Privacy Policy

Last updated: 15 June 2025

This Privacy Policy describes how Sky Voyage, operated by 阳泉航若商贸有限公司 (registered address: 郊区河底镇河底村怡然小区518号底商, Yangquan, 045000, China), collects, uses, stores, shares, and protects your personal information when you visit our website at https://www.skyvoyage.buzz or use any of our services, applications, or related products. We are committed to safeguarding your privacy and ensuring that your personal data is handled in a transparent, lawful, and secure manner. Please read this entire document carefully to understand our practices regarding your information and how we will treat it. By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you must discontinue use of our services immediately.

Company details: 阳泉航若商贸有限公司 | Developer: Sky Voyage | Address: 郊区河底镇河底村怡然小区518号底商, Yangquan, 045000, China | Email: support@skyvoyage.buzz | Phone: +1 (270) 593-2055

1. Introduction and Scope

Sky Voyage, a brand owned and operated by 阳泉航若商贸有限公司, provides digital travel-related services, including flight booking tools, itinerary management, travel guides, and user community features. This Privacy Policy applies to all personal data processed by us when you interact with our website, mobile applications, customer support channels, social media pages, and any other online or offline services we offer. It covers information collected from users located anywhere in the world, including the European Economic Area, the United Kingdom, the United States, Canada, Australia, and China. Our goal is to be fully transparent about the data we collect, why we collect it, who we share it with, and what rights you have regarding your information.

We act as a data controller for the personal data you provide directly to us, and as a data processor in certain circumstances when we handle data on behalf of our partners. This policy does not apply to third-party websites, applications, or services that may be linked to or from our platform. We encourage you to review the privacy policies of any third parties before providing them with your information. The terms we, us, our refer to Sky Voyage and 阳泉航若商贸有限公司. The terms you, your, user refer to any individual who accesses or uses our services.

This document is designed to comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Personal Information Protection Law of China (PIPL), and other applicable data protection laws. We have appointed a data protection officer who can be reached at support@skyvoyage.buzz for any privacy-related inquiries. Our legal basis for processing your data is explained in Section 6. We reserve the right to update this policy at any time; changes will be posted on this page with an updated revision date. We will notify you of material changes via email or a prominent notice on our website.

2. Information We Collect

We collect various categories of personal information to provide, improve, and personalize our services. The types of data we gather depend on how you interact with us. Below is a comprehensive breakdown of the information we may collect.

2.1 Personal Identification Information

When you create an account, make a booking, subscribe to our newsletter, or contact customer support, we may collect the following identifiers: your full name, email address, phone number, postal address (including street, city, province, and postal code), date of birth, nationality, passport or government-issued ID number (for travel bookings), and emergency contact details. We also collect your username and password for account authentication. This information is necessary to provide you with our core services, such as flight reservations and itinerary management.

2.2 Payment and Financial Data

To process transactions, we collect payment card information (card number, expiration date, CVV, and billing address), bank account details for refunds, and transaction history. All payment processing is handled by our PCI-DSS compliant payment processors; we do not store full credit card numbers on our servers. We may also retain limited payment token information for recurring billing or refund purposes. If you use digital wallets or third-party payment services, we receive transaction identifiers and confirmation details from those providers.

2.3 Travel and Booking Information

We collect details related to your travel arrangements, including flight numbers, departure and arrival cities, travel dates, seat preferences, meal preferences, baggage information, frequent flyer numbers, and any special assistance requests. We also collect information about your travel companions if you book on their behalf. This data is essential for fulfilling your travel bookings and providing customer support.

2.4 Technical and Usage Data

When you access our website or app, we automatically collect certain technical information: your IP address, browser type and version, operating system, device type, screen resolution, language preferences, referring URLs, and clickstream data. We use cookies, web beacons, and similar tracking technologies to collect this data. Our analytics tools (including Google Analytics and internal tracking) help us understand how users interact with our platform, which pages are most visited, and how we can improve user experience. We also collect log data, including timestamps, error reports, and performance metrics.

2.5 Communication and Support Data

If you contact us via email, phone, live chat, or social media, we collect records of those communications, including audio recordings of calls (with your consent where required), chat transcripts, and correspondence. We also collect your preferences for receiving marketing communications and your responses to surveys or feedback forms.

