Privacy Policy

Pets Fly Private ("we", "us") is the data controller for personal data collected through petsflyprivate.com. We are committed to protecting your data in line with the UK GDPR and the Data Protection Act 2018.

1. Who we are

Data controller: Pets Fly Private. To contact us about this policy or your data, email privacy@petsflyprivate.com.

2. What data we collect

• Account data — name, email address, hashed password (or Google ID if you sign in with Google).
• Route requests — origin, destination, preferred month of travel, number of passengers, number of pets, pet type/breed/weight, contact email, and any notes you provide.
• Flight alerts — the routes and months you asked to be notified about.
• Operator applications (operators only) — company details, licensing information, uploaded licence document.
• Technical data — IP address, browser type, and essential session cookies needed to keep you signed in.

3. Lawful basis

• Contract — to run your account, save your alerts, and pass route requests to operators you have chosen to share them with.
• Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
• Legitimate interests — to keep the service secure, prevent abuse, and produce aggregated, anonymised demand statistics.
• Legal obligation — where we must retain records to comply with UK law.

4. How we use your data

• Provide the search, alert and route-request features.
• Notify you (with your consent) when a matching flight appears.
• Share route-request details with verified operators so they can decide whether to put on a service. Operators only see fields relevant to assessing demand — never your password.
• Produce anonymised, aggregated demand statistics.
• Prevent fraud and secure the service.

5. Sharing your data

We share data only with:

• Verified charter operators — when you submit a route request, to help them assess viability.
• Our processors — hosting and database (Supabase / Lovable Cloud), authentication (Google, where you choose it), and email delivery. All are bound by contract to protect your data.
• Authorities — where required by law.

We do not sell personal data.

6. International transfers

Some processors host data outside the UK. Where that happens, transfers rely on UK adequacy regulations, the UK International Data Transfer Addendum, or Standard Contractual Clauses.

7. Retention

• Account data — for as long as your account is active. Deleted within 30 days of account closure.
• Route requests and alerts — up to 24 months, so operators can plan future services, unless you delete them sooner.
• Operator KYC documents — for the duration of the operator relationship plus 6 years, to meet regulatory record-keeping expectations.
• Aggregated, anonymised statistics — indefinitely.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time.
• Complain to the Information Commissioner's Office (ico.org.uk).

You can exercise most of these rights instantly from your account page — download your data or delete your account. For anything else, email privacy@petsflyprivate.com.

9. Cookies

See our Cookie Policy for the full list.

10. Changes

We'll post any material change here and, where it materially affects you, notify you by email.