Privacy Policy

This Privacy Policy applies to:

• website usage
• account registration
• agency accounts
• booking and ticketing
• payment and Quick Pay
• extra-service/amendment requests
• customer/support communications
• email verification
• security systems
• analytics and Platform usage

Depending on Platform usage, Flysplus may collect:

Account Information:

• name
• email
• phone
• protected authentication information
• role
• agency information
• account status
• verification status

Agency Information:

• agency name
• business details
• contact information
• banking/payment-related information
• authorized users
• account and credit information

Passenger Information:

• passenger name
• date of birth
• passenger type
• passport information
• passport expiry
• nationality where required
• itinerary
• booking reference
• ticket information
• meal preference
• passenger comments
• extra-service requests

Payment Information:

• amount
• status
• transaction/reference ID
• payment method/bank information
• uploaded payment evidence
• approval information
• refund information

Communication Information:

• support requests
• emails
• passenger comments
• booking notes
• service notes
• other communications

Technical Information:

• IP address
• browser/device information
• operating system
• login dates/times
• pages/features accessed
• security events
• error information
• audit information

Information may be used to:

• create/manage accounts
• verify email addresses
• authenticate users
• process bookings
• manage passenger details
• provide documents
• process payments
• manage agency credit
• process refunds
• process extra services/amendments
• provide support
• prevent fraud
• investigate security incidents
• maintain audit records
• improve reliability
• troubleshoot
• analyze Platform usage
• comply with applicable obligations
• enforce Platform Terms
• protect Flysplus, users, and Platform security

Depending on the applicable legal context, Flysplus may process information where necessary to:

• provide requested services
• perform transactions
• comply with legal obligations
• protect security
• prevent fraud
• pursue legitimate business purposes
• establish or defend legal claims
• obtain consent where required

Where agencies submit passenger information, the agency/user is responsible for having the appropriate authority to provide that information and request the travel service.

Information may be shared where necessary with:

• airlines and carriers
• airline reservation/distribution systems
• payment providers and banks
• technology/service providers
• hosting/infrastructure providers
• email/messaging providers
• fraud/security providers
• authorized Flysplus staff/administrators
• regulators or government authorities where legally required
• professional advisers where appropriate
• other parties necessary to provide requested services

Flysplus does not sell personal information to third parties for their independent marketing purposes.

Passenger information may be shared with airlines and service providers to:

• create/manage bookings
• issue tickets
• provide ancillary services
• process changes
• process refunds
• satisfy security or regulatory requirements

The receiving provider may apply its own privacy policy.

Financial information may be used for:

• payment collection
• payment verification
• transaction reconciliation
• agency credit management
• fraud prevention
• refunds
• accounting/financial records
• audit trails
• legal/compliance requirements

Flysplus may use:

• OTP
• email verification
• access controls
• rate limiting
• audit logging
• session controls
• security monitoring
• fraud prevention
• other technical/organizational safeguards

No electronic system can guarantee absolute security.

Flysplus may use cookies, local storage, session identifiers, and similar technologies for:

• authentication
• security
• preferences
• functionality
• analytics
• performance

Flysplus may use analytics tools to understand:

• feature usage
• Platform performance
• booking funnel behavior
• errors/failures
• engagement
• account activity
• operational performance

Analytics should avoid unnecessary collection of sensitive passenger information.

Flysplus may maintain audit records for:

• login events
• failed login attempts
• booking activity
• payment activity
• service requests
• administrative actions
• security events
• other significant Platform actions

These records may be retained where necessary for security, accounting, operational, legal, or compliance purposes.

Flysplus retains information for as long as reasonably necessary for the purposes described in this Privacy Policy and for longer where required for lawful accounting, dispute resolution, fraud prevention, security, contractual, operational, or other legitimate requirements.

Where applicable, users may request deletion of personal information.

Deletion may not be possible where information must be retained for:

• legal obligations
• financial records
• fraud prevention
• security
• disputes
• contractual obligations
• accounting
• legal claims

Secure backups may retain information for a limited period according to normal backup lifecycle.

Subject to applicable requirements, users may request access to or correction of personal information.

Flysplus may verify the identity of the requester before processing such requests.

Flysplus uses reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction.

Security measures may include:

• protected credentials
• encrypted connections
• access controls
• server-side authorization
• transaction controls
• audit logging
• rate limiting
• controlled administrative access

No system can provide absolute security.

Travel and payment operations may require information to be processed by airlines, cloud infrastructure providers, analytics providers, email providers, payment providers, or other service providers outside the user’s country.

Where required, Flysplus will seek appropriate safeguards under applicable law.

Flysplus is primarily intended for travel agencies and authorized users.

Information about minors may be processed where necessary for a legitimate travel booking and should be submitted only by an authorized adult, parent, guardian, agency, or other person with appropriate authority.

The Platform may link to airline, bank, government, payment-provider, or other third-party websites.

Flysplus does not control the privacy practices of sites outside its control.

Flysplus may process account, booking, technical, payment, and audit information to detect/investigate:

• fraud
• unauthorized access
• payment abuse
• account takeover
• identity misuse
• booking manipulation
• suspicious transactions
• security incidents

If Flysplus is involved in a merger, acquisition, restructuring, financing, asset sale, or similar transaction, relevant information may be transferred as part of that transaction subject to applicable requirements.

Flysplus may update this Privacy Policy periodically to reflect changes in:

• Platform features
• legal requirements
• technology
• service providers
• business operations

The latest version will be published with the updated date.

For privacy questions, access/correction requests, or privacy concerns, contact Flysplus:

Phone: 0345 095 3946

Effective Date: 1 September 2026

Last Updated: 1 September 2026