FlyByTheWay is committed to protecting your personal information in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law.
1. Data We Collect
- Identity Data: Name, date of birth, passport number, gender — required for booking.
- Contact Data: Email address, phone number.
- Travel Data: Itinerary, booking references, travel preferences.
- Usage Data: Browser type, IP address, pages visited — via anonymised analytics.
- VIDHUR Interaction Data: Queries submitted to our AI assistant — used to improve intelligence and resolve escalations.
2. How We Use Your Data
- Process and confirm flight bookings.
- Run Beast Engine compliance checks (pre-booking).
- Communicate booking updates, e-tickets, and advisories.
- Comply with IATA, airline, and government reporting requirements.
- Improve our intelligence systems.
3. Data Sharing
- Airline partners and GDS/NDC providers — required for booking.
- IATA BSP India — for ticket settlement.
- Supabase (data infrastructure, Mumbai region) — encrypted at rest.
- We do not sell personal data to third parties.
4. Data Retention
Booking data is retained for 7 years as required by Indian tax law. VIDHUR interaction logs are retained for 12 months. You may request deletion of non-mandatory data by contacting info@flybytheway.com.
5. Your Rights (DPDPA 2023)
- Right to access your personal data.
- Right to correction of inaccurate data.
- Right to erasure (where not legally required to retain).
- Right to nominate a person to exercise rights on your behalf.
6. Cookies
We use essential session cookies for booking flow. No advertising or tracking cookies are placed. You can disable cookies in your browser, but booking functionality may be affected.