1. Data controller
Flyte Concierge FZ LLC (DIFC, Dubai, UAE) is the data controller for personal information you submit through flyteconcierge.com.
2. What we collect
We collect information you voluntarily provide — name, email, phone, passport details (required by airlines for ticketing), payment details, and booking preferences. We also collect standard web analytics (IP address, browser, referring page).
3. How we use it
We use your data exclusively to: (a) issue tickets and deliver services you request; (b) respond to your inquiries; (c) send booking confirmations and operational alerts; (d) improve our services. With explicit opt-in, we send a weekly newsletter you can unsubscribe from at any time.
4. Sharing with third parties
Your data is shared only with airlines, flight data providers (Duffel) and payment processors strictly required to fulfill your booking. We never sell personal data. We never share data with marketing brokers.
5. Data retention
Booking records are retained for 7 years for tax and regulatory compliance. Marketing preferences are honored indefinitely unless you unsubscribe. Web analytics data is retained for 26 months.
6. Your rights
Under GDPR and UAE PDPL, you may request access, correction, portability or deletion of your personal data at any time. Email privacy@flyteconcierge.com.
7. Security
We encrypt data in transit (TLS 1.3) and at rest. Payment card details are never stored on our servers — we use PCI DSS Level 1 certified providers.