Privacy Policy for FlyToAus.com

1. Introduction

FlyToAus.com (“we,” “our,” or “us”) is fully committed to protecting the privacy and personal data of our users (“you,” “your”). We recognize the importance of safeguarding your information and ensuring transparency in the way we handle, store, and process personal data. This Privacy Policy outlines how we collect, use, protect, and share personal information in compliance with the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), along with other applicable regulations.

2. Scope of This Policy and Data Controller Role

This Privacy Policy applies to all personal data collected or processed through the website located at flytoaus.com (the “Site”), including services, inquiries, purchases, and user accounts. FlyToAus.com is the data controller for all personal data collected through the Site and determines the purposes and means of processing that data.

3. Categories of Personal Data Processed

We may collect the following categories of personal data, directly from you or indirectly through automated means, such as cookies or usage tracking:

a) Usage Data:
Includes data such as your browser type, operating system, referring URLs, IP address, device identifiers, geographic location, and information concerning your interaction with the Site (e.g., page views and session durations).

b) Account Data:
Includes identifying information voluntarily provided by you when creating an account or interacting with the Site, such as your full name, postal address, email address, and telephone number.

c) Profile Data:
Includes preferences, purchase history, browsing behavior, product interests, and other behavioral insights based on your interactions with the Site.

d) Communication Data:
Includes information provided through customer support inquiries, email correspondence, or live chat, including contents of conversations and contact history.

e) Technical Data:
Includes device types, operating systems, browser configurations, connection speed, settings, plug-ins, and system diagnostics.

f) Transaction Data:
Includes details of products or services purchased, payment methods (excluding full credit card information, which is processed via secure third-party platforms), delivery address, billing information, and order histories.

g) Preference Data:
Includes your consent preferences for marketing communications, product or service interest indicators, and survey participation choices.

4. Legal Bases for Processing Personal Data

We process your personal data pursuant to one or more of the following legal bases:

– Contractual Necessity: To fulfill contractual obligations or to communicate prior to entering a contract (e.g., processing orders, facilitating account registration).
– Legitimate Interests: For purposes such as fraud prevention, analytics, service enhancement, marketing (where legally permissible), and network security.
– Consent: For sending promotional communications, placing non-essential cookies, or other purposes based on your informed, granular, and revocable consent.
– Legal Obligation: To comply with applicable laws, legal claims, or lawful requests by public authorities.

5. Your Rights

Subject to applicable law, you have the following rights related to your personal data:

– Right of Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete information.
– Right to Erasure: You may request deletion of your personal data, subject to legal obligations.
– Right to Restrict Processing: You may request that we limit processing in certain circumstances.
– Right to Data Portability: You may receive your personal data in a portable, structured format.
– Right to Object: You may object to processing carried out based on legitimate interests or direct marketing.
– Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, email us at [email protected].

6. Security Measures

We implement industry-standard technical and organizational measures to safeguard your personal data. These include:

– Data encryption in transit and at rest
– Role-based access controls
– Regular security audits and vulnerability scans
– Staff training in data protection and secure processing
– Firewalls, antivirus systems, and multi-layered authentication
– Secure third-party processors with binding agreements

7. International Data Transfers

As part of our operations, your personal data may be transferred to, and processed in, countries outside your jurisdiction. When transferring personal data internationally, we ensure an adequate level of protection by implementing appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or equivalent mechanisms as required under applicable law.

8. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, or to comply with legal obligations. In general:

– Account and Profile Data: Retained for the life of the account and for up to 6 years thereafter.
– Communication and Support Data: Retained for a minimum of 2 years.
– Transaction Data: Retained for at least 7 years for financial and tax compliance.
– Cookie and Usage Data: Retained for no longer than 24 months from the time of collection, unless extended retention is required for legal or operational reasons.

9. Cookie Policy

FlyToAus.com uses cookies and similar technologies to enhance user experience, analyze performance, and provide personalized content. Our cookies fall under the following categories:

– Essential Cookies: Required for the basic functionality of the Site (e.g., session identifiers, security).
– Functional Cookies: Enable enhanced functionality, such as remembering preferences or user accounts.
– Performance Cookies: Collect anonymous data on usage patterns to improve usability and performance.
– Analytics Cookies: Help us understand visitor interactions and improve the Site via Google Analytics or similar tools.
– Marketing Cookies: May be set for behavioral advertising and campaign measurement, only with user consent.

10. Cookie Management and Compliance

In compliance with GDPR and CCPA, we provide users with the ability to manage their cookie preferences upon their first visit by means of a consent banner. Users can review or update their preferences at any time through a dedicated settings link found in the footer of the Site. For California residents, we provide a “Do Not Sell or Share My Personal Information” link as required by the CCPA.

11. Children’s Privacy

FlyToAus.com does not knowingly collect or solicit personal data from children under the age of 13. If you believe that a minor under 13 has provided us with personal data, please contact us at [email protected] immediately, and we will promptly investigate and delete such data, where applicable.

12. Policy Updates and User Notifications

We reserve the right to update or amend this Privacy Policy at any time. Any material changes will be communicated through the Site or via email notifications. Users are encouraged to review this Policy periodically to remain informed about how we protect their personal data.

13. Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy, the processing of your personal data, or your rights, we encourage you to contact our privacy team via email at:

[email protected]

We are committed to maintaining the highest standards in privacy compliance. If you have any concerns regarding your personal data or how it is handled, please do not hesitate to reach out to us.