1. The short version
We collect what is needed to book and support your travel, and nothing more. We do not sell personal data. Card details never reach our servers. You can ask for a copy of your data, ask us to correct it, or ask us to delete your account at any time.
2. What we collect and why
| Data | Why | Kept for |
|---|---|---|
| Name, email, phone | To create your account, confirm bookings and contact you about a trip | While the account is open, then 90 days |
| Passenger names and dates of birth | Airlines require them to issue a ticket | 7 years (tax and aviation records) |
| Passport number, nationality, expiry | Only for international itineraries, where the carrier requires it | Until the trip completes, then 90 days |
| Booking, PNR and ticket records | To manage, change, cancel and refund your booking | 7 years |
| Payment reference, amount and status | To reconcile payments and process refunds | 7 years |
| IP address, device and session records | Security, fraud prevention and rate limiting | 90 days |
3. What we never collect
We do not collect or store card numbers, expiry dates or CVV. Those are entered inside the payment gateway's own secure form and never pass through our systems. We do not ask for data an airline does not require — a domestic booking never asks for passport details.
4. Who we share it with
- Airlines and ground-transport operators, to make and manage your booking. This is unavoidable — they cannot issue a ticket without the passenger details.
- Our payment gateway, to take payment and process refunds.
- Communication providers, to send booking emails, SMS and WhatsApp messages.
- Authorities, where the law requires it, including advance passenger information regimes for international travel.
We do not sell personal data, and we do not share it for third-party advertising.
5. International transfers
A booking on an international route necessarily involves sending passenger details to a carrier or authority outside India. Where we use a processor outside your country, we do so under contractual safeguards appropriate to that transfer.
6. Your rights
Depending on where you live, you have some or all of the following rights. We honour them regardless of jurisdiction:
- Access — a copy of the personal data we hold about you.
- Correction — fix anything inaccurate. Most fields you can edit yourself in your profile.
- Erasure — close your account. We erase your identifying data; booking and payment records are retained in pseudonymised form where tax and aviation rules require it.
- Objection and restriction — tell us to stop a particular use, such as marketing.
- Grievance — complain to us and, if unsatisfied, to your supervisory authority.
You can close your account yourself from your profile, or email aerovistabookings@gmail.com. We respond within 30 days.
7. Legal framework
We handle personal data in line with India's Digital Personal Data Protection framework, and with the GDPR and equivalent regimes in other jurisdictions where we operate. Our grievance officer can be reached at the address above.
8. Security
Passwords are stored using a memory-hard hashing function and are never recoverable. Sessions use signed, HTTP-only cookies. Access to customer data by our staff is role-based and every access to a booking record is written to an audit log. We describe our actual practices here; we do not claim certifications we have not obtained.
9. Cookies
See our cookie policy. In short: we use a session cookie to keep you signed in and nothing else that identifies you.
10. Contact
aerovistabookings@gmail.com · AeroVista Bookings, Plot No. 10, Bhagwan Nagar, near Bank of Maharashtra, Nagpur, Maharashtra, India