Privacy Notice
Flyaway Finds
Trading Name of ScaleBox Ltd
Registered Office Address: 124 City Road, London, United Kingdom, EC1V 2NX
Last updated: 2nd November 2024
At Flyaway Finds, we are committed to providing you with a seamless travel booking experience while ensuring your personal data is kept safe and secure. We use the Amadeus Self-Serve API to provide travel services and strive to be transparent about how we collect, use, and manage your personal information. This Privacy Notice provides an overview of how we handle your data. For more detailed information or if you have any questions, please contact us.
Information We Collect
We collect personal data you provide when booking a holiday with us. This includes:
- Personal Information: Name, address, email address, phone number, date of birth, and passport details.
- Payment Information: Payment details for booking purposes, although we do not store full card details.
- Travel Preferences: Preferences related to travel, such as meal options, seating preferences, and special assistance requests.
- Communication Preferences: Information regarding how you wish to be contacted, including marketing preferences.
- Information About Others: If you book on behalf of others, you must ensure they are aware of how their data is used.
- Automatically Collected Information: IP address, device details, and browsing activity to improve our services.
- Cookie Data: Information collected through cookies on our website. Our Cookie Notice provides more details.
We also collect data when you register on our website, subscribe to newsletters, or participate in surveys and competitions. Additionally, we may collect information through your interactions with our social media platforms, including messages, comments, and reviews.
How We Use Your Personal Data
We use your personal data to provide you with our travel services, which include booking flights, hotels, car rentals, and other holiday-related products. Specifically, we use your data in the following ways:
- Booking and Managing Travel Services: To fulfill bookings for flights, accommodations, car hire, and other related services. We work closely with our partners to ensure your travel experience is smooth and personalized.
- Communication: To communicate with you about your booking, including sending you booking confirmations, travel itineraries, reminders, or important travel alerts. We may also use your contact details to follow up if you begin a booking but do not complete it.
- Customer Service: To provide assistance and respond to your inquiries. This includes managing any complaints or disputes.
Marketing and Personalization: With your consent, we may send you promotional offers and newsletters about travel-related services. We also use data to personalize your experience on our website and app, showing content tailored to your preferences.
User Accounts: The information you provide when creating an account helps us manage your preferences, bookings, and provide you with special offers.
Internal Analysis and Improvements: To analyze trends, usage, and activities on our platform in order to improve our services, make enhancements, and ensure we meet customer needs effectively.
Compliance with Legal Obligations: To meet regulatory requirements, such as identity verification for anti-fraud purposes, and to comply with applicable laws.
Surveys and Competitions: To administer surveys, competitions, or other promotional activities you voluntarily participate in.
Fraud Prevention and Security: To protect our business and your account from fraudulent activities and ensure the safety of our services. We use various fraud detection and monitoring tools to help identify suspicious transactions or activities.
Service Updates: To notify you of changes or updates to our services, including policy changes, system updates, or disruptions that may affect your bookings or account.
Sharing Your Data
Your data is only shared with third parties when necessary for providing our services. Examples include:
- Service Providers: We share your details with airlines, hotels, car rental companies, and other suppliers involved in fulfilling your travel arrangements. This sharing is essential for ensuring that all aspects of your holiday are coordinated smoothly.
- Payment Processors: We share data with payment providers to securely process payments and manage refunds. This may include your contact details, payment details, and booking references.
IT and Hosting Partners: We use third-party services for website hosting, IT support, and infrastructure to ensure our platform remains functional and secure. These partners are under strict confidentiality agreements.
Marketing and Advertising Partners: With your consent, we share limited data with advertising and social media partners to show you relevant content and offers. We also use analytics providers to understand how you interact with our website and improve our services.
Regulatory and Legal Authorities: We may disclose personal data if required by law, for example, to law enforcement or regulatory bodies to meet our legal obligations or in the event of a legal claim.
