GDPR Compliance Policy

Effective Date: December 30, 2025
Last Updated: December 30, 2025

This California Consumer Privacy Act (“CCPA”) / California Privacy Rights Act (“CPRA”) Policy explains how My Flights Portal, Inc. (“My Flights Portal,” “we,” “us,” “our”) collects, uses, discloses, and protects Personal Information of California residents, and describes the rights available to California consumers.

This policy applies to Personal Information collected through www.myflightsportal.com, our customer support channels (phone, email, live chat), and related services.

1) Company Information

Legal Entity: My Flights Portal, Inc.
Company Number: 7421435
Registered Address: 1142 Hicksville Rd, Massapequa, NY 11758 | US
Website: www.myflightsportal.com
Email: Support@myflightsportal.com

2) Definitions (CCPA/CPRA)

Personal Information (PI): Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household.

Sensitive Personal Information (SPI): A subset of PI that includes data such as government identifiers, precise geolocation, login credentials, and certain other categories under CPRA.

Sell / Share: As defined by California law. “Share” includes disclosure for cross-context behavioral advertising.

Business Purpose / Commercial Purpose: As defined under the CCPA/CPRA.

3) Categories of Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of PI:

A) Identifiers

Name, email address, phone number, booking reference/order number, IP address, online identifiers.

B) Customer Records Information

Contact details and booking-related identifiers that you submit for reservations or customer support.

C) Commercial Information

Booking details, itinerary information, service requests, refund/change requests, and transaction status.

D) Internet / Network Activity

Browsing activity on our site (pages viewed, clicks), device information, approximate location based on IP address, and cookies (see our Cookie Policy).

E) Geolocation Data (Approximate)

Approximate location derived from IP address (not precise geolocation unless you explicitly permit it through device settings, where applicable).

F) Communications

Email/chat content, support ticket details, and call records (where permitted by law).

G) Sensitive Personal Information (When Needed)

For certain international travel bookings, airlines/suppliers may require information such as passport details or date of birth. We use this information only to complete reservations and provide required support.

We do not collect or store full payment card details (like full card number or CVV) in cookies or for unrelated purposes.

4) Sources of Personal Information

We collect PI from:

• You directly (website forms, checkout, emails, calls, chat)
• Your device/browser (cookies and similar technologies)
• Our suppliers, ticketing partners, and consolidators (to fulfill bookings)
• Payment/fraud-prevention providers (to process transactions securely)

5) Purposes for Collecting and Using Personal Information

We use PI for:

• Providing flight search and booking services
• Processing reservations and supporting ticket issuance through suppliers/partners
• Customer support, including after-sales servicing
• Fraud prevention, security, and transaction monitoring
• Communications related to your booking (confirmations, updates, notices)
• Website operations, analytics, and improvements
• Advertising measurement and marketing (subject to cookie choices and legal requirements)
• Compliance with legal obligations (tax, accounting, regulatory)

6) Disclosures of Personal Information

We may disclose PI to the following categories of recipients for business purposes:

• Airlines and airline-related suppliers
• Ticketing partners and airline consolidators (for issuance and servicing)
• Payment processors and fraud prevention providers
• IT providers (hosting, security monitoring, communications tools)
• Customer support tools and service providers (helpdesk, live chat)
• Analytics and advertising service providers (subject to your choices)
• Legal authorities where required by law

7) Sale or Sharing of Personal Information

We do not sell Personal Information for money.

We may use advertising/measurement technologies (such as cookies or conversion tracking) that could be considered “sharing” under CPRA when used for cross-context behavioral advertising, depending on how the technology is configured and how you interact with it.

Where applicable, you can exercise your right to opt out of the sale/sharing of PI by:

• Adjusting cookie preferences (where available)
• Using browser-based controls (such as Global Privacy Control, described below)
• Contacting us as described in Section 11

8) Sensitive Personal Information (Limit Use)

We use Sensitive Personal Information only as needed to:

• Complete travel reservations and provide required servicing
• Prevent fraud and ensure security
• Comply with laws and airline/supplier requirements

We do not use Sensitive Personal Information to profile you for advertising.

9) Data Retention

We keep PI only as long as needed for:

• Booking fulfillment and customer support
• Legal and accounting requirements
• Fraud prevention, dispute handling, and compliance

Retention periods vary by data type and purpose. When data is no longer required, we delete or de-identify it where appropriate.

10) Security Practices

We maintain safeguards designed to protect PI, including access controls, monitoring, and security practices aligned with industry standards. Payment environments follow PCI-focused security measures and ongoing external scanning practices (where applicable). No security method is perfect, but we work to protect data reasonably.

11) Your California Privacy Rights

California residents may have the right to:

• Right to Know / Access: request categories and specific pieces of PI collected
• Right to Delete: request deletion of PI (subject to exceptions)
• Right to Correct: request correction of inaccurate PI
• Right to Opt Out of Sale/Sharing: opt out of “sale” or “sharing” (as defined)
• Right to Limit Use of Sensitive PI: limit use to permitted purposes
• Right to Non-Discrimination: not be discriminated against for exercising rights

12) How to Submit a Request

To submit a CCPA/CPRA request, contact us:

Email: Support@myflightsportal.com (Subject: “CCPA Request”)

Include:

• Your full name
• Email/phone used on the booking or inquiry
• Booking reference/order number (if available)
• The request type (Access, Delete, Correct, Opt-Out, Limit Use)

Verification: We may need to verify your identity to protect your information. If we cannot verify, we may deny the request as permitted by law.

13) Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require:

• Proof of authorization
• Identity verification of the consumer and/or agent

14) Global Privacy Control (GPC)

If your browser sends a Global Privacy Control (GPC) signal, we will treat it as a request to opt out of the sale/sharing of PI for the browser/device used, where applicable and technically feasible.

15) Notice of Financial Incentives

We do not currently offer financial incentives in exchange for PI. If we do in the future, we will provide required notices and obtain opt-in consent where required.

16) Children’s Privacy

Our services are intended for users who can legally enter into contracts. We do not knowingly sell or share PI of consumers under 16 years of age.

17) Offshore Support & Service Providers

To provide timely assistance and 24/7 coverage, certain customer support and back-office operations may be handled by trained teams, including offshore support operated by Sky Rebate Travels Pvt Ltd (www.skyrebate.com) under strict and secure operational guidelines, confidentiality obligations, and access controls.

18) Updates to This Policy

We may update this CCPA/CPRA Policy from time to time. Changes will be posted on this page with updated effective and last updated dates.

19) Contact

My Flights Portal, Inc.
1142 Hicksville Rd, Massapequa, NY 11758, United States
Website: www.myflightsportal.com
Email: Support@myflightsportal.com