2.6 Location Information

With your explicit consent, we may collect precise geolocation data from your device to offer location-based services, such as nearby airport suggestions, local travel deals, or weather updates. You can disable location sharing at any time through your device settings. We also derive approximate location from your IP address for analytics and fraud prevention.

2.7 Sensitive Personal Data

In limited circumstances, we may collect sensitive personal data such as health information (e.g., medical conditions requiring special assistance during flights), dietary restrictions, religious preferences (for meal choices), or biometric data (if you use facial recognition for identity verification). We only process such data with your explicit consent or when necessary for substantial public interest, and we apply additional safeguards. We do not collect or process sensitive data for any purpose other than those explicitly stated.

3. How We Collect Your Information

We collect personal information through various channels, both direct and indirect. Understanding these methods helps you control what data you share with us.

3.1 Information You Provide Directly

You actively provide information when you: register for an account, fill out booking forms, subscribe to newsletters, participate in surveys or contests, post comments or reviews on our community pages, upload documents (such as passport copies), contact customer support, or interact with our social media channels. Every form field you complete, every file you upload, and every message you send constitutes data you voluntarily provide. We clearly indicate which fields are mandatory and which are optional.

3.2 Automated Collection Technologies

We use cookies, pixel tags, local storage, and similar technologies to automatically collect data when you browse our website. Cookies are small text files stored on your device that help us remember your preferences, authenticate your session, and analyze site traffic. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted). You can manage cookie preferences through our cookie consent banner or your browser settings. We also use web beacons (invisible 1x1 pixels) in emails to track open rates and engagement. Our third-party analytics providers may set their own cookies subject to their privacy policies.

3.3 Information from Third Parties

We may receive personal data about you from trusted third-party sources, including: travel agencies and booking platforms (when you book through a partner), airlines and hotels (for itinerary confirmation), payment processors (transaction confirmations), social media platforms (if you log in via Facebook, Google, or Apple ID), credit reference agencies (for fraud prevention), and public databases (for identity verification). We combine this data with information we already hold to enhance our services, personalize your experience, and prevent fraud. We require all third parties to confirm they have lawful basis to share your data with us.

3.4 Publicly Available Sources

We may collect information that you have made publicly available on social media, forums, review sites, or other public platforms, but only to the extent permitted by applicable law and only for legitimate purposes such as improving our services or responding to public feedback. We do not systematically scrape personal data from public sources.

4. Types of Information We Process

We categorize the personal data we process into the following types for clarity and compliance. Each type is processed for specific purposes and retained according to our data retention schedule.

We do not process any data that reveals racial or ethnic origin, political opinions, trade union membership, genetic data, or sexual orientation unless you voluntarily provide it in a context where it is clearly necessary (e.g., a medical emergency form). In such cases, we will obtain your explicit consent and apply heightened security measures.

5. How We Use Your Information

We use the personal data we collect for the following purposes, each grounded in a specific legal basis. We never use your data in ways that are incompatible with these purposes without notifying you and obtaining your consent where required.

5.1 Service Provision and Fulfillment

We use your identity, contact, travel, and financial data to process your bookings, send booking confirmations and reminders, issue tickets, arrange travel insurance, coordinate with airlines and hotels, and provide customer support. This includes handling changes, cancellations, refunds, and special requests. Without this processing, we cannot deliver the services you request.

5.2 Account Management

We use your data to create and maintain your user account, authenticate your login, manage your preferences, store your booking history, and enable features like saved searches and wishlists. We also use your contact data to send administrative messages, such as password reset links or account suspension notices.

5.3 Personalization and Recommendations

We analyze your browsing behavior, booking history, and preferences to offer personalized travel recommendations, tailored content, and relevant promotions. For example, if you frequently search for flights to Japan, we may show you deals on Tokyo hotels or Japan travel guides. You can opt out of personalization at any time via your account settings.

5.4 Marketing and Advertising

With your consent (where required by law), we use your contact data and profile data to send you newsletters, promotional offers, and information about new services. We may also use your data for retargeting ads on social media platforms and search engines. You can withdraw your consent at any time by clicking the unsubscribe link in any email or updating your communication preferences. We do not sell your personal data to third parties for their own marketing purposes.

5.5 Analytics and Improvement

We use technical and usage data to analyze how our website and services are used, identify trends, measure the effectiveness of marketing campaigns, and improve our platform. This includes A/B testing, user journey analysis, and performance monitoring. Aggregated, anonymized data may be used for business intelligence and reporting.

