Privacy Policy

XTC Flights ("we," "us," "our," or "the Company") values the privacy of every visitor and customer who uses xtcflights.com ("the Website") or contacts us at +1-844-516-2126. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices you have. By using our Website or services, you agree to the practices described below.

1. Information We Collect

We collect information that you provide directly, information collected automatically when you use our Website, and information from third-party sources such as airlines and GDS partners.

a) Information You Provide

• Personal details: full name, date of birth, gender, nationality, passport details where required
• Contact details: email address, phone number, billing and mailing address
• Payment information: credit/debit card number, expiry date, CVV, and billing details (processed via PCI-DSS compliant payment gateways)
• Travel preferences: meal choice, seat preference, frequent flyer membership numbers
• Communication content: emails, call recordings, and chat transcripts with our customer service

b) Information Collected Automatically

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: pages viewed, time spent, referring URLs, search queries on our site
• Cookies and similar technologies as described in our Cookie section below

2. How We Use Your Information

We use the information we collect for the following purposes:

• To process flight bookings, payments, cancellations, and date changes
• To send booking confirmations, e-tickets, itineraries, and travel updates
• To provide customer service through phone, email, and chat
• To comply with legal, regulatory, and airline requirements (including TSA Secure Flight)
• To detect and prevent fraud, unauthorized transactions, and abuse
• To improve the Website, our services, and customer experience
• To send promotional offers and travel deals (only if you opt in)

3. How We Share Your Information

We do not sell your personal information. We share your information only as necessary to deliver our services or as required by law:

• Airlines and travel suppliers — to confirm and issue tickets, hotels, or related services
• Global Distribution Systems (GDS) such as Sabre, Amadeus, or Travelport for booking processing
• Payment processors for secure transaction processing
• Government authorities when required by law (e.g., TSA, customs, court orders, subpoenas)
• Service providers who assist with hosting, analytics, customer support, and email delivery, under confidentiality agreements

4. Cookies and Tracking Technologies

Our Website uses cookies, web beacons, and similar technologies to recognize returning visitors, remember preferences, analyze traffic, and improve our services. We also use third-party analytics tools such as Google Analytics and advertising platforms such as Google Ads to understand how visitors use the site and to measure ad performance.

You can disable cookies through your browser settings, but doing so may affect Website functionality. To opt out of personalized advertising, visit Google Ads Settings or the Digital Advertising Alliance opt-out page.

5. Data Security

We use industry-standard administrative, technical, and physical safeguards to protect your personal information, including SSL/TLS encryption for data in transit and PCI-DSS compliant systems for payment data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. Booking records may be retained for up to 7 years to comply with financial and tax laws.

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal limits)
• Opt out of marketing emails by clicking "unsubscribe"
• Request a copy of your data in a portable format

California residents have additional rights under the CCPA, and EU/UK residents have rights under GDPR. To exercise any right, please email privacy@xtcflights.com or call +1-844-516-2126.

8. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided us with information, please contact us and we will delete it promptly.

9. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read their privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. Your continued use of the Website after changes constitutes acceptance of the updated policy.