Privacy Policy

1. Controller

2. Data we process

• Contact, account, booking, passenger and payment-status data required for the selected service.
• For WhatsApp integrations: business-account ID, phone-number ID, display number, encrypted credentials and technical delivery information.
• Technical security data such as timestamps, IP address, error codes and audit records.

3. Purposes and legal bases

Data is processed to perform contracts and bookings, provide secure communications, meet legal obligations and, where applicable, on the basis of consent or legitimate interests in a secure and reliable service.

4. WhatsApp and third parties

When WhatsApp Business Platform is enabled, selected messages and documents are transmitted to Meta/WhatsApp. The system is designed as an outbound service without its own message inbox. Incoming message text is not stored; technical delivery statuses may be recorded.

5. Recipients and international transfers

Data is shared only with authorised operators, agencies, technical service providers and suppliers required to provide the service. Third-party processing may occur outside the EU/EEA under the applicable contracts and safeguards.

6. Retention

Data is kept only for as long as required to provide the service, maintain security, document transactions or comply with legal retention duties. Data no longer required is deleted or anonymised.

7. Your rights

You may request access, correction, deletion, restriction, portability and, where applicable, object to processing. You may also complain to a competent data-protection authority.

8. Contact

Send privacy requests to info@nextfly.ch.