PERSONAL INFORMATION

Personal Information We May Collect

Personal Information” is information that identifies you as an individual or relates to an identifiable person, including, for example:

  • Name
  • Postal address(es)
  • Telephone number
  • Email address
  • Credit and debit card number and related information
  • Social media account ID
  • Passport number
  • Number assigned by a transportation agency, such as a Transportation Security Administration known traveler number
  • Any other information you provide when you communicate or book travel with us (e.g., your dietary and other preferences or needs), as well as information about your bookings (e.g., points of departure and destinations)

If you submit any Personal Information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

How We May Collect Personal Information

We and our third party service providers may collect Personal Information in a variety of ways, including:

  • Through the Services: We may collect Personal Information through the Services, such as when you make a booking or register for a promotion.
  • Offline: We may collect Personal Information from you offline, such as when you contact customer service.
  • From Other Sources: We may receive your Personal Information from other sources, such as public databases, joint marketing partners, social media platforms (including from people with whom you are friends or otherwise connected), and other third parties, to the extent permitted by applicable law.

We May Use Personal Information

We may use Personal Information:

  • To complete and fulfill your booking or purchase, including to process your payment, communicate with you regarding your booking or purchase, and provide you with related customer service. We use passport information for the purpose of travel bookings.
  • To respond to your inquiries and fulfill your requests, such as to send you newsletters.
  • To send administrative information to you, such as information regarding the Services and changes to our terms, conditions, and policies.
  • To send you marketing communications that we believe may be of interest to you, to the extent permitted by law.
  • To personalize your experience on the Services by presenting products and offers tailored to you.
  • To allow you to participate in sweepstakes, contests, and similar promotions and to administer these activities. Some of these activities have additional rules, which may contain additional information about how we use and disclose your Personal Information. We suggest that you read any such rules carefully, as you will be bound by them if you choose to participate.
  • To facilitate social sharing functionality.
  • To allow you to send messages to another person through the Services. By using this functionality, you are telling us that you are entitled to provide us with your friend’s name and email address.
  • For our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing new products, enhancing, improving, or modifying our Services, identifying usage trends, determining the effectiveness of our promotional campaigns, and operating and expanding our business activities.
  • As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your state or country of residence; (b) to comply with legal process and to prevent, detect, or suppress abuse, fraud, or criminal activity; (c) to respond to requests from public and government authorities and self-regulatory organizations, including public and government authorities and self-regulatory organizations outside your state or country of residence; (d) to enforce our terms and conditions; (e) to protect our operations, assets, or interests or those of any of our affiliates; (f) to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

How Personal Information May Be Disclosed

Your Personal Information may be disclosed or transferred to the following entities. With the exception of our corporate affiliates and service providers, these entities are not controlled by us and Personal Information disclosed to them is subject to the applicable entity’s privacy policy and security practices. Therefore, we encourage you to review the privacy policies of any entity whose products or services you purchase using the Services:

