Privacy Policy

This privacy policy explains what data we collect, why, and how we protect it.

What we collect

• Order data: passenger names, dates of birth, travel dates, airports.
• Contact data: email address, phone number.
• Payment data: handled by Stripe and PayFast — we never see or store your full card number.
• Technical data: IP address, browser, referrer (used for analytics and fraud prevention).

Why we collect it

• To prepare and deliver your PNR document.
• To process payments and prevent fraud.
• To respond to your support requests.
• To improve our service (anonymised analytics only).

How long we keep it

Order records are retained for 5 years for accounting and legal reasons, then anonymised or deleted. Contact form messages are retained for 12 months.

Who we share it with

We share data only with parties strictly necessary to deliver our service:

• Stripe and PayFast (for payment processing).
• Brevo (for sending transactional email).
• Cloudflare (for site delivery and security).

We never sell your personal data to third parties.

Cookies

We use a minimal number of cookies — primarily to remember your preferred currency and to maintain your session. We do not use advertising or tracking cookies.

Your rights

Under POPIA (South Africa), GDPR (EU), and similar laws elsewhere, you have the right to access, correct, or request deletion of your data. Email [email protected] with your request and we'll respond within 14 days.

Security

The site is served exclusively over HTTPS. Database access is restricted. Payment information never touches our servers — it is handled directly by PCI-compliant processors.

Contact

For questions about this policy, email [email protected].