Privacy Policy
Draft for legal review. This document is not yet approved and is not in effect. Items marked [To be confirmed] are awaiting business and legal decisions.
Who we are
North Flight is operated by [To be confirmed]: legal entity name, registered address and company number. Privacy questions can be sent to support@northflight.us.
Data we collect
- Account data: name, email address, phone number (optional) and password (stored only as a secure hash)
- Agency data: business name, website address, logo, contact details and settings
- Usage data: flight searches, enquiries, bookings and actions taken in the dashboard, including an audit history
- Technical data: IP address and request details, used for security, rate limiting and troubleshooting
- Contact form data: the details you send us through the contact form
Data on agency websites
When a traveller sends an enquiry on an agency's website, the agency decides how that data is used. [To be confirmed]: the roles of North Flight and the agency under applicable data protection law (for example controller and processor).
Cookies
- nf_session: keeps you signed in. Strictly necessary.
- northflight-theme: remembers the website design shown to you. Functional.
- No advertising or analytics cookies are set by North Flight today.
Payments
Subscription payments are processed by Stripe. Card details are entered on Stripe's pages and are not stored by North Flight.
Retention
[To be confirmed]: how long each type of data is kept after an account is closed.
Your rights
[To be confirmed]: the rights available to you under applicable law and how to exercise them.
International transfers
[To be confirmed]: where data is hosted and the safeguards for transfers.