5.6 Security and Fraud Prevention

We process your data to detect, prevent, and investigate fraudulent activities, unauthorized access, cyberattacks, and other security threats. This includes verifying your identity, monitoring account activity, and using automated fraud detection algorithms. We may share data with law enforcement or regulatory authorities when required by law or to protect our rights.

5.7 Legal Compliance

We use your data to comply with applicable laws, regulations, court orders, and legal processes. This includes tax reporting, anti-money laundering checks, sanctions screening, and responding to lawful requests from public authorities. We may also use your data to enforce our Terms of Service and other legal agreements.

5.8 Research and Development

With appropriate anonymization or pseudonymization, we may use your data for research purposes, such as analyzing travel trends, improving accessibility features, or developing new products. Any research results published will not identify individual users.

6. Legal Basis for Processing Your Data

We process your personal data only when we have a valid legal basis under applicable data protection laws. The specific basis depends on the purpose of processing and your location. Below we outline the legal grounds we rely on.

6.1 Consent

We rely on your explicit consent for processing activities such as sending marketing emails, placing non-essential cookies, collecting precise location data, and processing sensitive personal data. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Withdrawal can be done via your account settings, email, or cookie preferences.

6.2 Contractual Necessity

We process your data as necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes processing your booking, issuing tickets, and providing customer support. If you do not provide the required data, we may not be able to fulfill the contract.

6.3 Legal Obligation

We process your data when required to comply with a legal obligation, such as tax laws, anti-fraud regulations, or court orders. This includes retaining transaction records for accounting purposes and reporting suspicious activities to authorities.

6.4 Legitimate Interests

We may process your data for our legitimate interests, provided that such processing does not override your fundamental rights and freedoms. Our legitimate interests include: improving our services, preventing fraud, ensuring network and information security, conducting direct marketing (where permitted by law), and analyzing user behavior to enhance user experience. We conduct a legitimate interest assessment for each processing activity and provide you with the right to object.

6.5 Vital Interests

In rare circumstances, we may process your data to protect your vital interests or those of another person, such as in a medical emergency where you are unable to provide consent. This basis is used only when absolutely necessary and for a limited duration.

6.6 Public Interest

We may process certain data for tasks carried out in the public interest, such as public health monitoring or scientific research, but only when authorized by law and with appropriate safeguards.

7. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients for the purposes described in this policy. We require all recipients to respect the confidentiality and security of your data and to process it only in accordance with our instructions and applicable law.

7.1 Service Providers and Business Partners

We share data with trusted third-party service providers who help us operate our business, including: payment processors (Stripe, PayPal, Alipay), cloud hosting providers (AWS, Alibaba Cloud), analytics services (Google Analytics, Mixpanel), customer support platforms (Zendesk), email marketing platforms (Mailchimp, SendGrid), fraud detection services (Sift, Forter), and travel suppliers (airlines, hotels, car rental agencies, travel insurance providers). These providers are contractually bound to use your data only for the specific services they provide and to implement appropriate security measures.

7.2 Affiliates and Corporate Group

We may share your data with our parent company, subsidiaries, or affiliates (including 阳泉航若商贸有限公司 and its related entities) for internal administrative purposes, such as centralized customer databases, IT support, and compliance. All affiliates are bound by this Privacy Policy and applicable data protection laws.

7.3 Legal and Regulatory Authorities

We may disclose your data to law enforcement agencies, courts, regulatory bodies, or other public authorities when required by law, court order, or legal process. This includes responding to subpoenas, search warrants, or requests from data protection authorities. We will notify you of such disclosures unless prohibited by law.

7.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such change and ensure that the recipient agrees to protect your data in accordance with this Privacy Policy.

7.5 With Your Consent

We may share your data with third parties for purposes not described in this policy when we have obtained your explicit consent. For example, if you choose to participate in a co-branded promotion, we may share your data with the partner brand.

7.6 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify you with research institutions, advertisers, or business partners for purposes such as market analysis, trend reporting, or academic research. This data is stripped of all identifiers and is not subject to this Privacy Policy.

8. International Data Transfers

As a global company operating from China with users worldwide, we may transfer your personal data to countries outside your home jurisdiction, including China, the United States, Singapore, and other jurisdictions where our service providers are located. We ensure that such transfers comply with applicable data protection laws and that your data receives an equivalent level of protection.

