Data Security Policy

Your Data Security Matters to Us

We are committed to applying the highest standards of technical and organizational measures to protect your data during your travel booking experience.

Introduction

BudgetFly Group of Companies Ltd ensures that all personal and booking data collected through explore.budgetfly.com is processed in compliance with applicable data protection regulations.

  • Your data is only used for legally justified purposes such as booking management, payment processing, and customer support. 
  • We take all necessary technical and organizational measures to protect data against accidental or unlawful destruction, manipulation, loss, alteration, unauthorized disclosure, or access. 

Technical & Organizational Measures

To secure the personal information of our users, we:

  • Apply industry-standard encryption protocols during transmission and storage 
  • Maintain secure servers with restricted access 
  • Regularly review and update our security systems in line with evolving technology 
  • Conduct internal audits to ensure compliance with data protection standards

Data Retention & Deletion

  • BudgetFly retains your data for a minimum of 2 years or as required for fulfilling services and legal obligations. 
  • Once data is no longer required, we delete or anonymize it securely. 
  • Some data may be retained for longer if required by law (e.g., tax or commercial obligations).

Third-Party Data Handling

We only share your data with trusted service providers such as airlines, hotel partners, payment processors, and reservation systems when necessary to fulfill your booking.

  • All third parties are legally obligated to maintain confidentiality and comply with data protection requirements. 
  • BudgetFly does not sell personal data to third parties.

Your Rights & Security

As part of our data security commitment, travelers have the right to:

  • Access their personal data 
  • Request correction, limitation, or deletion of data (where legally permissible) 
  • Withdraw consent for data processing at any time 
  • Appeal to the Data Protection Authority if security concerns arise 

Security Breach Notifications

Suggestive Element:
 To align with global best practices, I recommend including a clear protocol for:

  • Notifying users if a data breach affecting their personal information occurs 
  • Providing guidance on protective steps users can take 

(This is not explicitly stated in the primary documents and requires team approval.)

Contact for Data Security

If you have questions or concerns about your data security, contact our Data Protection Officer (DPO):