  • To our corporate affiliates, parent companies, subsidiaries, joint ventures, or other companies under common control with us worldwide for the purposes described in this Privacy Policy. Fareportal Inc. is responsible for the management of the jointly-used Personal Information.
  • To our third party travel-related suppliers, such as airlines, hotels, and car rental companies, so that they may provide the products and services that you book or purchase using the Services.
  • To other travel-related companies with whom we partner to provide a portion of the Services, such as airline consolidators or aggregators, other travel agencies providing access to their travel-related inventory via the Services, and travel insurance providers.
  • To our business partners, whose products or services may be offered on the Services, who referred you to the Services from another website or online service, or to whose website or online service the Services link. We encourage you to review the privacy policy of each such website or online service.
  • To our third party service providers who provide services such as website hosting, data analysis, payment processing, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services. The information we provide to third parties service providers is subject to confidentiality obligations and is intended to be used solely for the purpose(s) permitted thereby.
  • To third-party sponsors or operators of surveys, sweepstakes, contests, and similar promotions.
  • To identify you to anyone to whom you send messages through the Services. You may also choose to disclose your Personal Information on message boards, chat, profile pages, blogs, and other services to which you are able to post information and materials. Please note that any information you post or disclose through these services will become public and may be available to other users and the general public. We urge you to be very careful when deciding to disclose any information on the Services.
  • Subject to your social media account settings, to your friends associated with your social media account, to other website users, and to your social media account provider, in connection with your social sharing activity, such as if you connect your social media account to your Services account or log into your Services account from your social media account. By connecting your Services account and your social media account, you authorize us to share information with your social media account provider, and you understand that the use of the information we share will be governed by the social media site’s privacy policy. If you do not want your Personal Information shared with other users or with your social media account provider, please do not connect your social media account with your Services account, and do not participate in social sharing on the Services.
  • In the event of a merger, reorganization, dissolution or similar corporate event, or the sale of all or substantially all of our assets, we expect that the information that we have collected, including personal data, would be transferred to the surviving entity in a merger or the acquiring entity. All such transfers shall be subject to our commitments with respect to the privacy and confidentiality of such personal data as set forth in our Privacy Policy.
  • As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your state or country of residence; (b) to comply with legal process and to prevent, detect, or suppress abuse, fraud, or criminal activity; (c) to respond to requests from public and government authorities and self-regulatory organizations, including public and government authorities and self-regulatory organizations outside your state or country of residence; (d) to enforce our terms and conditions; (e) to protect our operations, assets, or interests or those of any of our affiliates; (f) to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

Other Information

Other Information We May Collect

Other Information” is any information that does not directly reveal your specific identity or does not directly relate to an individual. If we are required to treat Other Information as Personal Information under applicable law, then we may use it only for the purposes for which we use and disclose Personal Information as detailed in this Privacy Policy. Other Information may, for example, be:

  • Browser and device information
  • App usage data
  • Information collected through cookies, pixel tags, and other technologies
  • Demographic information and other information provided by you
  • Aggregated information

How We May Collect Other Information

We and our third party service providers may collect Other Information in a variety of ways, including:

  • Through your browser or device: Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version, and the name and version of the Services (such as the App) you are using. We use this information to ensure that the Services function properly.
  • Through your use of the App: When you download and use the App, we and our service providers may track and collect App usage data, such as the date and time the App on your device accesses our servers, and what information and files have been downloaded to the App based on your device number.
  • Using cookies: Cookies are pieces of information stored directly on the computer that you are using. Generally, cookies allow us to collect information such as browser type, time spent on the Services, pages visited, language preferences, and other anonymous or pseudonymous traffic data. 
  • Using pixel tags and other similar technologies: Pixel tags (also known as web beacons and clear GIFs) may be used in connection with some Services to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns, and compile statistics about usage of the Services and response rates.
  • Using Adobe Flash technology (including Flash Local Shared Objects (“Flash LSOs”)) and other similar technologies: We may use Flash LSOs and other technologies to, among other things, collect and store information about your use of the Services. If you do not want Flash LSOs stored on your computer, you can adjust the settings of your Flash player to block Flash LSO storage using the tools contained in the Website Storage Settings Panel. You can also control Flash LSOs by going to the Global Storage Settings Panel and following the instructions (which may include instructions that explain, for example, how to delete existing Flash LSOs (referred to as “information” on the Macromedia site), how to prevent Flash LSOs from being placed on your computer without your being asked, and (for Flash Player 8 and later) how to block Flash LSOs that are not being delivered by the operator of the page you are on at the time). Please note that setting the Flash Player to restrict or limit acceptance of Flash LSOs may reduce or impede the functionality of some Flash applications, including those used in connection with the Services.
  • IP Address: Your IP address is a number that is automatically assigned to the computer that you are using by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications and other services. We use IP addresses for purposes such as calculating usage levels, diagnosing server problems, and administering the Services. We may also derive your approximate location from your IP address.
  • Physical Location: We may collect the physical location of your device by, for example, using satellite, cell phone tower, or WiFi signals. We may use your device’s physical location to provide you with personalized location-based services and content. We may also share your device’s physical location with our marketing partners, to enable them to provide you with geo-targeted advertising. You may be permitted to allow or deny such uses and/or sharing of your device’s location, such as through your device settings. If you do, we and/or our marketing partners may not be able to provide you with the applicable personalized services and content.
  • From you: Information such as your preferred means of communication and special travel requests (for example, in connection with a disability or dietary restriction) is collected when you voluntarily provide it.
  • By aggregating information: Aggregated Personal Information does not personally identify you or any other user of the Services (for example, we may aggregate Personal Information to calculate the percentage of our users who have a particular telephone area code).

