1. Information We Collect

We may collect personal information that you voluntarily provide to us when you:

• Request a quote for business class flights
• Fill out our contact or callback request forms
• Subscribe to our newsletter or marketing communications
• Contact us via WhatsApp, email, or telephone
• Book or inquire about flight reservations

Personal Information

• Contact Data: Name, email address, phone number, mailing address
• Travel Preferences: Preferred departure city, destination, travel dates, airline preferences, cabin class preferences
• Booking Information: Passport details (when required for ticketing), date of birth, frequent flyer numbers
• Payment Information: Credit card details or bank information (processed securely through PCI-compliant payment processors; we do not store full card numbers)
• Communication Data: Records of your interactions with our travel consultants, including WhatsApp messages, emails, and call logs

Automatically Collected Information

When you visit our website, we may automatically collect certain information using cookies and similar technologies:

• IP address and browser type
• Device information (operating system, screen resolution)
• Pages visited, time spent on pages, and click patterns
• Referring website or search terms
• Geolocation data (country/region level only)

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide Services: Process your flight inquiries, generate quotes, complete bookings, and manage your reservations
• To Communicate: Respond to your inquiries, send booking confirmations, provide travel updates, and notify you of schedule changes
• To Improve Our Website: Analyse user behaviour to enhance site functionality, content, and user experience
• For Marketing: Send promotional offers, fare alerts, and newsletters (only with your explicit consent)
• For Legal Compliance: Meet regulatory requirements, prevent fraud, and enforce our terms of service
• For Analytics: Measure advertising effectiveness and understand how visitors find our website

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyse site traffic.

Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., session management, form submissions)
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• Marketing Cookies: Used to deliver relevant advertisements and track ad performance (e.g., Meta Pixel, Google Ads)
• Preference Cookies: Remember your settings and preferences (e.g., language, currency display)

Your Cookie Choices

You can manage cookie preferences through our cookie banner or your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Note that disabling certain cookies may affect website functionality.

Third-Party Analytics

We use Google Analytics to collect anonymous traffic data. This information helps us understand which pages are popular, where our visitors come from, and how they navigate the site. Google Analytics data is processed in accordance with Google's Privacy Policy.

4. How We Share Your Information

We do not sell your personal information. We may share your data only in the following circumstances:

Service Providers

We work with trusted third-party providers who assist us in operating our business:

• Airlines and GDS Providers: To issue tickets and manage reservations (Amadeus, Sabre, Travelport)
• Payment Processors: To securely process transactions (Stripe, PayPal, Authorize.Net)
• Email Marketing: To send newsletters and promotional materials (Mailchimp, SendGrid)
• Hosting and CDN: To keep our website fast and secure (Cloudflare, AWS)
• Customer Support: To manage live chat and WhatsApp Business communications

All service providers are contractually bound to use your data only for the purposes we specify and to maintain appropriate security measures.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government regulations, or law enforcement investigations).

Business Transfers

If Key Business Class is involved in a merger, acquisition, or asset sale, your personal information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Secure, password-protected databases with access limited to authorised personnel
• Regular security audits and vulnerability assessments
• PCI-DSS compliant payment processing (we never store full credit card numbers)
• Employee training on data protection best practices

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

6. International Data Transfers

Key Business Class is based in the United States. Your information may be transferred to and processed in countries other than your own, including:

• United States (our primary operations)
• United Kingdom and European Union (for bookings involving European carriers)
• United Arab Emirates (for Middle East route bookings)
• Singapore and Hong Kong (for Asia-Pacific route management)

When transferring data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions, to protect your privacy rights.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

For All Users

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing communications at any time

For California Residents (CCPA)

Under the California Consumer Privacy Act, California residents have the right to:

• Know what personal information is being collected about them
• Know whether their personal information is sold or disclosed (we do not sell personal information)
• Say no to the sale of personal information
• Access their personal information
• Equal service and price, even if they exercise their privacy rights

For EU/UK Residents (GDPR)

Under the General Data Protection Regulation, EU and UK residents have additional rights:

• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us using the information provided in Section 10. We will respond to all requests within 30 days.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

9. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy:

• Booking Records: Retained for 7 years to comply with tax and airline reporting requirements
• Marketing Data: Retained until you unsubscribe or request deletion
• Communication Logs: Retained for 3 years for customer service and dispute resolution
• Website Analytics: Anonymised after 26 months (per Google Analytics default)
• Cookie Data: Expires according to the specific cookie type (session to 2 years)

After the retention period expires, your data is securely deleted or anonymised.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Key Business Class
Premium Air Travel Services
United States

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Post a prominent notice on our website homepage
• Notify you via email if you have an active booking or subscription

We encourage you to review this Privacy Policy periodically. Your continued use of our website after any changes constitutes acceptance of the updated policy.

12. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, our legal basis for collecting and using your personal information depends on the specific context:

• Contract Performance: Processing necessary to fulfil your flight booking or quote request
• Legitimate Interests: Improving our services, preventing fraud, and marketing (where not overridden by your rights)
• Consent: Sending marketing communications and using non-essential cookies
• Legal Obligation: Compliance with tax, immigration, and aviation regulations

You have the right to object to processing based on legitimate interests. To exercise this right, please contact us.