8.1 Transfer Mechanisms

For transfers from the European Economic Area (EEA) or the United Kingdom to countries not deemed adequate by the European Commission or UK Government, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or UK International Data Transfer Agreement. For transfers from China, we comply with the Personal Information Protection Law (PIPL) requirements, including conducting a personal information protection impact assessment and obtaining your separate consent where required. For transfers from California, we ensure compliance with the CCPA by providing notice and opt-out rights.

8.2 Countries Where Data May Be Processed

Your data may be processed in: China (where our headquarters are located), the United States (where our cloud servers and many service providers are based), Singapore, Germany, Ireland, Japan, and other countries where our subcontractors operate. Each location has data protection laws that may differ from your home country. We have implemented appropriate safeguards, including contractual clauses and technical measures, to protect your data during transfer.

8.3 Your Rights Regarding Transfers

You have the right to request a copy of the safeguards we have implemented for international transfers by contacting us at support@skyvoyage.buzz. We will provide you with a summary of the transfer mechanisms or a redacted copy of the relevant contractual clauses. We also inform you of the potential risks of transferring your data to countries with different data protection standards.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. The retention period varies depending on the type of data and the context of processing.

9.1 Retention Periods

9.2 Data Deletion and Anonymization

When data is no longer needed, we securely delete it or irreversibly anonymize it so that it can no longer be associated with you. Deletion methods include physical shredding of paper records, secure erasure of electronic data using industry-standard tools, and cryptographic destruction of encryption keys. We conduct periodic audits to ensure compliance with our retention schedule.

9.3 Exceptions

We may retain data longer if required by law, court order, or for the establishment, exercise, or defense of legal claims. For example, if you are involved in a dispute with us, we may retain relevant data until the matter is resolved. We will inform you if we need to extend the retention period.

10. Data Security Measures

We implement a comprehensive set of technical, organizational, and administrative security measures to protect your personal data against unauthorized access, alteration, disclosure, destruction, or loss. Our security program is based on industry standards such as ISO 27001 and NIST Cybersecurity Framework.

10.1 Technical Measures

10.2 Organizational Measures

10.3 Incident Response

In the event of a data breach, we have a dedicated incident response team that will promptly investigate, contain, and remediate the incident. We will notify affected users and relevant supervisory authorities within 72 hours (as required by GDPR) or as otherwise required by law. Our notification will include a description of the breach, the types of data involved, the likely consequences, and the measures we have taken to address it.

11. Your Privacy Rights

Depending on your jurisdiction, you have various rights regarding your personal data. We are committed to facilitating the exercise of these rights and responding to your requests in a timely manner, usually within 30 days (or shorter where required by law).

11.1 Right to Access

You have the right to request confirmation of whether we process your personal data and, if so, to obtain a copy of that data along with information about the purposes of processing, categories of data, recipients, retention periods, and your rights. We will provide the information in a commonly used electronic format unless you request otherwise.

11.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update much of your data directly through your account settings. For other changes, please contact us.

11.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data when: the data is no longer necessary for the purposes for which it was collected, you withdraw consent and no other legal basis applies, you object to processing and there are no overriding legitimate grounds, the data was unlawfully processed, or deletion is required by law. We will evaluate your request and delete the data unless we have a legal obligation or legitimate interest to retain it.

11.4 Right to Restrict Processing

You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of the data (for a period enabling us to verify), the processing is unlawful but you oppose deletion, we no longer need the data but you require it for legal claims, or you have objected to processing pending verification of our legitimate grounds.

11.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller without hindrance, where the processing is based on consent or contract and is carried out by automated means. We will provide the data in JSON or CSV format.

11.6 Right to Object

You have the right to object to processing based on legitimate interests or direct marketing. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. For direct marketing, we will stop processing immediately upon objection.

11.7 Rights under CCPA (California)

If you are a California resident, you have the right to: know what personal information we collect, use, share, and sell; request deletion of your personal information; opt out of the sale of your personal information (we do not sell personal data); and non-discrimination for exercising your rights. To exercise your rights, please submit a verifiable request via email or our webform. We will respond within 45 days.

