PRIVACY, GDPR & DATA SECURITY

Your personal, passport & payment data—protected by design.

We never sell traveler data. Learn how we encrypt APIS passport records, tokenize payment cards, and honor your GDPR/UK-DPA data rights.

Data Controller & Zero-Sale Commitment

Passenger & APIS Data

Full name, date of birth, gender, nationality, and passport number/expiry required by IATA airlines and border authorities to issue your PNR.

PCI-DSS Payment Tokens

Raw card numbers and CVV codes are tokenized directly by Stripe, Paystack, or Flutterwave and are never stored in plain text on FlyEasy servers.

Order & GDS Provenance

Booking reference (PNR), 13-digit e-ticket numbers, selected baggage/seat add-ons, and customer support transcripts for trip fulfillment.

Your Privacy Rights (GDPR, UK DPA, CCPA & NDPR)

Right to Access & Download a copy of your PNR and booking history
Right to Rectification of misspelled names or updated passport numbers
Right to Erasure ('Right to be Forgotten') after statutory tax/aviation retention periods
Right to Opt-Out of marketing fare alerts at any time with 1 click

Data Protection Officer (DPO): privacy@flyeasy.com