Privacy Policy
1. Who is responsible
Flight Corner Pty Ltd (ABN 91 694 615 702), trading as Flight Scanner, is responsible for your personal information. Privacy contact: contact@flights-scanners.com. Postal address: 553 Melton Highway, Sydenham, Victoria, Australia. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles, and, where they apply to you, other privacy laws listed in section 10.
2. What we collect
We do not knowingly collect personal information from anyone under 18 unless an adult provides it as part of a booking. We do not intentionally collect sensitive information (such as health or religion). If you give us any in a special request, you agree we may share it with the hotel to meet that request.
| Type | Examples | Source |
|---|---|---|
| Booking details | Names of all guests, dates, destination, hotel, room, special requests | You |
| Contact details | Email address, phone number, country | You |
| Payment information | Payment status and the last digits of your card. Full card details are handled by our payment partner, not us | Payment partner |
| Travel documents | Only if a hotel or law requires them (for example, passport details) | You |
| Technical data | IP address, device and browser type, pages viewed, time, approximate location | Automatically |
| Cookies and similar tools | Session and preference cookies, analytics | Automatically |
| Communications | Emails, support messages, complaints | You |
| Children's details | Names and ages of child guests, given by an adult | The adult booker |
3. Why we use it
- To search, make, confirm, change and cancel your hotel booking.
- To take payment, prevent fraud, and meet tax and accounting rules.
- To send booking confirmations, service messages and important updates.
- To give customer support and handle complaints.
- To keep the website secure, fix faults and improve it.
- To meet legal obligations and enforce our Terms.
- To send marketing only if you have agreed or the law allows it. You can unsubscribe at any time.
If EU, UK or similar law applies to you, our legal bases are: performing our contract with you, our legitimate interests (security, fraud prevention, running and improving the service), legal obligation, and your consent (marketing and non-essential cookies).
4. Who we share it with
We share personal information only as needed:
- The hotel and our booking platform partner, so the booking can be made and honoured.
- Payment partner, to process payment and prevent fraud.
- Service providers for hosting, email delivery, security, analytics and customer support, under contract and only for our purposes.
- Professional advisers, regulators and law enforcement, when required or permitted by law.
- A buyer or successor, if our business is sold or restructured.
We do not sell your personal information. We do not share it for cross-context behavioural advertising.
5. Overseas transfers
Hotels and suppliers are in many countries, and our service providers may store data overseas. Before disclosing personal information overseas, we take reasonable steps to make sure the recipient protects it consistently with privacy laws, for example by contract. Where required (EU, UK and similar), we rely on approved safeguards such as standard contractual clauses. By making a booking, you understand that the hotel in the destination country will receive your details and may not be subject to Australian privacy law.
6. Cookies
We use essential cookies to run the site (for example, to keep your search and booking session). Where required by law, we ask for consent before using analytics or marketing cookies. You can control cookies in your browser settings. Blocking essential cookies may stop the booking process working.
7. How long we keep it
We keep booking records for as long as needed to provide service and handle disputes, and for at least 7 years where tax or accounting law requires. We delete or de-identify other information when it is no longer needed. Support emails are kept for 2 years.
8. Security
We use reasonable technical and organisational safeguards, including encrypted connections, access controls and limited staff access. No system is completely secure. If a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme, and any other regulator where law requires.
9. Your rights
You can ask us to:
- give you access to the personal information we hold about you;
- correct information that is wrong, out of date or incomplete;
- delete your information, where we are not required to keep it;
- restrict or object to some uses, including marketing and profiling;
- give you your data in a portable format (where the law gives you this right);
- withdraw consent at any time, without affecting earlier lawful use.
Email: contact@flights-scanners.com. We may need to verify your identity and will respond within 30 days. We do not charge to make a request, though a reasonable fee for access may apply where the law allows. If you are not happy with our response, you can complain to the OAIC (oaic.gov.au) or your local regulator.
10. Region-specific notes
Where these laws apply to you, you have the rights they give. This section adds to the rest of the policy.
| Region | Law | Key points |
|---|---|---|
| Australia | Privacy Act 1988, Spam Act 2003 | Rights of access and correction. Marketing needs consent and an unsubscribe option. |
| EU / EEA | GDPR | Rights listed in section 9. Right to complain to your supervisory authority. Transfers use safeguards. |
| United Kingdom | UK GDPR, Data Protection Act 2018 | As for the EU. The regulator is the ICO. |
| California, USA | CCPA / CPRA | Rights to know, delete, correct and opt out of sale or sharing. We do not sell or share personal information. We will not discriminate against you for using these rights. |
| South Africa | POPIA | Rights of access, correction and objection. You can complain to the Information Regulator. |
| India | Digital Personal Data Protection Act 2023 | Rights to access, correct, erase and grievance redress. Contact us at the address above. |
| UAE, Saudi Arabia, Kenya, Singapore, Thailand and other countries | Local data protection laws (for example PDPL, DPA 2019, PDPA) | We respect the rights these laws give you. Contact us to use them. |
11. Children
The website is for adults. We collect children's details only from a parent or guardian who is booking for them.
12. Links to other sites
Our site links to third-party sites, including our payment partner's checkout page. Their privacy policies apply there, and we are not responsible for them.
13. Changes
We may update this policy. The latest version is always on this page with its date. For material changes, we will tell you in a way the law requires.