How We May Use and Disclose Other Information

We may use and disclose Other Information for any purpose (except where we are required to do otherwise under applicable law), if it doesn’t qualify as Personal Information under applicable law. In some instances, we may combine Other Information with Personal Information (such as combining your name with your location). If we do, we will treat the combined information as Personal Information as long as it is combined.

Third Party Services

This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party supplier or intermediary, any third party operating any site or service to which the Services link or any third party that includes a widget on the Services (for example, the Facebook Like button or share buttons). The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates.

In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including with respect to any Personal Information you disclose to other organizations through or in connection with the Apps.

Third Party Advertisers

We may use third-party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use the Services and other websites, apps or online services, based on information relating to your access to and use of the Services and other websites, apps or online services on any of your devices. To do so, these companies may place or recognize a unique cookie on your browser (including through use of pixel tags). They may also use these technologies and other information that they and we collect about your online use to recognize you across the devices you use, such as a mobile phone and a laptop. If you would like more information about this practice, and to learn about your choices in connection with it in desktop and mobile browsers on the particular device on which you are accessing this Privacy Policy, please visit http://www.networkadvertising.org/managing/opt_out.asp and http://www.aboutads.info/choices. You may download the AppChoices app at www.aboutads.info/appchoices to opt out in mobile apps.

Security

We seek to use reasonable organizational, technical, and administrative measures to protect Personal Information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please immediately notify us in accordance with the “Contacting Us” section below.

Opt-Out of Marketing Emails

You may opt-out from receiving marketing-related emails from us on a going-forward basis by following the instructions contained in each such email or by contacting us in accordance with the “Contacting Us” section below. You may opt-out of receiving push notifications from us through your device settings.

We will try to comply with your request as soon as reasonably practicable. Please note that if you opt-out of receiving marketing-related emails from us, we may still send you important administrative or transactional messages, from which you cannot opt-out.

How you can access, change, or suppress your Personal Information

If you would like to review, correct, update, suppress, or delete Personal Information that you have previously provided to us, you may contact us in accordance with the “Contacting Us” section below. In your request, please make clear what Personal Information you would like to have changed, whether you would like to have your Personal Information suppressed from our database, or otherwise let us know what limitations you would like to put on our use of your Personal Information. For your protection, we may only implement requests with respect to the Personal Information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.

Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.

Retention Period

We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

Use Of The Services By Minors

The Services are not directed to individuals under the age of eighteen (18), and we request that they not provide Personal Information through the Services.

Important Notice to All Non-US Residents

Our servers are located in the U.S. If you are located outside of the U.S., please be aware that any information provided to us, including personal information, will be transferred from your country of origin. Except in the case of data transfers under the EU-U.S. Privacy Shield and the Swiss-US Privacy Shield Framework, your decision to provide such data to us, or allow us to collect such data through our Services constitutes your consent to this data transfer.

GDPR Notice

Natural persons located in the European Economic Area (“EEA”) should review the General Data Protection Regulation 2016/679 (“GDPR”) privacy notice here.

