Data Collection Policy

Effective Date: July 30, 2025

KingFlyZone is committed to protecting your personal data. This policy outlines the types of data we collect, the purpose behind it, and your control over that data.

1. Why We Collect Data

• To fulfill flight and hotel bookings
• To improve our services and user experience
• To personalize your travel recommendations
• To comply with legal obligations
• To prevent fraud and misuse

2. Types of Data We Collect

2.1 Personal Identification Data

• Full Name
• Email Address
• Phone Number
• Postal Address
• Government-issued ID (when applicable)

2.2 Booking Information

• Flight preferences
• Hotel selections
• Departure and arrival cities
• Dates of travel
• Passenger names and ages

2.3 Payment Information

• Billing address
• Cardholder name (encrypted)
• Transaction history
• Partial card digits (masked for security)

2.4 Technical Data

• Browser type and version
• IP address
• Device type
• Location data (approximate)
• Cookies and analytics identifiers

3. Data Collection Methods

• Forms filled on our website
• Cookies and web beacons
• Booking engines and APIs
• Chat conversations and support tickets

4. Automated Data Collection

We automatically collect data using technologies such as:

• Google Analytics
• Facebook Pixel
• Hotjar/Mouseflow

5. Consent for Data Collection

We ask for your explicit consent before collecting sensitive data. For example:

• When saving your ID for international travel bookings
• When storing preferences or email subscriptions

6. Data Storage Locations

Your data is stored securely in the following locations:

• Encrypted AWS cloud databases
• Secure Stripe servers for payments
• Backup servers located in the EU and US

7. Data Sharing

We only share your data with trusted third parties for operational purposes:

• Airlines, hotels, and travel partners
• Payment providers (e.g., Stripe, PayPal)
• Government or customs authorities (when required)

8. Retention Policy

We retain your data:

• For as long as necessary to fulfill bookings and legal obligations
• For up to 2 years after account deactivation unless deletion is requested

9. Data Anonymization

When used for analysis, your data is anonymized and aggregated to ensure your identity is protected.

10. Children's Data

We do not knowingly collect data from users under 16 without parental consent. If we learn we have, we delete it promptly.

11. Data Subject Rights

• Right to access your data
• Right to correct or update data
• Right to delete personal data
• Right to request data export
• Right to object to data processing

12. Security Measures

• SSL encryption during all data transmission
• Two-factor authentication for admin access
• Regular data breach audits

13. Compliance Frameworks

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Pakistan Electronic Transactions Ordinance (ETO)

14. How to Manage Your Data

You can log in to your profile and:

• Edit your personal info
• Update marketing preferences

15. User Responsibility

You are responsible for ensuring the accuracy of your data. Providing false or misleading data may result in booking refusal or account suspension.

16. Contact for Data Requests

• Email: dataprotection@kingflyzone.com
• Phone: +92-308-4950422

17. Policy Revisions

This policy may be revised. Any changes will be posted here with a new effective date.

18. Data Protection Officer

We’ve appointed a Data Protection Officer (DPO) reachable at dpo@kingflyzone.com for any GDPR or privacy-related matters.

19. Final Acknowledgment

By using our services, you agree to our data collection practices outlined above.