Privacy First
Aligned with India’s Digital Personal Data Protection Act (DPDP Act), 2023
1) Introduction
This Privacy Policy explains how Fly My Luggage (“we”, “our”, “us”) collects, uses, shares, and protects your personal data when you visit our website, make a booking, or use our services. By using our services, you agree to the practices described here.
This summary is for convenience and transparency. It does not replace detailed contractual terms in our Terms & Conditions.
2) Data We Collect
- Identity: Name, email, phone, gender (optional), ID verification when required for pickup/delivery compliance.
- Contact & Address: Pickup/delivery addresses, alternate contacts, location notes.
- Booking & Transaction: Order details, bags count/size, add-ons (insurance), dates, payment status (via payment gateway), invoices.
- Operational Proofs: OTP logs, seal IDs, photo proofs at pickup/delivery, time stamps, tracking events, support tickets.
- Device & Usage: IP address, browser/OS, pages viewed, cookies, analytics events, referral source.
- Communications: Emails, chat/WhatsApp messages, feedback, claims documentation.
We do not store full card/payment instrument data on our servers; this is handled by PCI-DSS–compliant payment gateways.
3) How We Use Data
- Provide and manage services: booking, pickup, transport, delivery, tracking, and support.
- Verify identity and ensure security: OTP verification, fraud prevention, operational audits.
- Process payments, generate invoices, handle refunds/claims.
- Improve website and services using analytics and performance metrics.
- Send transactional messages (status updates, OTPs, receipts). With consent, send marketing/newsletters.
- Comply with applicable law, law-enforcement requests, and safety obligations.
4) Legal Basis & Consent
We process data based on one or more of the following grounds:
- Consent: e.g., when you opt in to marketing, or provide optional details.
- Contractual necessity: to fulfill your booking and deliver our services.
- Legitimate interests: service improvement, fraud prevention, and network security.
- Legal compliance: tax, accounting, KYC where required, law-enforcement requests.
You can withdraw marketing consent anytime using “unsubscribe” links or by contacting us.
5) Sharing & Processors
We share data with trusted service providers strictly for service delivery and compliance, under confidentiality and data-processing agreements:
- Logistics/Carrier Partners: operational data needed for transit and delivery.
- Payment Gateways: to process payments and refunds.
- Customer Support/Communication: email/SMS/WhatsApp providers for OTPs and updates.
- Analytics & Security: tools for performance, error monitoring, fraud prevention.
- Compliance & Legal: regulators and law-enforcement when legally required.
We do not sell personal data. We may share aggregated/anonymized insights that do not identify you.
6) Cookies & Tracking
We use essential cookies for site functionality (sessions, security, booking flow), and optional analytics cookies to improve performance. You can control cookies in your browser settings. Blocking certain cookies may impact site features.
7) Data Retention
We retain personal data for as long as necessary to provide services, comply with legal obligations (tax/audit), resolve disputes, and enforce agreements. Operational proofs (photos, seals, OTP logs) are retained per compliance and safety norms, then securely deleted or anonymized.
8) Security
We implement administrative, technical, and physical safeguards to protect data—encrypted transport (HTTPS), role-based access controls, logging, and vendor due diligence. No method of transmission or storage is 100% secure; we continually improve our safeguards.
9) Your Rights
Subject to applicable law (including India’s DPDP Act), you may have the right to:
- Access and obtain a copy of your personal data.
- Correct inaccurate or incomplete data.
- Withdraw consent (e.g., marketing) without affecting prior lawful processing.
- Request deletion where no longer necessary and no overriding legal basis exists.
- Raise grievances about data handling—see contact below.
To exercise rights, email support@flymyluggage.in with “Privacy Request” in the subject and your registered details for verification.
10) Children’s Privacy
Our services are not directed to children under 18. If you believe a minor has provided personal data, contact us to request deletion.
11) International Transfers
Some service providers may process data outside India. Where applicable, we ensure appropriate safeguards and contractual protections consistent with legal requirements.
12) Changes to this Policy
We may update this Policy periodically. The “Last updated” date reflects the latest version. Material changes will be posted on this page.
