Privacy Policy

Who we are (Data Controller)
SabaiFly flight search service.
Email: [email protected]

What we collect and why

• Search inputs (origin/destination, dates, cabin, currency, passenger counts) — to show flight results.
• Technical data (IP address, user agent, timestamps, basic logs) — to operate, secure and troubleshoot the service.
• Preferences (language/currency, cookie consent) — to remember your settings.
• Outbound clicks (when you choose "Book") — your browser goes to a partner (e.g., Aviasales, Kiwi). They process your data under their own privacy policies.

Legal bases (UK GDPR)

• Legitimate interests — provide search, prevent abuse, keep the site secure.
• Consent — for any non-essential cookies or similar technologies (none used by default).
• Contract — where needed to deliver features you request.

Processors & third parties

• Cloudflare — hosting/CDN/edge security (global PoPs).
• Travelpayouts — autocomplete API and affiliate platform.
• Aviasales / Kiwi — booking partners; they are independent controllers of their sites.
• Static assets from images.kiwi.com (airline logos).

International transfers

Because we use global hosting/CDN and international partners, your data may be processed outside the UK. We rely on safeguards provided by our suppliers (e.g., Standard Contractual Clauses) where applicable.

Retention

Server logs typically 30–60 days. Preference cookies/local storage until you change them or clear your browser data. We do not store your booking details; bookings happen on partner sites.

Your data rights (UK GDPR)

As a UK resident (and, where applicable, under the UK GDPR), you can:

• Access your personal data we process.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") where applicable.
• Restrict or object to processing where applicable, including processing based on legitimate interests.
• Portability — receive your data in a machine-readable format and transmit it to another controller where technically feasible.
• Withdraw consent at any time where processing relies on consent (this does not affect past lawful processing).

How to exercise your rights

Email [email protected] from the address you used on our site (if applicable) and include the details below. We'll respond within one month.

Suggested email template:
Subject: UK GDPR request — [your right]
Hello, I would like to exercise my UK GDPR right to [access/rectification/erasure/restriction/objection/portability].
Details: [describe your request and any relevant dates/identifiers].
Please reply to this email address. Thank you.

You can complain to the UK Information Commissioner's Office (ICO) if you are unhappy with our response: ico.org.uk. We encourage you to contact us first so we can try to resolve the issue.

More information we must provide

• Controller: SabaiFly flight search service — [email protected].
• Legal bases: Legitimate interests (provide and secure the service); consent (non-essential cookies if introduced); contract (where needed to deliver requested features).
• Recipients: Hosting/CDN (Cloudflare); autocomplete/affiliate (Travelpayouts); booking partners (Aviasales, Kiwi) when you click through.
• International transfers: Global hosting/CDN and partners; we rely on safeguards provided by our suppliers.
• Retention: Server logs typically 30–60 days; preferences until you change/clear them; we do not store booking details.

Last updated: 24 September 2024