The GDPR privacy notice (this “Notice”), which encompasses both this “General GDPR Notice” and the “Sales GDPR Notice,” is included in our Privacy Policy and applies to the ‘personal data,’ as defined in the General Data Protection Regulation 2016/679 (the “GDPR”), of natural persons located in the European Economic Area processed by Fareportal (“EEA Individuals,” “you,” or “your”). Any capitalized terms or other terms not defined herein shall have the meaning ascribed to them in the Privacy Policy or, if not defined herein or in the Privacy Policy, the GDPR. To the extent of any conflict between this Notice and the rest of our Privacy Policy, this Notice shall control only with respect to EEA Individuals and their personal data

When EEA Individuals make a booking, purchase services, or inquire (including conducting searches) through the Website (including desktop and mobile web versions) or contact centers, Fareportal will process EEA Individuals’ personal data for the following purposes:

  • Provide the travel services and products that you have requested (e.g., flight booking, hotel stays, car rentals, provision of ancillary products and services), including generating your PNR and transfer of such PNR and other personal data to other travel suppliers or service providers as needed for travel arrangements or payment processing/refunding/dispute resolution;
  • Allow you to register as a member (“Member”) and provide Member-only account functionality (e.g., booking details, travel preferences, billing details, etc.);
  • Administer the GoCheapAir Inc. Rewards Program;
  • Provide user personalization and more relevant features or content;
  • Fraud detection and prevention;
  • Respond to customer inquiries and provide support (e.g., interfacing with live agents, such as through contact centers, for issue resolution or recommendations based on search history and previous bookings, elicit feedback and comments, outbound ‘flight failure’ team calls if there is a booking or purchase checkout issue, submission and resolution of Customer Support Requests via the Customer Support link, travel confirmations and other important updates);
  • Understand and improve the user experience through leveraging of analytics and metrics;
  • Direct marketing (e.g., special offers, deals, sweepstakes, etc.) that may be of interest to you, such as through our newsletter and advertisements (including advertisements from third parties);
  • Comply with applicable law and enforce our rights (e.g., intellectual property rights, prevent suspicious or potentially illicit activities, enforce our Privacy Policy or Terms and Conditions); and
  • As otherwise described or expanded upon within this Notice (and, to the extent not conflicting, our Privacy Policy) or at the time of collection;

In addition, the “E.U.-U.S. and Swiss-U.S. Privacy Shield” section within the GDPR privacy notice should be reviewed if your personal information is transferred from the EEA or Switzerland to the US pursuant to the E.U.-U.S. or Swiss-U.S. Privacy Shield.

Your California Privacy Rights

CCPA: If you are a resident of California, please review the California Consumer Privacy Act privacy notice here.

This California Consumer Privacy Act (“CCPA”) privacy notice (this “CCPA Notice”) is included in our Privacy Policy and applies to Fareportal’s processing of personal information of California consumers (as the terms “personal information” and “consumer” are defined under the CCPA) (collectively, “Consumers,” “you,” or “your”). Any capitalized terms or other terms not defined herein shall have the meaning ascribed to them in the Privacy Policy or, if not defined herein or in the Privacy Policy, the CCPA. To the extent of any conflict between this CCPA Notice and the rest of our Privacy Policy, this CCPA Notice shall control only with respect to Consumers and their personal information.

“Shine the Light” Law: If you are a resident of California, you may request information regarding the disclosure of your Personal Information to our affiliates and to third parties for the recipients’ own direct marketing purposes. To make such a request, please contact us in accordance with the “Contacting Us” section below.

Do Not Track: Please note that, at this time, we do not respond to Do Not Track (DNT) signals or similar signals.

General

This CCPA Notice provides further detail regarding (a) how we have processed Consumers’ personal information within the past twelve (12) months and (b) your rights under the CCPA.

Personal Information We May Collect

We collect the categories of personal information listed below. For more information regarding the business and commercial purposes for which we may use such personal information (and the categories of entities we may share with for such purposes)

However, note that financial information is processed solely for business purposes relating to completing your transactions, fraud management and security, accounting/auditing, and compliance with applicable law, and disclosed to our payment processors, financial institutions, accounting/auditing firms, and other entities relating thereto.

For the table below, the list of examples for each category is intended to be illustrative and not exhaustive. We also may not collect or disclose every example listed (or use every example for each purpose linked above).

