Privacy Policy

The aim of this policy, in conjunction with our Terms of Service, is to elucidate the procedures through which we collect, utilize, and safeguard your personal data across our applications and websites. We periodically assess and amend this policy to ensure compliance with various privacy regulations worldwide, and the latest version is accessible here. Should substantial modifications be implemented, we may notify our users via notices disseminated through our applications or alternative communication channels.

We define 'personal data' expansively, encompassing any information relating to you as an identifiable individual. Examples include your name, email address, contact details, IP address, or device identifiers. Additionally, we may retain other, less specific data such as your usage patterns or geographical location when utilizing our services. Given our collaborations with suppliers who also handle your personal information (e.g., travel sites, agents, airlines), particularly during the booking process, we consistently furnish links enabling you to review their privacy policies and terms and conditions alongside your booking.

The information you provide to us may include personal data necessary for booking travel for yourself and others. This encompasses various details, from the dates and destination you select in a search to essential information required for booking with a Travel Supplier, such as names and contact details. Additionally, it may involve content like reviews or photographs uploaded to our services for sharing with other travellers. Importantly, the decision to provide us with this information is entirely yours, and you have the discretion to choose whether or not to do so.

Service delivery and bookings.

We utilize your data to facilitate the execution of contracts, primarily bookings with travel suppliers or with us. This process can take various forms:

• Customizing website displays to suit your device, whether it's a mobile phone or tablet.
• Presenting search results that align with your specified criteria, such as country of origin.
• Upon selection of a travel supplier's offering, we utilize information like your device ID, IP address, and search details to redirect you to their platform.
• When conducting a booking on your behalf, we transmit necessary data (e.g., contact information, passport details) to the travel supplier's system to finalize the transaction.
• Contacting you with essential messages, notifications, or alerts required for service delivery, such as booking confirmation emails or critical communications like flight status updates or modifications to our services or policies.
• Addressing customer inquiries, such as responding to customer service emails or other contact channels.
• Allowing you to manage any accounts you maintain with us.

Types of Data

Depending on your interactions with our services, we may collect or process the following categories of personal data through the three methods outlined above:

Contact Information: This includes your name, address, email address, telephone number, and similar details.

Identification Information: Details from your passport, which may include your name, address, gender, immigration status, nationality, and date of birth.

Payment Information: Your credit or debit card number, expiry date, and verification code when making travel bookings through us or our partners.

Travel and Booking Information: This encompasses your booking reference, booking history, passenger name record (PNR), identification or passport details, and travel itinerary.

Demographic Information: Your age, gender, location, and preferred language when using our services. Additionally, for job applications with Skyceylon, we may request certain information for diversity monitoring purposes, such as race and ethnicity.

Device and Location Information: Generic details from your device, such as IP address, device type, make, model, and operating system. Location data based on GPS from your mobile device (when permission is granted), as well as approximated location based on IP address.

Application Usage Information: This includes your Skyceylon search history, travel preferences, interactions with our sites and applications, links clicked, and redirection to Travel Supplier websites or apps for booking completion.

User Preferences Information: Selected preferences associated with your Skyceylon account, including consents, email and push notification preferences, and advertisement preferences stored in cookies.

Previous Communications Information: Communications received from you, such as feedback, help requests, and queries via email, online chat, instant messaging, or social media. Metadata associated with these communications, such as time and date.

Employment Information or Provided Content: Information submitted during correspondence with us, such as signatures, photographs, opinions, and employment history details for job applications with Skyceylon.

Social Media Linked Information: If you use third-party social media platforms to log in to Skyceylon, your email address is automatically collected. Additionally, information from your publicly accessible LinkedIn (or other social network) profile, such as name, email address, and CV for recruitment purposes, may be collected if provided to us by a third party in accordance with their terms and privacy policies.

Disclosing data to third parties

There are several scenarios where we may share information with third parties:

• Upon Your Request: If you specifically request us to share your information with a third party.
• As Part of Business Operations: When sharing information with travel partners or other necessary entities integral to the business flow.
• Legal Requirements: When required by law or in response to legal requests or obligations.

When you navigate away from our site to a travel partner's platform, they will collect data according to their own privacy policies

Moreover, we may engage third-party service providers to assist in service delivery, such as payment providers who utilize your data on our behalf. These providers are contractually obligated to handle your data in accordance with applicable laws and regulations.

At times, we may receive information about you from third parties based on how you choose to engage with us. For instance, if you visit our website through a promotional partner or use our social network login feature to access your Skyceylon account. Additionally, if you are redirected to a Travel Supplier's website or app to finalize your booking, we might gather information from them regarding the completion of your trip and the details of your booking.

