1.1 Personal Information

We collect personal information that you provide directly to us, including:

• Account Information: Name, email address, phone number, date of birth
• Booking Information:Travel dates, accommodation preferences, special requests
• Payment Information:Credit card details, billing address (processed securely through third-party providers)
• Communication Data: Messages, feedback, and support requests

1.2 Automatically Collected Information

We automatically collect certain information when you use our platform:

• Device Information:IP address, browser type, operating system, device identifiers
• Usage Data:Pages visited, time spent on site, search queries, booking patterns
• Location Data:General geographic location based on IP address
• Cookies and Tracking:Information collected through cookies and similar technologies

2.1 Service Provision

• Process and manage your bookings and reservations
• Provide customer support and respond to inquiries
• Send booking confirmations and travel updates
• Process payments and prevent fraud

2.2 Platform Improvement

• Analyze usage patterns to improve our services
• Develop new features and functionality
• Conduct research and analytics
• Ensure platform security and prevent abuse

2.3 Marketing and Communications

• Send promotional offers and travel deals (with your consent)
• Provide personalized recommendations
• Conduct surveys and gather feedback
• Send important service updates and policy changes

3.1 Accommodation Partners

We share necessary booking information with accommodation providers to complete your reservations, including:

• Guest name and contact information
• Check-in and check-out dates
• Special requests and preferences
• Payment confirmation details

3.2 Service Providers

We work with trusted third-party service providers who assist us in:

• Payment processing and fraud prevention
• Customer support and communication
• Data analytics and marketing services
• Technical infrastructure and security

3.3 Legal Requirements

We may disclose your information when required by law or to:

• Payment processing and fraud prevention
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Respond to government requests

We implement comprehensive security measures to protect your personal information:

• Encryption:All sensitive data is encrypted in transit and at rest
• Access Controls:Strict access controls limit who can view your information
• Regular Audits:We regularly audit our security practices and systems
• Staff Training: Our team is trained on data protection best practices

5.1 Access and Control

You have the right to:

• Access and review your personal information
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Export your data in a portable format
• Object to certain processing activities

5.2 Marketing Communications

You can control marketing communications by:

• Unsubscribing from email newsletters
• Adjusting notification preferences in your account
• Contacting us directly to opt out

6.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve our services. They enable us to remember your preferences and provide personalized experiences.

6.2 Types of Cookies We Use

6.3 Managing Cookies

You can control cookies through:

• Browser Settings: Most browsers allow you to block or delete cookies
• Cookie Preferences:Use our cookie management tool to customize your preferences
• Opt-out Tools:Use industry opt-out tools for advertising cookies

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations and resolve disputes
• Prevent fraud and ensure platform security
• Improve our services through analytics

When you delete your account, we will remove your personal information within 30 days, except where retention is required by law.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data during international transfers, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions by data protection authorities
• Certification schemes and codes of conduct
• Improve our services through analytics

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

We may update this Privacy & Cookies Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices on our platform

If you have any questions about this Privacy & Cookies Policy or our data practices, please contact us:

• Email:privacy@abovethewings.com
• Data Protection Officer:dpo@abovethewings.com
• Address:AboveTheWings Ltd, England & Wales (Company No: 15119005)