Privacy Policy
Last Updated: August 2026 | Dedicated Data Privacy & PCI Protection Notice
Merchant Information & Data Security Standard
Privacy Policy & Payment Data Protection
Your Flights LLC — MCC 4722 Online Travel AgencyAt Your Flights LLC ("Company", "We", "Us", or "Our"), protecting traveler privacy and maintaining the security of personal data is a primary operational standard. This Privacy Policy details how we collect, store, utilize, and protect passenger information in accordance with applicable US data privacy regulations and international payment security standards.
1. Information We Collect
To process flight reservation inquiries and facilitate airline ticket issuance, we collect the following categories of personal information:
- Passenger Identity Data: Full legal name (first, middle, last as shown on passport or government ID), gender, and date of birth.
- Contact Information: Primary contact email address and mobile phone number for itinerary and ticket delivery.
- Travel Details: Preferred departure/arrival airports, travel dates, cabin class preference, and special assistance requests.
- Technical & Device Information: IP address, browser type, operating system, and session timestamps collected strictly for security audit trails and risk scoring.
2. Complete Exclusion of Raw Payment Card Storage (PCI Compliance)
Your Flights LLC never collects, processes, stores, or transmits credit card numbers, expiration dates, CVV codes, or banking credentials on our web servers or databases. All monetary settlements are conducted through tokenized, encrypted Payment Links generated via Stripe, Inc., a Level 1 PCI-DSS certified payment processor. Payment card information is submitted directly into Stripe's secure end-to-end encrypted payment page.
3. Purpose & Legal Basis for Processing
Your personal data is processed strictly for legitimate travel business purposes:
- Creating and managing Passenger Name Records (PNR) with operating airlines and Global Distribution Systems (GDS).
- Dispatching secure billing links, invoice confirmations, and official e-tickets via email.
- Providing customer support regarding flight schedule changes, cancellations, or special requests.
- Auditing transaction security and preventing fraudulent inquiries.
4. Third-Party Data Sharing & Messaging Opt-In Privacy
We do not sell, rent, or trade passenger personal information to third-party marketing companies. Data is disclosed solely to authorized travel fulfillment partners, including operating airlines, GDS operators (e.g. Amadeus, Sabre), and payment processor Stripe, Inc., exclusively for fulfilling requested booking services.
SMS and WhatsApp Opt-In Privacy Guarantee:
Notwithstanding any other provision in this Privacy Policy, no mobile phone numbers, subscriber contact info, or messaging opt-in consent records will be shared, sold, rented, or traded with third parties, affiliates, or advertising networks for marketing or promotional purposes. All text messaging originator opt-in data and consent will strictly not be shared with any third parties under any circumstances.
5. Data Retention & Technical Safeguards
Passenger contact records and booking logs are retained strictly in accordance with US accounting, tax, and aviation record-keeping mandates. All data transfers across our portal are protected using industry-standard SSL/TLS 1.3 256-bit encryption protocols.
6. Traveler Rights & Data Contact Desk
Travelers may request access to, correction of, or deletion of their contact records by emailing support@yourflightsllc.com or calling our hotline at +1-810-505-5186. Record deletion requests are subject to mandatory statutory retention rules for financial transactions.