Privacy Policy

This Privacy Policy describes how EMEIA Travel Mart LLC (doing business as CheapFlyShop / cheapflyshop.us) ("we," "us," or "our") collects, uses, discloses, and protects personal information when you use our website www.cheapflyshop.us or our travel booking services.

We are an independent non-IATA online travel agency. We act as an intermediary and arrange tickets through contracted suppliers.

Your use of our services is also subject to our Terms & Conditions.

This Policy applies to personal information we collect from or about consumers in the United States through our website, telephone bookings, email, and related services.

It is designed to comply with applicable US state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and similar laws in other states.

We may collect the following categories of personal information:

3.1 Identifiers

• Name, postal address, email address, telephone number, IP address, cookie IDs, and similar identifiers.

3.2 Customer Records / Commercial Information

• Booking history, travel itineraries, payment information (card details processed via secure payment providers), billing address, frequent flyer numbers, and purchase records.

3.3 Protected Classification Characteristics (when provided)

• Date of birth, nationality, gender (often required for airline bookings and Advance Passenger Information).

3.4 Sensitive Personal Information (limited)

• Passport or government ID numbers (when required for ticketing or API).
• Health or mobility information and dietary requirements (only if you voluntarily provide them for special assistance or meal requests).

3.5 Internet / Electronic Network Activity

• Browsing history on our site, search queries, pages viewed, device and browser information, and interactions with our website.

3.6 Geolocation Data

• Approximate location derived from IP address.

3.7 Audio Information

• Call recordings for quality assurance and training (when you contact us by phone).

We do not knowingly collect personal information from children under 16 without appropriate authorization.

We collect personal information from the following sources:

• Directly from you (website forms, phone, email, chat).
• Automatically through cookies, pixels, and similar technologies.
• From third parties such as airlines, suppliers, payment processors, or someone booking on your behalf.
• From publicly available sources where permitted.

We use personal information for the following business and commercial purposes:

• To process, confirm, and manage flight and travel bookings.
• To issue tickets and send confirmations, itineraries, and travel documents.
• To communicate with you about your booking, changes, cancellations, schedule updates, and support requests.
• To process payments, refunds, and chargebacks.
• To comply with legal obligations, including airline Advance Passenger Information (API) requirements and government requests.
• To detect, prevent, and investigate fraud, security incidents, and illegal activity.
• To improve our website, services, and customer experience (analytics).
• To send marketing communications where permitted by law (you may opt out at any time).
• To enforce our Terms & Conditions and protect our legal rights.

We may disclose personal information to the following categories of recipients:

• Airlines, consolidators, and travel suppliers – to fulfill your booking and issue tickets.
• Payment processors and financial institutions – to process payments and prevent fraud.
• Service providers – IT hosting, customer support tools, email delivery, analytics, and fraud prevention (under contractual restrictions).
• Professional advisers – lawyers, accountants, insurers.
• Government authorities and law enforcement – when required by law or to protect rights and safety.
• Business partners – only when necessary for a joint product or service you have requested.

We do not sell personal information for monetary consideration in the traditional sense. However, under CCPA/CPRA definitions, certain sharing of data for cross-context behavioral advertising may be considered a “sale” or “sharing.” We describe your opt-out rights below.

Under California law (and similar state laws), you have the right to opt out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising.

To exercise this right, please email us at support@cheapflyshop.us with the subject line “Do Not Sell or Share My Personal Information” or use any designated link we provide on the website. We will process your request in accordance with applicable law.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Depending on your state of residence, you may have the following rights:

• Right to Know / Access – Request the categories and specific pieces of personal information we have collected about you, the sources, purposes, and categories of third parties with whom we disclose it.
• Right to Delete – Request deletion of personal information we have collected (subject to certain exceptions, e.g., completing a transaction, legal obligations, fraud prevention).
• Right to Correct – Request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing – As described above.
• Right to Limit Use of Sensitive Personal Information – Request that we limit the use of sensitive personal information to what is necessary to perform the services.
• Right to Non-Discrimination – We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, email support@cheapflyshop.us with the subject line "Privacy Rights Request" and provide sufficient information for us to verify your identity. We will respond within the timeframes required by applicable law (generally 45 days under CCPA, subject to extension).

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to satisfy legal, accounting, tax, and dispute-resolution requirements.

• Booking and transaction records are typically retained for several years after travel (commonly 5–7 years) for tax, accounting, and potential claims.
• Marketing data is retained until you opt out or we no longer need it.
• Website logs and technical data are generally retained for shorter periods unless needed for security or legal purposes.

When data is no longer required, we securely delete or de-identify it.

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. Payment card information is processed through PCI-DSS compliant payment providers.

No method of transmission over the Internet or electronic storage is 100% secure; we cannot guarantee absolute security.

We use cookies, pixels, and similar technologies to operate the website, remember preferences, analyze traffic, and support advertising and analytics.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. For more detail, please see any separate Cookie Notice we publish.

Our website may contain links to third-party sites (airlines, hotels, etc.). We are not responsible for the privacy practices of those sites.

We encourage you to read their privacy policies.

Our services are directed to adults. We do not knowingly collect personal information from children under 13 (or under 16 where required by state law) without verifiable parental consent.

Passport and age data for child passengers is collected only as necessary to complete a booking made by an adult.

We are based in the United States. Personal information may be processed in the US and in other countries where our service providers or travel suppliers operate.

By using our services, you understand that your information may be transferred to and processed in countries that may have different data-protection laws from your country of residence.

We may update this Privacy Policy from time to time. The "Last Updated" date at the top or bottom of the page will indicate when changes were made.

Material changes will be posted on this page and, where appropriate, notified by email or other means. Continued use of our services after changes constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

For California residents, you may also designate an authorized agent to make requests on your behalf, subject to verification requirements.