It's important to note that our services are not intended for children under the age of 13, and we do not knowingly collect personal data from individuals in this age group. We will promptly delete any information that we discover has been collected or received from children under 13 without the express consent of their parent or legal guardian.

We may disclose your information if deemed necessary to enforce our Terms of Service or to prevent, detect, or prosecute illegal or suspected illegal activities, such as fraud. This may also be necessary to prevent other types of damage or in response to legally binding requests, legal actions against us, or to uphold our rights and claims.

Business Usage

We also utilize data to enhance our services and safeguard or advance our legitimate interests, encompassing various crucial aspects such as security, fraud prevention, and assessing user feedback on new features. Examples of such usage include:

• Security and fraud prevention: We may employ techniques like checking IP addresses or locations to verify payment origins against booking details, as well as to prevent abuse by automated software agents (bots).
• Bug resolution: We address issues such as incorrect displays on various devices to ensure accurate and efficient user experiences.
• Customer service provision: This involves utilizing our systems or aiding our supplier partners in understanding users' journeys before reaching their site.
• Understanding user behaviour: We gather insights such as the number of users redirected to or making bookings withSkyceylon or its partner travel suppliers, analysing user interactions within our sites and applications to enhance features, conducting A/B tests, and monitoring email communication interactions.
• Personalization: Tailoring your experience on our sites and applications involves remembering preferences such as language and currency, providing personalized content based on opt-in preferences, and displaying relevant advertisements.
• Data analytics: We analyse anonymized requests from number of users to discern trends in travel demand, supplier preferences, fare types, and other variables, aiding in strategic business decisions for Skyceylon.
• Processing job applications: We process personal data submitted through job applications in accordance with our employment practices.

We ensure that when processing personal data based on legitimate interests, it remains relevant and limited to the intended purpose. Additionally, we take measures to ensure that our legitimate interests do not unduly infringe upon your rights and freedoms.

Data usage for Advertising

When utilizing our websites or applications, you might come across advertisements delivered either directly by us or through third-party advertising providers. At times, these advertisements may be tailored to suit your interests. This customization might involve incorporating details derived from your previous searches related to hotels or flights.

Alternatively, advertisements may be interest-based, sourced from third-party ad networks equipped with information about websites you've engaged with.

Consent for data usage.

We will explicitly seek your consent for specific purposes, including:

• Sending one-way communications via email or messaging, such as price alerts or email newsletters.
• Placing cookies on your device, where local legal requirements mandate consent.
• Obtaining feedback through one-on-one surveys or similar methods.

If we process personal data solely based on your consent, you have the right to withdraw this consent at any time. You can do so by using the provided functionality within the relevant product feature or by contacting us directly.

For site usage, booking, and app usage, your consent is implied through acceptance of the terms of service. Your usage of the application or site is dependent on this consent. You can generally withdraw this consent by requesting to do so or by discontinuing your use of the Skyceylon site.

Data Storage

At Skyceylon Pvt Ltd, safeguarding your personal data is our primary concern. We limit access to your information to only those employees who need it for their job responsibilities and to deliver our services. Although no website or app can promise absolute security, we have established a comprehensive organizational security process to protect your personal data to the greatest extent possible.

We employ a variety of technical, architectural, and administrative security measures, along with industry best practices, to maintain the privacy of your data and ensure it is used in line with your permissions. Our cloud-based data storage includes strict access controls and encryption to protect data stored on disk. Additionally, all data transmission is secured using TLS and HTTPS/SSL encryption protocols to enhance security during transmission.

Furthermore, we have implemented a rigorous end-to-end security process with our third-party vendors, which includes regular security assessments, documentation, and updates.

Privacy and data protection are core values instilled in all Skyceylon Pvt Ltd employees through training and enforced policies. We follow the principle of least privilege (PoLP), providing employees with only the necessary level of access to data in each policy or technical system. We also employ techniques such as anonymization to minimize connections to personally identifiable data.

Any introduction of new systems connected to our data or changes in data collection undergoes a comprehensive privacy review and impact assessment to ensure compliance with all of our data protection policies.

The information we gather from you is stored on secure servers located in data centres situated in Australia. On occasion, we may also utilize servers located closer to your geographical location, as required by legal regulations. We exclusively utilize major Third Party Cloud Platform providers, which have undergone audits and obtained certifications as well as other relevant local physical and network certifications. This ensures that our systems and your data benefit from top-tier security measures.

While certain countries where we operate may have varying or less rigorous data protection and security standards, our policies and technology are designed with a high baseline of security. If local laws in these countries necessitate standards surpassing this baseline, we will implement the necessary safeguards to protect your data accordingly. This involves regularly reviewing technical, organizational, and administrative security measures, and staying updated on evolving privacy standards worldwide.