Business Transfers: In the event of a merger, acquisition, or sale of part or all of our assets, your personal data may be transferred to the new entity as part of the transaction. Any new entity will be required to maintain your data in accordance with this Privacy Notice.
We will never sell your personal information, and it will only be shared with third parties for the purposes outlined in this notice.
Retention of Personal Data
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including the provision of services, meeting legal requirements, resolving disputes, and enforcing our agreements. Specifically:
Booking Data: Data related to travel bookings will be retained for as long as required to complete the service and for a reasonable period thereafter to comply with regulatory and audit obligations.
Marketing Data: If you consent to receive marketing communications, we will retain your contact details until you opt out of receiving such communications.
User Account Data: Data related to your user account, such as profile information, will be retained until you request the deletion of your account.
Legal and Regulatory Requirements: We may retain certain data to comply with legal obligations, such as tax records, even after your relationship with us has ended.
Once your personal data is no longer needed, we will either delete it or anonymize it, so that it can no longer be linked back to you.
Your Rights
You have several rights under data protection law regarding the personal data we hold about you:
Access: You have the right to request access to the personal data we hold about you.
Rectification: You can request correction of inaccurate or incomplete personal information.
Erasure: You have the right to request deletion of your personal data where there is no valid reason for us to continue holding it.
Restriction: You can ask us to restrict processing your data in certain circumstances, such as if you contest its accuracy.
Objection: You can object to the processing of your personal data, including for direct marketing purposes.
Data Portability: You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format.
Withdraw Consent: If you have given consent for specific processing activities, you have the right to withdraw your consent at any time.
To exercise any of these rights, please contact our Data Protection Officer at privacy@flyawayfinds.com. We will respond to all requests in accordance with applicable data protection laws.
Data Transfers
We may transfer your data to destinations outside the UK, including the European Economic Area (EEA) or other jurisdictions where our service providers are located. In such cases, we will ensure that your personal data receives an adequate level of protection by implementing safeguards such as:
Standard Contractual Clauses: We enter into data transfer agreements that include standard contractual clauses approved by the UK government or European Commission.
Certification Mechanisms: Where applicable, we may rely on approved certification schemes or implement supplementary measures to ensure data protection.
Adequacy Decisions: We may transfer data to countries deemed to provide an adequate level of protection by the UK government or European Commission.
You may request further details of the measures we have in place to protect your personal data when it is transferred internationally.
Security Measures
We take appropriate technical and organizational measures to protect your personal data, including:
Encryption: Payment information is encrypted during transactions to ensure your financial details are kept secure.
Access Control: Access to personal data is restricted to authorized personnel only, and these individuals are subject to confidentiality obligations.
Network Security: We use secure servers, firewalls, and other technologies to protect against unauthorized access, loss, or misuse of your data.
Employee Training: Our staff members receive training on data protection and privacy to ensure they handle your personal information responsibly.
Monitoring and Auditing: We regularly monitor our systems for potential vulnerabilities and conduct security audits to prevent unauthorized access or data breaches.
While we strive to ensure the security of your personal data, no transmission over the internet or electronic storage system is completely secure. You acknowledge and accept that providing personal information through our website is at your own risk.
Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected information from a child under 18, we will take steps to delete such information as soon as possible. If you believe that we might have information from or about a child, please contact us.
Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect legal or business developments. When we update our Privacy Notice, we will post the changes on this page and update the date of the last revision at the top of the notice. We encourage you to review this Privacy Notice periodically to stay informed about how we are protecting your data.
Contact Us
If you have any questions about this Privacy Notice or wish to exercise your rights regarding your personal data, please contact our Data Protection Officer at:
Email: privacy@flyawayfinds.com
Post: Flyaway Finds, 124 City Road, London, EC1V 2NX
Additional Information for EU Residents
If you are an EU resident, we have appointed a representative in the European Union to act on our behalf regarding data protection issues. You may contact our EU representative using the contact details below:
Email: eu-representative@flyawayfinds.com
Post: EU Representative, 10 Example Street, Brussels, Belgium