1. Data Collection
To fulfill airline reservations and comply with TSA Secure Flight / APIS border regulations, we collect passenger full legal names, dates of birth, gender, nationality, passport numbers and expiration dates, Known Traveler Numbers (KTN), frequent flyer numbers, special meal/mobility requests, billing contact details, and tokenized payment identifiers.
2. Data Usage
Your personal data is used strictly to: (a) transmit reservation manifests to your selected airline(s) and Global Distribution Systems (GDS), (b) issue 13-digit e-tickets and tax invoices, (c) deliver real-time flight schedule, gate, or refund notifications, and (d) prevent payment fraud.
Aerofaredeals never sells passenger lists, passport details, or contact emails to third-party data brokers.
3. Data Protection
All data in transit is encrypted via TLS 1.3 (256-bit SSL), and sensitive PNR records at rest are encrypted using AES-256 hardware security modules. Payment card numbers are processed directly within PCI-DSS Level 1 certified vaults; raw CVV security codes are never stored after authorization.
4. GDPR & CCPA Privacy Rights
Residents of the European Economic Area (EEA), United Kingdom, California, and other regulated jurisdictions hold the right to access, rectify, export (data portability), restrict processing, or request erasure of personal data not subject to mandatory statutory tax or aviation retention periods.
5. Cookie Usage
We use essential session cookies to preserve your flight search parameters, currency preferences, and checkout cart, alongside optional analytics and price-alert personalization cookies controlled via our Cookie Policy preferences panel.
6. User Requests & Data Protection Officer
To submit a Data Subject Access Request (DSAR), update stored traveler profiles, or request account deletion, email support@aerofaredeals.com or write to Data Protection Officer, Aerofaredeals, 7901 4TH ST N STE 300 ST. PETERSBURG, FL, US 33702. Verified requests are fulfilled within 15 business days.