Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us when you register for an account, make a booking, subscribe to our newsletter, or contact our customer support. This includes your full name, email address, phone number, date of birth, passport details, nationality, and payment information.

We also collect information automatically when you use our Services, including your IP address, browser type, operating system, device information, pages visited, time spent on pages, referring URLs, and click patterns. This data is collected through cookies, web beacons, and similar tracking technologies.

When you book flights through our platform, we may receive additional information from our airline partners, including booking status updates, flight changes, and loyalty programme details, solely for the purpose of managing your booking.

2. How We Use Your Information

We use your personal information to process flight bookings and deliver e-tickets, communicate booking confirmations, changes, and travel updates, provide customer support and respond to inquiries, personalise your experience and show relevant flight deals, and send marketing communications (with your consent).

We also use aggregated and anonymised data for analytics purposes to improve our Services, understand travel trends, optimise our search algorithms, and enhance the overall user experience. This aggregated data cannot be used to identify any individual user.

Legal bases for processing your data include: performance of a contract (booking services), legitimate interests (fraud prevention, service improvement), legal obligations (tax and regulatory compliance), and consent (marketing communications and non-essential cookies).

3. Data Sharing and Disclosure

We share your personal information with airlines and travel service providers as necessary to complete your bookings. This includes sharing passenger details (name, passport information, contact details) with the operating airline(s) and any code-share partners. Airlines have their own privacy policies governing how they handle your data.

We may also share your information with payment processors (Stripe, PayPal) for secure transaction processing, customer support tools (for ticket management), analytics providers (aggregated data only), and law enforcement or regulatory authorities when required by law.

We do not sell your personal information to third parties for their own marketing purposes. We may share aggregated, non-identifiable data with business partners for market analysis and service improvement.

4. Cookie Policy

Skytranvel uses cookies and similar technologies to enhance your browsing experience. Essential cookies are required for the basic functionality of our platform, including session management, security, and booking processes. These cookies cannot be disabled.

We also use analytics cookies (Google Analytics) to understand how visitors interact with our website, performance cookies to optimise page loading and search response times, and marketing cookies to deliver relevant advertisements and measure campaign effectiveness. You can manage your cookie preferences at any time through our cookie settings panel or your browser settings.

Third-party cookies may be set by our advertising partners, social media plugins, and analytics providers. We recommend reviewing the privacy policies of these third parties for more information about their data practices.

5. Data Security

We implement industry-standard security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. All data transmissions between your browser and our servers are encrypted using TLS 1.3. Payment card data is handled in compliance with PCI DSS Level 1 standards and is never stored on our servers.

Our infrastructure is hosted on secure, SOC 2 Type II certified cloud platforms with regular security audits, penetration testing, and vulnerability assessments. Access to personal data within our organisation is restricted to authorised personnel on a need-to-know basis, with all access logged and monitored.

While we take all reasonable precautions to protect your data, no method of electronic storage or internet transmission is 100% secure. In the event of a data breach that affects your personal information, we will notify you and the relevant regulatory authorities in accordance with applicable laws.

6. Your Rights

Under the Australian Privacy Act 1988 (APPs) and the EU General Data Protection Regulation (GDPR, where applicable), you have the right to access, correct, update, or delete your personal information. You may also request a copy of all personal data we hold about you in a portable, machine-readable format.

You have the right to opt out of marketing communications at any time by clicking the unsubscribe link in any email or by updating your preferences in your account settings. You may also withdraw consent for non-essential cookies at any time. Exercising these rights will not affect the lawfulness of any processing carried out before your withdrawal.

To exercise any of these rights, please contact our Privacy Officer at privacy@skytranvel.com.au. We will respond to verified requests within 30 days (APPs) or 30 days (GDPR). If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or the relevant EU supervisory authority.

7. Data Retention

We retain your personal information for as long as necessary to provide our Services, comply with legal obligations, and resolve disputes. Active account data is retained for the lifetime of your account plus 2 years after account closure. Booking records are retained for 7 years in accordance with Australian taxation and consumer protection requirements.

Marketing consent records are retained for 3 years from the date of last engagement. Analytics data is retained in aggregated form indefinitely but is anonymised within 26 months of collection. You may request deletion of your data at any time, subject to our legal retention obligations.

8. International Data Transfers

As an international travel platform, your personal information may be transferred to and processed in countries other than your country of residence. This includes transfers to airline systems, payment processors, and cloud infrastructure providers located in the United States, Singapore, and the European Union.

For transfers to countries that do not provide an adequate level of data protection, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission, binding corporate rules, and contractual obligations that require our service providers to protect your data to the same standards as required under Australian and EU law.

9. Children's Privacy

Skytranvel is not directed at children under the age of 16, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at privacy@skytranvel.com.au.

For flight bookings that include minors, the booking must be made by a parent or legal guardian who accepts these terms on behalf of the minor. We collect only the minimum information required by airlines for minors included in a booking (name, date of birth, passport details).

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer using the details below. We are committed to resolving any privacy-related issues promptly and transparently.

Privacy Officer: privacy@skytranvel.com.au | Skytranvel Pty Ltd, Level 12, 100 George Street, Sydney NSW 2000, Australia | Phone: +61 2 8000 5000 | For urgent data breach notifications, please email security@skytranvel.com.au.