Privacy Policy

Last updated: 1 November 2026. Applies to flights-scanners.com hotel services.

1. Who is responsible

Flight Corner Pty Ltd (ABN 91 694 615 702), trading as Flight Scanner, is responsible for your personal information. Privacy contact: contact@flights-scanners.com. Postal address: 553 Melton Highway, Sydenham, Victoria, Australia. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles, and, where they apply to you, other privacy laws listed in section 10.

2. What we collect

We do not knowingly collect personal information from anyone under 18 unless an adult provides it as part of a booking. We do not intentionally collect sensitive information (such as health or religion). If you give us any in a special request, you agree we may share it with the hotel to meet that request.

TypeExamplesSource
Booking detailsNames of all guests, dates, destination, hotel, room, special requestsYou
Contact detailsEmail address, phone number, countryYou
Payment informationPayment status and the last digits of your card. Full card details are handled by our payment partner, not usPayment partner
Travel documentsOnly if a hotel or law requires them (for example, passport details)You
Technical dataIP address, device and browser type, pages viewed, time, approximate locationAutomatically
Cookies and similar toolsSession and preference cookies, analyticsAutomatically
CommunicationsEmails, support messages, complaintsYou
Children's detailsNames and ages of child guests, given by an adultThe adult booker

3. Why we use it

  • To search, make, confirm, change and cancel your hotel booking.
  • To take payment, prevent fraud, and meet tax and accounting rules.
  • To send booking confirmations, service messages and important updates.
  • To give customer support and handle complaints.
  • To keep the website secure, fix faults and improve it.
  • To meet legal obligations and enforce our Terms.
  • To send marketing only if you have agreed or the law allows it. You can unsubscribe at any time.

If EU, UK or similar law applies to you, our legal bases are: performing our contract with you, our legitimate interests (security, fraud prevention, running and improving the service), legal obligation, and your consent (marketing and non-essential cookies).

4. Who we share it with

We share personal information only as needed:

  • The hotel and our booking platform partner, so the booking can be made and honoured.
  • Payment partner, to process payment and prevent fraud.
  • Service providers for hosting, email delivery, security, analytics and customer support, under contract and only for our purposes.
  • Professional advisers, regulators and law enforcement, when required or permitted by law.
  • A buyer or successor, if our business is sold or restructured.

We do not sell your personal information. We do not share it for cross-context behavioural advertising.

5. Overseas transfers

Hotels and suppliers are in many countries, and our service providers may store data overseas. Before disclosing personal information overseas, we take reasonable steps to make sure the recipient protects it consistently with privacy laws, for example by contract. Where required (EU, UK and similar), we rely on approved safeguards such as standard contractual clauses. By making a booking, you understand that the hotel in the destination country will receive your details and may not be subject to Australian privacy law.

6. Cookies

We use essential cookies to run the site (for example, to keep your search and booking session). Where required by law, we ask for consent before using analytics or marketing cookies. You can control cookies in your browser settings. Blocking essential cookies may stop the booking process working.

7. How long we keep it

We keep booking records for as long as needed to provide service and handle disputes, and for at least 7 years where tax or accounting law requires. We delete or de-identify other information when it is no longer needed. Support emails are kept for 2 years.

8. Security

We use reasonable technical and organisational safeguards, including encrypted connections, access controls and limited staff access. No system is completely secure. If a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme, and any other regulator where law requires.

9. Your rights

You can ask us to:

  • give you access to the personal information we hold about you;
  • correct information that is wrong, out of date or incomplete;
  • delete your information, where we are not required to keep it;
  • restrict or object to some uses, including marketing and profiling;
  • give you your data in a portable format (where the law gives you this right);
  • withdraw consent at any time, without affecting earlier lawful use.

Email: contact@flights-scanners.com. We may need to verify your identity and will respond within 30 days. We do not charge to make a request, though a reasonable fee for access may apply where the law allows. If you are not happy with our response, you can complain to the OAIC (oaic.gov.au) or your local regulator.

10. Region-specific notes

Where these laws apply to you, you have the rights they give. This section adds to the rest of the policy.

RegionLawKey points
AustraliaPrivacy Act 1988, Spam Act 2003Rights of access and correction. Marketing needs consent and an unsubscribe option.
EU / EEAGDPRRights listed in section 9. Right to complain to your supervisory authority. Transfers use safeguards.
United KingdomUK GDPR, Data Protection Act 2018As for the EU. The regulator is the ICO.
California, USACCPA / CPRARights to know, delete, correct and opt out of sale or sharing. We do not sell or share personal information. We will not discriminate against you for using these rights.
South AfricaPOPIARights of access, correction and objection. You can complain to the Information Regulator.
IndiaDigital Personal Data Protection Act 2023Rights to access, correct, erase and grievance redress. Contact us at the address above.
UAE, Saudi Arabia, Kenya, Singapore, Thailand and other countriesLocal data protection laws (for example PDPL, DPA 2019, PDPA)We respect the rights these laws give you. Contact us to use them.

11. Children

The website is for adults. We collect children's details only from a parent or guardian who is booking for them.

12. Links to other sites

Our site links to third-party sites, including our payment partner's checkout page. Their privacy policies apply there, and we are not responsible for them.

13. Changes

We may update this policy. The latest version is always on this page with its date. For material changes, we will tell you in a way the law requires.