — if you contact support, we retain records of your messages to help resolve issues and improve service quality.

2. How we use your information

  • Processing bookings — to confirm reservations, issue tickets and communicate booking updates to you and relevant third parties (airlines, hotels, visa authorities).
  • Account management — to create and manage your account, authenticate logins and enable features like saved traveller profiles.
  • Communications — to send booking confirmations, itinerary updates, receipts and important service notifications. Marketing emails are sent only with your consent and can be unsubscribed at any time.
  • Fraud prevention and security — to detect, investigate and prevent fraudulent transactions, unauthorised access and other illegal activity.
  • Platform improvement — to analyse usage patterns and improve features and performance.
  • Legal compliance — to meet obligations under applicable laws, including financial record-keeping and responding to lawful government requests.

3. Sharing your information

  • Travel suppliers — passenger details are shared with airlines, hotels and visa processing authorities as required to complete your booking. These parties process your data under their own privacy policies.
  • Payment processors — payment information is handled by PCI-DSS certified third-party processors. We share only the data required to process a transaction.
  • Service providers — we work with trusted vendors for hosting, analytics, email delivery and customer support, bound by data processing agreements.
  • Legal requirements — we may disclose information when required by law, court order or government authority, or to protect our rights or prevent harm.
  • Business transfers — in a merger, acquisition or asset sale, your information may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

4. Cookies and tracking

  • Essential cookies — required for the platform to function (session authentication, security tokens, preference storage). These cannot be disabled.
  • Analytics cookies — help us understand how visitors use the platform, in aggregate form only.
  • Marketing cookies — used to show relevant ads on third-party platforms. You can opt out via your browser settings.

5. Data retention

We retain personal data for as long as your account is active or as needed to provide our services. Booking records are retained to meet financial and legal obligations. You may request deletion of your account data at any time — see Your rights below.

6. Security

We implement industry-standard technical and organisational measures — TLS encryption in transit, encryption at rest for sensitive fields, access controls, and regular security reviews. No method of transmission over the internet is 100% secure, but we continuously work to maintain strong protections.

7. Your rights

  • Access — request a copy of the personal data we hold about you.
  • Correction — request that inaccurate or incomplete data be corrected.
  • Deletion — request deletion of your account and associated personal data, subject to legal retention requirements.
  • Portability — request your data in a structured, machine-readable format.
  • Objection and restriction — object to or restrict certain processing, including direct marketing.

To exercise any of these rights, contact support through the support centre. We respond within 30 days.

8. Children's privacy

The platform is not directed to children under 16 and we do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. Material changes are notified to registered users. Continued use of the platform after changes constitutes acceptance.