Privacy Policy

• Privacy Policy
• Last Updated:18/02/2025
• At Fly-eVisa (“we,” “us,” or “our”), we value your trust and are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our platform and associated services, including eVisa applications, flight bookings, accommodations, car rentals, travel insurance, and eSIM connectivity. It also outlines your rights regarding your personal data and how you can contact us.

Privacy Policy Summary
This is a summary of our Privacy Policy. For the full details, please read the complete policy below.
What does this Privacy Policy cover?
How and what types of personal data we collect and use.
When and with whom we share your personal data.
Your rights and choices regarding your personal data.
How you can access, update, or delete your personal data.
What personal data do we collect?
We collect personal data when:
You provide it to us (e.g., when creating an account, applying for an eVisa, or making a booking).
It is collected automatically (e.g., through cookies and tracking technologies).
We receive it from third parties (e.g., travel partners, payment processors, or government authorities).
When is your personal data shared?
Your personal data may be shared with:
Travel suppliers (e.g., airlines, hotels, car rental companies).
Payment processors and financial institutions.
Government authorities for visa processing.
Third-party service providers who assist us in delivering our services.
What are your rights and choices?
You have the right to:
Access, correct, or delete your personal data.
Opt out of marketing communications.
Withdraw consent for data processing (where applicable).
Object to the use of your data for certain purposes.

Full Privacy Policy

1. Categories of Personal Data We Collect
   We collect the following types of personal data:
   Personal Information
   Identification Data: Name, passport details, date of birth, nationality, government-issued ID numbers.
   Contact Information: Email address, phone number, residential address.
   Payment Information: Credit card details, billing address, bank account information.
   Travel Information: Flight details, accommodation bookings, car rental reservations, travel insurance details.
   Preferences: Travel preferences, dietary requirements, accessibility needs.
   Non-Personal Information
   Device Information: IP address, browser type, operating system, device model.
   Usage Data: Pages visited, search history, booking history, interactions with our platform.
   Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies.
2. How We Use Your Personal Data
   We use your personal data for the following purposes:
   Platform Usage and Booking Purposes
   To process and manage your eVisa applications.
   To book flights, accommodations, car rentals, and other travel-related services.
   To create and manage your user account.
   To process payments and prevent fraud.
   Communication and Customer Service
   To respond to your inquiries and provide customer support.
   To send booking confirmations, updates, and emergency notifications.
   To facilitate communication between you and travel suppliers.
   Marketing Purposes
   To send you promotional offers, newsletters, and travel recommendations (with your consent).
   To personalize your experience on our platform.
   To measure the effectiveness of our marketing campaigns.
   Security and Compliance
   To verify your identity and prevent fraudulent activities.
   To comply with legal obligations, such as tax and immigration laws.
   To protect our rights and interests, and those of our users.
3. Sharing of Personal Data
   We may share your personal data with the following categories of recipients:
   Travel Suppliers
   Airlines, hotels, car rental companies, and other travel service providers to fulfill your bookings.
   Third-Party Service Providers
   Payment processors, IT service providers, and marketing agencies who assist us in delivering our services.
   Government Authorities
   Immigration and customs authorities for visa processing and compliance with legal requirements.
   Business Partners
   Partners who offer joint promotions or services (e.g., loyalty programs, travel insurance providers).
   Legal and Regulatory Bodies
   To comply with legal obligations, respond to subpoenas, or protect our rights.
4. Your Rights and Choices
   You have the following rights regarding your personal data:
   Access: Request a copy of the personal data we hold about you.
   Correction: Request corrections to inaccurate or incomplete data.
   Deletion: Request deletion of your personal data (subject to legal obligations).
   Opt-Out: Opt out of marketing communications or withdraw consent for data processing.
   Objection: Object to the use of your data for certain purposes (e.g., profiling).
   To exercise these rights, please contact us at [Insert Contact Information].
5. Data Security
   We prioritize the protection of your personal data and implement industry-standard technical and organizational security measures to safeguard it against unauthorized access, accidental loss, alteration, or destruction. Our security framework includes:
   Encryption: Sensitive data (e.g., payment details, passport information) is encrypted using AES-256 encryption for data at rest and TLS 1.2+ protocols for data transmitted over networks.
   Access Controls: Strict role-based access restrictions ensure only authorized personnel can access your data, with multi-factor authentication (MFA) required for high-risk systems.
   Infrastructure Security: Regular vulnerability scans and penetration testing are conducted by certified third-party experts to identify and remediate potential risks.
   Employee Training: Staff undergo mandatory cybersecurity training, including phishing simulations and data handling protocols, to reinforce compliance with our security policies.
   Data Minimization: We only collect and retain data essential for providing our services, reducing exposure to potential breaches.
   Incident Response: A dedicated 24/7 security team monitors for threats, and we maintain an incident response plan to promptly address and mitigate any suspected breaches.
   Compliance Audits: We undergo annual audits to verify alignment with global standards (e.g., ISO 27001) and update our practices in response to evolving threats.
   While no system is entirely immune to risks, we continuously refine our safeguards to uphold the confidentiality and integrity of your data.
6. International Data Transfers
   To deliver our services effectively, your personal data may be transferred to and processed in countries outside your jurisdiction, including nations that may not have data protection laws equivalent to those in your home country (e.g., non-European Economic Area [EEA] countries, the United States, or Singapore). Such transfers occur in the following scenarios:

Service Providers: Data may be shared with third-party vendors (e.g., cloud hosting providers, customer support platforms) located globally.
Government Authorities: Visa applications often require sharing data with immigration authorities in your destination country.
Travel Partners: Airlines, hotels, or car rental companies may process your data in their local systems.

Safeguards for Cross-Border Transfers
Where legally required (e.g., under the EU General Data Protection Regulation [GDPR]), we ensure such transfers comply with applicable laws by implementing one or more of the following safeguards:

Standard Contractual Clauses (SCCs): We use EU-approved SCCs with recipients in non-adequate countries to bind them to GDPR-level protections.
Binding Corporate Rules (BCRs): For intra-group transfers, we adopt BCRs validated by EU data protection authorities.
Adequacy Decisions: We prioritize transfers to countries deemed “adequate” by the EU (e.g., Canada, Japan).
Explicit Consent: In limited cases, we may seek your explicit consent for specific transfers after informing you of potential risks.

Your Rights
You may request details about the safeguards applied to your data (e.g., copies of SCCs) by contacting us at contact@fly-eVisa.com. We will not transfer your data to high-risk jurisdictions without your informed consent unless legally obligated (e.g., for visa issuance).
Ongoing Monitoring
We regularly review the legal and regulatory environments of recipient countries and will update our safeguards as needed to address emerging risks.

7. Retention of Personal Data
   We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy. For example:
   Booking and payment data: 7 years (to comply with tax laws).
   eVisa applications: 2 years after your travel date.
   Marketing data: Until you unsubscribe or withdraw consent.
8. Minors
   Our services are not directed at minors under the age of 16. If you are a parent or guardian and believe we have inadvertently collected personal data from a minor without consent, please contact us immediately at contact@fly-eVisa.com.
9. Updates to This Privacy Policy
   We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.
10. Contact Us
    If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
    Email: contact@fly-eVisa.com
    Phone: +212 6-7704-7171
    Address: 26 Rue Aguelmane Sidi Ali, Rabat 10100, Morocco