Privacy Policy

1. Introduction

At WiseTravel, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our flight comparison and booking assistance services. This policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

For data protection inquiries, please contact us at daye@wise-travel.com.

3. Information We Collect

We collect the following types of information:

• Personal identification information (name, email address, phone number, postal address)
• Travel preferences and requirements (dates, destinations, class preferences)
• Flight search and booking history
• Payment information (processed securely through our payment providers)
• Communication records between you and our service team
• Technical data (IP address, browser type, device information)
• Cookies and usage data

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Contract fulfillment: Processing necessary for the performance of our contract with you (to provide flight comparison and booking services)
• Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as marketing communications
• Legitimate interests: Processing necessary for our legitimate interests, such as improving our services, fraud prevention, and ensuring network security
• Legal obligation: Processing necessary for compliance with legal obligations

5. How We Use Your Information

Important: By using our services, you acknowledge and explicitly authorize WiseTravel to act as your agent in processing flight bookings. This includes using your personal and travel information to negotiate, secure, and complete bookings on your behalf with airlines and travel providers. This authorization is necessary for us to deliver our core services.

We use your information for the following purposes:

• To provide flight comparison and booking services (contract fulfillment)
• To process your payments and bookings (contract fulfillment)
• To communicate with you about your bookings and our services (contract fulfillment, legitimate interest)
• To send you marketing communications, if you have opted in (consent)
• To improve our services and customer experience (legitimate interest)
• To comply with legal obligations (legal obligation)
• To detect and prevent fraudulent activities (legitimate interest)
• To analyze usage patterns and optimize our website (legitimate interest)

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy:

• Booking information is retained for 7 years to comply with legal, tax, and accounting requirements
• Marketing preferences are stored until you withdraw consent or opt-out
• Communication records are kept for 3 years from your last interaction with us
• Technical and usage data are retained for 26 months

After these periods, your personal data will be securely deleted or anonymized.

7. Information Sharing

We may share your information with:

• Airlines and travel providers to complete your bookings (necessary for contract fulfillment)
• Payment processors to handle transactions (necessary for contract fulfillment)
• Service providers who assist in our operations, such as IT and customer support (based on legitimate interest and/or data processing agreements)
• Legal authorities when required by law (legal obligation)

We do not sell or rent your personal information to third parties for marketing purposes. When we share your data with service providers, we ensure they provide appropriate safeguards and respect data protection requirements.

8. International Data Transfers

As we operate from China, your data may be transferred to and stored on servers located outside the European Economic Area (EEA). When transferring your data outside the EEA, we implement appropriate safeguards to ensure your data is protected, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with our service providers
• Technical and organizational security measures

You can request a copy of these safeguards by contacting us at daye@wise-travel.com.

9. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Data encryption in transit and at rest
• Access controls and authentication procedures
• Regular security assessments and audits
• Staff training on data protection
• Incident response procedures

However, no internet transmission is completely secure, and we cannot guarantee absolute security. We will notify relevant authorities and affected users of any personal data breach within 72 hours, in accordance with GDPR requirements.

10. Your Rights

Under the GDPR and applicable data protection laws, you have the following rights:

• Right to access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete information
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to our processing of your personal data
• Right to withdraw consent: Withdraw consent at any time where we rely on consent for processing
• Right to lodge a complaint: File a complaint with a supervisory authority

To exercise these rights, please contact us at daye@wise-travel.com. We will respond to your request within 30 days. You may also contact your local data protection authority if you believe your rights have been violated.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Ensure the website functions properly (essential cookies)
• Analyze and improve website performance (analytical cookies)
• Enhance the user experience (functional cookies)
• Provide personalized content and advertisements where consent is given (targeting cookies)

When you first visit our website, you will be presented with a cookie consent banner. Essential cookies are necessary for the website to function and cannot be opted out of. For all other types of cookies, we will only use them with your explicit consent.

You can control cookie settings through your browser preferences and withdraw your consent at any time by updating your preferences in our cookie settings.

12. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect or process personal data from individuals under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information as soon as possible.

13. EU Representative

We are in the process of appointing an EU representative in accordance with Article 27 of the GDPR. Once appointed, their contact details will be published here. For any GDPR-related inquiries in the meantime, please contact us directly at daye@wise-travel.com.

14. Changes to Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any significant changes by posting the new policy on this page, updating the "Last Updated" date, and, where appropriate, sending you an email notification. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy, concerns about how we process your personal data, or would like to exercise your rights, please contact us at:

Email: daye@wise-travel.com