Privacy Policy

• Account details: your name, email address, phone number, country and password (stored only as a secure hash).
• Booking details: traveller names, dates of birth where required by the airline, contact details, and — when a trip requires it — passport information. Passport numbers are encrypted at rest and never displayed back in full.
• Payment details: processed directly by our payment provider (Stripe). We do not store your full card number; we retain only a payment reference, card brand and last four digits.
• Usage data: searches you run, pages you view, device and browser information, and IP address, used to operate and secure the service.

• To search for, price, book, ticket and manage your travel with the relevant airline and travel partners.
• To take payment, issue refunds, and send you booking confirmations, e-tickets, receipts and service updates.
• To provide customer support and respond to your requests.
• To detect, prevent and investigate fraud and misuse, and to meet our legal obligations.
• To improve and secure the service.

Our legal bases are: performance of our contract with you (to deliver your booking), our legitimate interests (to secure and improve the service and prevent fraud), your consent (for optional communications), and compliance with legal obligations.

We share the minimum personal data needed to fulfil your trip with the airlines and travel content and fulfilment partners that provide your booking, and with our payment provider (Stripe) to take payment and process refunds. We also use service providers for email delivery, hosting and analytics under contract. We do not sell your personal data.

Travel is global, so your data may be processed outside your country by airlines and partners involved in your trip. Where we transfer data internationally we rely on appropriate safeguards such as standard contractual clauses.

We keep booking and transaction records for as long as needed to provide the service and to meet legal, accounting and tax requirements, then delete or anonymise them. You can ask us to close your account at any time.

Depending on where you live, you may have the right to access, correct, delete or port your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at the address below. You also have the right to complain to your local data protection authority.

We protect your data with encryption in transit and at rest, strict access controls, and audited handling of sensitive fields. No system is perfectly secure, but we work continuously to safeguard your information.

NodusTech Ltd — privacy enquiries: privacy@nodustechltd.com. General support: support@nodustechltd.com.