Privacy policy

This policy explains what we do with personal data when you ask us for a flight quote or book a ticket through us. It forms part of our terms of use.

1. Who is responsible

ALDRINS INC, 16192 Coastral Highway, County of Sussex, Delaware, United States, decides why and how your personal data is processed. Under EU and UK law that makes us the controller. Questions go to support@aldrins.com.

Airlines and other suppliers are separate controllers of the data we pass to them, and they handle it under their own privacy policies.

2. What we collect

Request details — route, dates, cabin, number of passengers, and anything you write in the message field.
Contact details — name, phone number, email address, and the time zone or city where you are.
Passenger details, once you book — full name as shown on the travel document, date of birth, gender as required by the carrier, passport or ID number, nationality, expiry date, loyalty programme numbers.
Travel data — itinerary, ticket numbers, seat and meal preferences, assistance requests, changes and refunds.
Payment data — the confirmation, amount, and the last four digits of the card. Full card numbers go directly to our payment processor and are not stored on our systems.
Correspondence — emails, SMS and call recordings between you and our agents.
Technical data — IP address, browser and device type, the page you submitted from, and the time. We use this to answer you correctly and to block automated abuse of the form.

Most of this comes from you. Some comes from the airline or global distribution system when a booking changes, and from our payment processor when a payment is authorised or declined.

3. Why we use it, and on what legal basis

To price your request and issue tickets. Necessary to take steps at your request before a contract, and then to perform it.
To service the booking — schedule changes, seats, refunds, disruption. Performance of the contract.
To take payment and prevent fraud. Performance of the contract, and our legitimate interest in not being defrauded.
To meet legal obligations — tax and accounting records, and the passenger data that border and security authorities require carriers and agents to transmit. Legal obligation.
To keep records of what was agreed, including call recordings, and to defend claims. Legitimate interest.
To improve the site and our service. Legitimate interest, using aggregated data wherever possible.
To send fare emails, if you asked for them. Consent, withdrawable at any time.

Where we rely on legitimate interest, we have weighed it against your interests and rights; you can object at any time (see section 11).

4. Sensitive data

A request for wheelchair assistance, oxygen, a stretcher or a medical device says something about health. A request for a kosher or halal meal can say something about religion. We collect these only when you ask us to arrange them, we pass them only to the carrier that must act on them, and we do not use them for anything else. In the EU and UK we rely on your explicit consent, which you give by asking us to make the request.

Passport and ID numbers are collected only where a carrier or a government requires them for the journey you are taking.

Operating carriers and their handling agents, to hold the reservation and carry the passenger.
Consolidators and ticketing partners, where the fare is issued on their stock.
Global distribution systems (such as Amadeus, Sabre or Travelport), which hold the passenger name record.
Our payment processor, to authorise and settle payment.
IT and communications providers — hosting, email, our messaging channel, our CRM — under contracts that limit them to acting on our instructions.
Border, customs, immigration and security authorities, where the law of the departure, transit or destination country requires it. This includes advance passenger information and passenger name record transfers to the United States and other states.
Insurers, professional advisers, and authorities, where needed to handle a claim or comply with the law.

We do not sell personal data, and we do not share it with advertisers or data brokers.

6. International transfers

Air travel cannot be arranged without moving data across borders. Your data may be processed in the United States and in any country you fly to, from or through, including countries whose data protection law differs from your own and where public authorities have wider access rights.

For transfers out of the EEA or the UK we rely on the European Commission's standard contractual clauses and the UK addendum, or on the derogation for transfers necessary to perform a contract you asked for. A copy of the safeguards is available on request.

7. How long we keep it

Requests that never became a booking: 12 months, then deleted.
Booking and ticketing records: 7 years from the date of travel, to meet accounting and tax rules and to defend claims.
Call recordings: 12 months, unless a dispute makes a specific recording relevant for longer.
Marketing consent records: until you unsubscribe, plus 2 years as proof of consent.
Form abuse logs (IP address and timestamp): 6 months.

8. Security

The site runs over HTTPS. Access to booking data is limited to agents who need it, over individual accounts. Payment card data is handled by a PCI DSS compliant processor and does not touch our servers. No system is perfectly secure; if a breach affects your rights, we notify you and the competent authority as the law requires.

9. Cookies and analytics

We use a session cookie that keeps your form submission secure. It is strictly necessary and cannot be switched off without breaking the form.

Where analytics or advertising cookies are used, they are set only after you accept them in the cookie banner, and you can change that choice at any time. We do not use cookies to build advertising profiles of individual travellers.

10. Marketing, calls and SMS

When you send a request, you are asking to be contacted about it, and we call, text and email you about that request until it is closed. That is service communication, not marketing, and it continues while your request is open.

Fare emails and promotional messages are sent only if you opted in. Every email has a one-click unsubscribe link; reply STOP to any SMS to end them. Unsubscribing from marketing does not stop messages about a booking you have already made.

Calls may be recorded. We tell you at the start of the call, and you can ask us to continue in writing instead.

11. Your rights

Subject to the law that applies to you, you can ask us to:

give you a copy of the data we hold about you, in a portable format;
correct data that is wrong or incomplete;
delete data we no longer need — though we cannot delete records we must keep for tax, or an active booking;
restrict or stop a particular use, including any use based on legitimate interest;
withdraw a consent you gave, without affecting what we did before you withdrew it.

Write to support@aldrins.com. We reply within 30 days and may ask you to confirm your identity first. There is no charge unless a request is clearly excessive.

12. California residents

Under the CCPA as amended by the CPRA, you have the right to know what personal information we collect and disclose, to request deletion and correction, to limit the use of sensitive personal information, and not to be discriminated against for exercising those rights.

In the past 12 months we have collected the categories described in section 2, for the purposes in section 3, and disclosed them for a business purpose to the recipients in section 5. We have not sold personal information and have not shared it for cross-context behavioural advertising. Sensitive personal information (passport numbers, and health or religious indications arising from special assistance requests) is used only to arrange the travel you asked for.

Requests go to the same address; an authorised agent may act for you with written permission.

13. Children

The site is not directed to children, and we do not knowingly collect data from anyone under 18 submitting their own request. We do process children's data when an adult books travel for them, on that adult's instruction.

14. Contact and complaints

ALDRINS INC
16192 Coastral Highway, County of Sussex, Delaware, United States
support@aldrins.com · +1 (302)412-3111

Tell us first if you think we mishandled your data. If you are in the EEA or the UK you may also complain to your national data protection authority; in Moldova, to the National Centre for Personal Data Protection.

We may update this policy. The date at the top shows the current version, and material changes are announced on this page before they take effect.