Privacy Policy

1. About Us

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our flight booking services. Please read this policy carefully. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

We collect various types of information in connection with the services we provide:

2.1 Personal Identification Information

• Full name (as it appears on passport)
• Date of birth
• Gender
• Passport number and expiration date
• Nationality

2.2 Contact Information

• Email address
• Phone number
• Mailing address
• Billing address

2.3 Travel & Booking Information

• Flight routes and dates
• Seat preferences
• Special requests (dietary, accessibility, etc.)
• Frequent flyer numbers
• Travel history
• Booking confirmation numbers

2.4 Payment Information

• Credit card or debit card information
• Billing name and address
• Transaction history
• Payment method details

Note: Payment information is processed by secure third-party payment processors and is not stored on our servers.

2.5 Technical Information

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent
• Cookies and similar tracking technologies
• Referral source

2.6 How We Collect Information

• Directly from you: When you complete flight bookings, create an account, or contact us
• Automatically: Through cookies, web beacons, and analytics tools
• From third parties: Airlines, payment processors, and advertising partners

3. How We Use Your Information

We use the information we collect for the following purposes:

• Processing flight bookings and issuing tickets
• Communicating booking confirmations, updates, and itineraries
• Providing customer support and responding to inquiries
• Verifying identity and preventing fraud
• Complying with legal obligations and airline requirements
• Improving our website and services through analytics
• Sending promotional emails and offers (with your consent)
• Measuring advertising effectiveness through Google Ads conversion tracking
• Personalizing your experience and remembering preferences
• Detecting and preventing unauthorized access or fraud

4. How We Share Your Information

We may share your information with the following categories of recipients:

4.1 Airlines & Service Providers

We share your personal information with airlines to fulfill your booking, issue tickets, and enable proper check-in and boarding procedures. Airlines receive your name, contact information, passport details, seat preferences, and special requests.

4.2 Payment Processors

Payment information is shared with PCI-DSS compliant payment processors to authorize and process your transactions securely.

4.3 Third-Party Service Providers

We share information with vendors who assist us in providing services, including:

• Email service providers (for confirmations and updates)
• Analytics platforms (Google Analytics)
• Customer support platforms
• Advertising networks (Google Ads)

4.4 Legal Requirements

We may disclose your information if required by law, regulation, court order, or government request, or when necessary to protect our legal rights or the safety of our users.

4.5 Business Transfers

In the event of merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before any such change.

4.6 Non-Sale of Personal Information

We do not sell, rent, or lease your personal information to third parties for their independent marketing purposes.

5. Data Retention

We retain your personal information as follows:

• Booking & Travel Information: Retained for 7 years for compliance with airline and tax regulations
• Payment Information: Not retained; processed and discarded by secure payment processors
• Marketing Communications: Retained until you unsubscribe or request deletion
• Technical Data & Cookies: Retained for 2 years unless extended for analytics purposes
• Account Data: Retained until account closure; deletion available upon request

After the retention period, information is securely deleted or anonymized unless we are required by law to retain it.

6. Your Rights Under CCPA & VCDPA

If you are a California or Virginia resident, you have the following rights:

6.1 Right to Know

You have the right to request what personal information we collect, use, share, and sell about you.

6.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain legal exceptions (such as payment or tax records required for 7 years).

6.3 Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you.

6.4 Right to Opt-Out

You have the right to opt-out of:

• Sale or sharing of personal information for targeted advertising
• Profiling in furtherance of decisions that produce legal or similarly significant effects
• Marketing emails and promotional communications

6.5 Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights. We will not deny goods or services, charge different prices, or provide different quality of service solely because you exercised your rights.

6.6 Exercising Your Rights

To exercise any of these rights, please contact us at:

• Email: contact@i20travels.com
• Phone: (844) 205-4177
• Mail: 29/48 Moo 10, Nong Prue Subdistrict, Nong Prue, Bang Lamung, Chon Buri 20150, Thailand

We will respond to verifiable requests within 45 days. If needed, we may extend the response period by 45 additional days. You may designate an authorized agent to submit requests on your behalf.

7. Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, and destruction:

• Encryption: SSL/TLS encryption for data in transit; AES-256 for sensitive data at rest
• Secure Servers: Hosted on secure, regularly updated servers with firewalls
• Access Controls: Limited employee access to personal information on a need-to-know basis
• Regular Audits: Periodic security assessments and vulnerability testing
• Employee Training: Data protection and privacy training for all staff
• Payment Security: PCI-DSS Level 1 compliant payment processing
• Multi-Factor Authentication: Available for account access

While we implement these protections, no system is completely secure. We cannot guarantee absolute security of your information.

8. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze website usage:

8.1 Types of Cookies

• Essential Cookies: Required for website functionality, session management, and security
• Analytics Cookies: Help us understand how you use our website (Google Analytics)
• Marketing Cookies: Track your activity for targeted advertising (Google Ads)
• Preference Cookies: Remember your settings and preferences

8.2 Cookie Consent

We obtain consent before placing non-essential cookies on your device. You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.

8.3 Web Beacons & Pixels

We use web beacons (invisible tracking pixels) to measure email opens and conversion tracking, particularly for Google Ads conversion measurement.

8.4 Local Storage

We use browser local storage and session storage to maintain your booking preferences and session state.

9. Google Ads & Advertising Compliance

We use Google Ads to promote our services and track conversions across multiple channels.

9.1 Conversion Tracking

We implement Google conversion tracking (gtag) to measure the effectiveness of our advertising campaigns. When you click our phone number (844) 205-4177, a conversion event is reported to Google Ads to help us measure campaign performance.

9.2 Audience Segmentation

We use Google Ads features to create audience lists based on your interactions with our website and services for retargeting campaigns.

9.3 Data Sharing with Google

By using our website, you acknowledge that Google Ads services will collect and process data about your interactions. Google's use of data is governed by Google's Privacy Policy: https://policies.google.com/privacy

9.4 Sensitive Categories

We comply with Google Ads policies and do not allow targeting based on sensitive information such as health conditions, financial status, or religious beliefs unless you explicitly consent.

9.5 Opt-Out Options

You can opt out of Google Ads personalization through:

• Google Ads Settings: https://adssettings.google.com
• Network Advertising Initiative: https://optout.networkadvertising.org
• Your browser's do-not-track signals

10. Children's Privacy

Our services are not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete such information promptly.

For users between 13 and 18 (minors), we provide enhanced privacy protections and require parental consent for marketing communications.

If you believe we have collected information from a child under 13, please contact us immediately at contact@i20travels.com.

11. International Data Transfers

Our company is based in Thailand, and your information may be transferred to, stored in, and processed in Thailand and other countries where we or our service providers operate. These countries may have data protection laws different from your home country.

When we transfer personal information internationally, we implement safeguards such as:

• Standard contractual clauses approved by relevant authorities
• Adequate data protection mechanisms
• Your explicit consent where required by law

By using our services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

We will notify you of material changes by:

• Posting the updated policy on our website
• Sending you an email notification if you have provided your email address
• Obtaining your explicit consent if required by law

Your continued use of our services after changes become effective constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Email: contact@i20travels.com
• Phone: (844) 205-4177
• Mailing Address: 29/48 Moo 10, Nong Prue Subdistrict, Nong Prue, Bang Lamung, Chon Buri 20150, Thailand

We will respond to your inquiry within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.