Privacy Policy

1. Information we collect

2. How we use your information

We use the information we collect to:

• Provide the search, account, support, and checkout experience on this website.
• Communicate booking confirmations, itinerary updates, and support responses.
• Process and verify payments through Razorpay, and investigate a disputed or duplicate charge.
• Send price alerts and travel notifications you have requested.
• Improve the Services, conduct analytics, and prevent fraud and abuse.
• Comply with legal obligations, respond to lawful requests, and enforce our Terms and Conditions.

3. Our legal basis for processing

Where privacy law requires a stated legal basis for processing, FlightNeed relies on: performance of the contract formed by these policies and any booking you request (search, account, checkout, support); FlightNeed's legitimate interests in operating, securing, and improving the Services (fraud prevention, analytics, service quality); compliance with a legal obligation (tax and travel-industry record-keeping, responding to lawful requests); and, for optional communications such as marketing emails or non-essential cookies, your consent, which you may withdraw at any time as described in Sections 10 through 12.

4. How we share your information

5. International data transfers

FlightNeed is based in India and processes data primarily on infrastructure located there. Where a service provider, payment processor, or GDS/airline partner operates outside India, your information may be transferred to and processed in that country, which may have data-protection standards different from India's. Where required by applicable law, including the Digital Personal Data Protection Act, 2023, FlightNeed uses appropriate contractual and technical safeguards for these transfers and does not transfer personal data to a country or territory restricted by the Central Government of India.

6. Your rights under Indian data protection law

If you are located in India, you have the following rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules:

• Right to access: Request a summary of the personal data we hold about you and the processing activities carried out on it.
• Right to correction and erasure: Request correction of inaccurate or incomplete personal data, or erasure of data that is no longer necessary for the purpose it was collected, subject to the legal retention obligations described in Section 9.
• Right to grievance redressal: Raise a complaint about how your personal data is processed and receive a response through the grievance process described in Section 18.
• Right to nominate: Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
• Right to withdraw consent: Withdraw consent for any processing that relies on consent, without affecting the lawfulness of processing already carried out.

To exercise these rights, contact privacy@flightneed.com. We verify your identity before processing a request.

7. Grievance redressal and escalation

FlightNeed has appointed a Grievance Officer under the Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021; see Section 18 for contact details and response timelines. If a privacy complaint is not resolved to your satisfaction, you may also approach the Data Protection Board of India once it is operational under the DPDP Act, 2023, or the National Consumer Helpline (1915 / consumerhelpline.gov.in) for consumer-related complaints.

8. Rights for EEA, UK, and Swiss residents

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing based on legitimate interests, subject to the exceptions provided by applicable law. You also have the right to lodge a complaint with your local data-protection supervisory authority. Contact privacy@flightneed.com to exercise these rights.

9. Data retention

• Booking records: Retained for 7 years from the date of travel, to meet travel-industry and tax record-keeping obligations.
• Support records: Retained for 3 years after a case is closed.
• Security logs: Retained for 12 months.
• Search data: Session data is retained for 30 days; aggregated analytics may be retained longer in de-identified form.
• Account data: Retained while your account is active, and for a reasonable period after closure to resolve open bookings, disputes, or legal obligations.

10. Cookies and tracking

We use session cookies necessary for the operation of the Services (such as keeping your search and checkout progress), and optional analytics cookies to understand how the site is used, only where you have consented through the cookie preference banner. You can change your choice at any time; see our Cookie Policy for the full list of categories and how to manage them in your browser.

11. Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" signal or a Global Privacy Control (GPC) signal. Because FlightNeed does not sell personal information or share it for cross-context behavioral advertising, our practices do not change based on these signals today; where GPC or a similar signal is legally recognized as an opt-out request in your jurisdiction, we honor it as an opt-out of any sale or sharing for that browser.

12. Marketing communications

Booking confirmations, price alerts you request, and other transactional or service messages are not optional marketing and will continue regardless of any marketing opt-out, because they are necessary to deliver the Services you asked for. If FlightNeed sends promotional email, every message includes an unsubscribe link; you may also opt out by contacting privacy@flightneed.com.

13. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS), server-side input validation, hashed password storage, and access controls limiting who can view traveler and payment-status data. No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@flightneed.com.

14. Automated decisions

FlightNeed uses automated logic to rank and filter search results (for example, sorting by "Best," "Cheapest," or "Fastest") and to apply an admin-configured markup or discount to a fare. These processes affect what you see and the price you are quoted, but do not make a final legal or similarly significant decision about you without the opportunity for human review through our support channels.

15. Third-party links

The Services may link to or embed third-party content, including airline websites for check-in, partner offer widgets, and the Razorpay checkout. These third parties have their own privacy practices, which this policy does not cover; review their policies separately.

16. Children's privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. A parent or guardian may book travel for a minor as a traveler on their own booking; this does not create an account or independent profile for the minor. If we learn we have collected personal information directly from a child under 13, we will delete it. Contact privacy@flightneed.com if you believe this has happened.

17. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or a notice on the website at least 30 days before they take effect. Continued use of the Services after the effective date constitutes acceptance of the updated policy.

18. Contact and grievance officer