Privacy Policy

1. Information We Collect

We collect information you provide directly when creating an account, making bookings, or contacting support:

• Personal Information: Name, email, phone, date of birth, passport details, nationality.
• Payment Information: Processed securely through Stripe; we do not store card details.
• Travel Preferences: Currency preference, reminder settings, loyalty program data.
• Usage Data: Pages visited, search queries, device information, IP address.

2. How We Use Your Information

• Processing and managing your travel bookings.
• Sending booking confirmations, e-tickets, and travel reminders.
• Managing your SkyPoints loyalty program account.
• Displaying prices in your preferred currency.
• Improving our services and personalizing your experience.
• Complying with legal obligations and preventing fraud.

3. Data Sharing

We share your information only as necessary to complete bookings:

• Travel Providers: Airlines and hotels to fulfill your reservations.
• Payment Processors: Stripe for secure payment processing.
• Legal Requirements: When required by law or to protect our rights.

We do not sell your personal data to third parties for marketing purposes.

4. Data Security

We implement industry-standard security measures including encryption in transit (TLS), secure authentication, and row-level security policies on our database. However, no method of transmission over the internet is 100% secure.

5. Cookies & Tracking

We use essential cookies to maintain your session and preferences. Analytics cookies help us understand usage patterns. You can manage cookie preferences through the cookie consent banner or your browser settings.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention requirements).
• Withdraw consent for non-essential data processing.
• Data portability — receive your data in a machine-readable format.
• Lodge a complaint with a supervisory authority.

7. Data Retention

We retain booking data for 7 years for legal and accounting purposes. Account data is retained until you request deletion. Usage logs are retained for up to 12 months.

8. International Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including standard contractual clauses where required.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from minors without parental consent.

10. Contact Us

For privacy inquiries or to exercise your rights, contact our Data Protection Officer at privacy@corbanglobaltravel.com.