Categories of Personal Information Examples Sources of Personal Information
Identifiers
  • Name
  • Alias
  • Postal address
  • Online identifier
  • Internet Protocol address
  • E-mail address
  • Account name
  • Driver’s license number, passport number, or other similar identifiers.
  • Unique personal identifier
    (i.e. – persistent identifier such as device identifier)
Websites, Apps, or Services (information collected directly from user)

Other Sources (e.g., public databases, marketing and analytics partners, social media platforms, booking suppliers and intermediaries, fraud management and security vendors)
Commercial Information
  • Products or services purchased, obtained, considered, such as booking details (e.g., name, origination/destination, date of birth, gender, co-traveler details)
  • Other purchasing or consuming histories or tendencies
Websites, Apps, or Services (information collected directly from user)

Other Sources (e.g., public databases, marketing and analytics partners, social media platforms, booking suppliers and intermediaries, fraud management and security vendors)
Internet or Network Activity
  • Booking search history
  • Email clickthroughs
  • Sign-ups/Registrations
  • Interaction with an advertisement
Websites, Apps, or Services (information collected directly from user)

Other Sources (e.g., marketing and analytics partners, social media platforms, fraud management and security vendors)
Geolocation
  • Physical location of desktop or mobile device
Websites, Apps, or Services (information collected directly from user)

Other Sources (e.g., marketing and analytics partners, social media platforms, fraud management and security vendors)
Audio, electronic, visual, thermal, olfactory, or similar information
  • Contact center calls
Websites, Apps, or Services (information collected directly from user)

Other Sources (outsourced contact center locations)
Inferences drawn from any of these personal information categories
  • Travel preferences
  • Potential fraudulent behavior or activity
  • Search history (e.g., bookings searched)
  • Web behavior
  • Characteristics
  • Propensity
Websites, Apps, or Services (information derived from user interaction)

Other Sources (e.g., marketing and analytics partners, social media platforms, fraud management and security vendors)
Financial Information (information described in CA Code §1798.80)
  • Bank account number
  • Credit card number
  • ebit card number
  • Other financial information
Websites, Apps, or Services (information collected directly from user)

Your CCPA Rights

Access: You may request access to the personal information that Fareportal collected and maintained about you (along with information regarding its use and disclosure) over the past twelve (12) months upon appropriate verification. You may only make such requests twice (2) per every twelve (12) months.
Deletion: You have the right to request that Fareportal delete personal information collected and maintained about you, subject to certain exceptions. Once your request is verified and we have determined that we are required to delete that information in accordance with applicable law, we will delete your personal information accordingly. Your request to delete your personal information may be denied if it is necessary for us to retain your information under one or more of the exceptions listed in the CCPA. Please note that a record of your deletion request may be kept pursuant to our legal obligations.
“Do Not Sell” Requests: You may opt-out of “sales” of personal information by clicking the “Do Not Sell My Info” link (set to appear for California-based IP addresses detected via third-party service).

Subject to applicable law, opting out of “sales” will not prevent your personal information from being shared with our affiliates for any purpose or with third parties for non-marketing purposes (for example, to process one of your transactions). Further, this opt-out mechanism will not prevent the transfer of personal information in connection with a merger, reorganization, acquisition, or similar event.

Your Canadian Privacy Rights

If you are a resident of Canada, you may request information regarding the disclosure of your Personal Information to our affiliates and to third parties for the recipients’ own direct marketing purposes. To make such a request, please contact us in accordance with the “Contacting Us” section below.

Sensitive Information

We ask that you not send us, and you not disclose, any sensitive Personal Information (e.g., Social Security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership) on or through the Services or otherwise to us.

Updates To This Privacy Policy

We may change this Privacy Policy (including any constituent part included herein). The “Effective Date” at the top of this page indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Websites, Apps, and the Services, as applicable. Your use of the Websites, Apps, or the Services, as applicable, following these changes means that you accept the revised Privacy Policy.