Privacy Policy
Last updated: March 2026
This Privacy Policy describes how LLC Fly.ge (Identification Code: 405424964), operating the FlyGE website (fly.ge), collects, uses, stores, and protects your personal data. We are committed to protecting your privacy in accordance with the Law of Georgia on Personal Data Protection and other applicable regulations.
1. Data We Collect
We collect the following types of personal data: Account Information: Full name, email address, phone number, and password (encrypted) when you create an account. Booking Information: Passenger names, dates of birth, gender, nationality, passport/ID numbers and expiry dates, contact details — as required for airline ticketing. Payment Information: Payment is processed by Bank of Georgia (BOG). We do not store your full credit card number on our servers. We may store a masked card reference for transaction records. Usage Data: IP address, browser type, device information, pages visited, search queries, and interaction data collected automatically when you use our website. Communication Data: Records of your communications with our support team (emails, call logs).
2. How We Use Your Data
We use your personal data for the following purposes: - Processing and managing flight bookings, including issuing tickets and sending confirmation emails. - Communicating with you about your bookings, account, and customer support inquiries. - Processing payments through our payment partner (BOG). - Improving our website, services, and user experience. - Sending marketing communications (only with your explicit consent — you can unsubscribe at any time). - Complying with legal obligations and resolving disputes. - Preventing fraud and ensuring the security of our services.
3. Cookies & Tracking Technologies
We use cookies and similar technologies to: - Keep you logged in to your account. - Remember your search preferences and language settings. - Analyze website traffic and usage patterns. - Improve website performance and functionality. Essential cookies are necessary for the website to function and cannot be disabled. Analytics cookies help us understand how visitors use our website. You can manage cookie preferences through your browser settings. We may use third-party analytics services (such as Google Analytics) that set their own cookies. These services help us analyze traffic and usage patterns in aggregate.
4. Data Sharing & Third Parties
We may share your personal data with the following third parties: Airlines: Passenger information (name, date of birth, passport details) is shared with airlines to process bookings and issue tickets. Airlines have their own privacy policies. Payment Processor: Bank of Georgia (BOG) processes your payment data. BOG operates under its own privacy and security standards. Amadeus GDS: We use the Amadeus Global Distribution System to search and book flights. Booking data is transmitted through their secure systems. Legal Authorities: We may disclose your data when required by Georgian law, court orders, or government requests. We do not sell your personal data to third parties for marketing purposes.
5. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes described in this policy: - Account data: Retained while your account is active and for 3 years after account deletion. - Booking data: Retained for 5 years after the travel date for legal, tax, and dispute resolution purposes. - Payment records: Retained for 6 years as required by Georgian tax legislation. - Usage/analytics data: Retained in anonymized form for up to 2 years. - Marketing consent records: Retained for the duration of consent plus 1 year. After the retention period expires, data is securely deleted or anonymized.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including: - SSL/TLS encryption for all data transmission. - Encrypted storage of sensitive data (passwords, personal identifiers). - Regular security assessments and updates. - Access controls limiting employee access to personal data on a need-to-know basis. - Secure payment processing through Bank of Georgia's PCI DSS-compliant systems. While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Under Georgian data protection law, you have the following rights: Right of Access: You can request a copy of the personal data we hold about you. Right to Rectification: You can request correction of inaccurate or incomplete data. Right to Erasure: You can request deletion of your personal data, subject to legal retention requirements. Right to Restriction: You can request that we limit the processing of your data in certain circumstances. Right to Object: You can object to the processing of your data for marketing purposes at any time. Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time. To exercise your rights, contact us at support@fly.ge. We will respond within 15 business days.
8. Children's Privacy
Our services are not directed to children under 18. We do not knowingly collect personal data from children without parental consent. Booking for minor passengers must be done by an adult (parent or legal guardian). If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete that information.
9. International Data Transfers
Your personal data may be transferred to and processed in countries outside Georgia in connection with airline bookings (e.g., when booking flights to international destinations, passenger data is sent to airlines and airport authorities in those countries). We ensure that any such transfers comply with applicable data protection requirements and that appropriate safeguards are in place.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be posted on this page with a revised "last updated" date. For significant changes, we will notify registered users via email. We encourage you to review this policy periodically.
11. Governing Law
This Privacy Policy is governed by the laws of Georgia, including the Law of Georgia on Personal Data Protection. Any disputes related to your personal data will be subject to the jurisdiction of the courts of Tbilisi, Georgia. You also have the right to file a complaint with the State Inspector's Service of Georgia (Personal Data Protection Inspector) if you believe your data protection rights have been violated.
12. Contact Us
For questions, concerns, or requests related to your privacy and personal data, contact us at: LLC Fly.ge (Data Controller) Address: 14 Vazha-Pshavela Ave, Tbilisi 0179, Georgia Phone: +995 525 123 320 Email: support@fly.ge