11.8 Rights under PIPL (China)

If you are in China, you have additional rights under the Personal Information Protection Law, including: the right to know and decide about the processing of your personal information; the right to restrict or refuse processing; the right to request explanation of our processing rules; the right to request transfer of your data to a designated third party; and the right to have your data deleted when processing violates laws or agreements. We will respond to your request within 15 working days.

11.9 How to Exercise Your Rights

To exercise any of your rights, please contact us at support@skyvoyage.buzz or write to us at: 郊区河底镇河底村怡然小区518号底商, Yangquan, 045000, China. We may need to verify your identity before processing your request, which may require you to provide additional information. We will not charge a fee for exercising your rights unless your request is manifestly unfounded or excessive. You also have the right to lodge a complaint with your local data protection authority if you are unsatisfied with our response.

12. Children's Privacy

Our services are not directed to individuals under the age of 16 (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately. We will take steps to delete that information as soon as possible.

12.1 Age Verification

We may implement age verification mechanisms during account registration, such as requesting date of birth or using third-party age verification services. If we become aware that a user is under the applicable age and has provided personal data, we will delete that data and terminate the account. We encourage parents to monitor their children's online activity and to teach them never to provide personal information without parental permission.

12.2 Data from Minors

In some jurisdictions, we may collect data from minors (e.g., children under 18) with parental consent for specific purposes such as family travel bookings. In such cases, we will obtain verifiable parental consent, limit the data collected to what is necessary, and provide parents with access to their child's data and the ability to request deletion. We will never use data from minors for marketing purposes.

13. Third-Party Services and Links

Our website and services may contain links to third-party websites, plugins, and applications, including social media widgets, payment gateways, and travel booking partners. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party services and are not responsible for their privacy practices. We encourage you to read the privacy policies of every website you visit.

13.1 Social Media Features

Our website includes social media features, such as the Facebook Like button, Twitter share button, and Instagram widgets. These features may collect your IP address, the page you are visiting, and may set a cookie to enable the feature to function properly. Your interactions with these features are governed by the privacy policy of the company providing the feature.

13.2 Payment Processors

We use third-party payment processors to handle transactions. When you make a payment, you will be directed to a payment page hosted by the processor (e.g., Stripe, PayPal, Alipay). These processors have their own privacy policies and security measures. We do not store full payment card numbers on our servers, but we may receive limited information such as the last four digits, expiration date, and transaction status.

13.3 Analytics and Advertising Partners

We use Google Analytics, Facebook Pixel, and other analytics providers to understand how users interact with our site. These providers may use cookies and similar technologies to collect data about your online activities over time and across different websites. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on. For Facebook ads, you can adjust your ad preferences in your Facebook settings.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will notify you by posting a prominent notice on our website, sending an email to the address associated with your account, or through other appropriate communication channels. The revised policy will include an updated Last updated date at the top of the page.

14.1 Material Changes

Material changes include, but are not limited to: changes in the categories of personal data collected, changes in how we use or share your data, changes in your rights, or changes in our data retention practices. We will obtain your consent before implementing material changes if required by applicable law. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

14.2 Previous Versions

We will archive previous versions of this Privacy Policy and make them available upon request. You can request a copy of any previous version by contacting us at support@skyvoyage.buzz.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to resolving any issues promptly and transparently.

Data Controller: 阳泉航若商贸有限公司 (Sky Voyage)

Address: 郊区河底镇河底村怡然小区518号底商, Yangquan, 045000, China

Email: support@skyvoyage.buzz

Phone: +1 (270) 593-2055

Website: https://www.skyvoyage.buzz

15.1 Data Protection Officer

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our compliance with data protection laws. You can reach our DPO at the same email address: support@skyvoyage.buzz, with the subject line Attention: DPO. Alternatively, you can write to us at the postal address above, marking the envelope for the attention of the DPO.

15.2 Supervisory Authority

If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection supervisory authority. For China, you may contact the Cyberspace Administration of China. For California residents, you may contact the California Attorney General. We encourage you to contact us first so that we can attempt to resolve your issue directly.

15.3 Response Time

We will acknowledge receipt of your privacy-related request within 5 business days and will respond substantively within 30 days (or shorter if required by local law). If we need more time, we will inform you of the reason and the expected response time. We may require additional information to verify your identity before processing your request.

This Privacy Policy was prepared with care by Sky Voyage and 阳泉航若商贸有限公司. We are dedicated to protecting your privacy and being transparent about our data practices. Thank you for trusting us with your travel journey.