1. Preamble
Fly and Drive Inc. ("Fly & Drive", "we", "our") operates a travel booking platform covering flight tickets (Fly), vehicle rental (Drive), chauffeur transfers (Ride), and eSIM activation, available on our website and iOS and Android mobile applications.
This Privacy Policy describes how we collect, use, share, and protect your personal data and the rights available to you under the EU GDPR, UK GDPR, French Law No. 78-17 of 6 January 1978 as amended, and - for US users - the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
2. Who we are
The data controller for your personal data is:
- Fly and Drive Inc., a Delaware corporation
- Registered office: 131 Continental Dr, Suite 305, Newark, DE 19713, United States
- Phone: +1 737 387 5437
2.1 Our contacts
| Department | Purpose | |
|---|---|---|
| Privacy & GDPR/CCPA rights | privacy@fly-and-drive.com | Exercise your data rights |
| Customer Support | support@fly-and-drive.com | Bookings, account, app |
| Legal | legal@fly-and-drive.com | Disputes, terms |
| Information Security | security@fly-and-drive.com | Vulnerability reports |
| Billing | billing@fly-and-drive.com | Payments and refunds |
For users in the European Union, a representative is designated under GDPR Article 27; contact details are available on request at privacy@fly-and-drive.com.
3. Data we collect
| Category | Examples | Module |
|---|---|---|
| Identity | Name, date of birth, nationality, driver's license, passport | Fly, Drive |
| Contact | Email, mobile phone | Fly, Drive, Ride |
| Travel & itinerary | Pickup/drop-off, hotel, flight number, preferences | Fly, Ride |
| Payment | Secure payment token - never full card number | Fly, Drive, Ride, eSIM |
| Geolocation | Device GPS (with your consent) | Mobile app, Ride |
| Technical usage | IP address, cookies, device identifiers | Website, App |
| eSIM | ICCID number, data profile | eSIM |
We never collect your full card number (handled exclusively by PCI-DSS certified payment providers), nor health, biometric, religious, or sexual orientation data unless you voluntarily provide it (e.g. a special meal request), in which case it is used only with your explicit consent and shared solely with the relevant carrier.
5. Why we use your data
5.1 To perform our contract with you
- Book and issue your flight tickets.
- Send driver details to your selected rental partner.
- Arrange chauffeur transfers and track your flight to adjust pickup time.
- Generate and activate your eSIM plans.
- Manage your account and after-sales support.
5.2 For our legitimate interests
- Prevent payment fraud.
- Improve customer service and our application.
- Maintain system security.
5.3 With your consent
- Send trip status notifications (delays, driver arrival).
- Access precise device geolocation.
- Analytics cookies.
5.4 To comply with law
- Share booking data with customs and border authorities when required.
- Retain billing records for legally required periods.
6. Artificial intelligence
When you contact support, an AI model may categorize your request to route you to the right team. It does not process banking data, and you may request a human agent at any time.
Our platform also uses real-time pricing for vehicle rentals based on aggregated, anonymized data (demand, weather, availability). For identical searches, this does not produce pricing differences tied to your personal profile.
8. International transfers
Fly & Drive operates internationally; your data may be transferred outside your country of residence, including to the United States. Transfers are covered by appropriate GDPR safeguards (adequacy decisions, EU Standard Contractual Clauses, or lawful derogations for trip fulfillment). Details are available on request.
9. Retention periods
| Data type | Duration |
|---|---|
| User account | Relationship duration + 3 years after last activity |
| Booking data | Trip duration + 13 months |
| Billing data | Legal accounting retention period |
| Live geolocation (ride-hail) | Deleted immediately at end of ride |
| Cookies | 13 months maximum |
10. Data security
- TLS 1.3 encryption for all communications between apps and servers.
- Strict data isolation between users in our database.
- Enhanced authentication available on your account.
- Responsible vulnerability disclosure: security@fly-and-drive.com.
- If a breach poses risk to you, we notify the competent authority and you directly where required by law.
11. Your rights
11.1 If you reside in the EU or UK
- Access and data portability.
- Rectification of inaccurate data.
- Object and withdraw consent at any time.
- Restriction of processing.
- Erasure of your account and data, subject to legal retention obligations.
- Lodge a complaint with your supervisory authority (e.g. CNIL at www.cnil.fr).
11.2 If you reside in California or another US state
- Know what data is collected and used.
- Opt out of sale or sharing (we do not sell or share for advertising).
- Limit use of sensitive information.
- Deletion and correction.
- Non-discrimination for exercising your rights.
- Authorize an agent to act on your behalf.
11.3 How to exercise your rights
Email privacy@fly-and-drive.com. We acknowledge within 5 business days and respond within one month (30 days GDPR, 45 days CCPA, extendable once for complex requests with prior notice).
12. Children
Our services are for adults only - the legal age to book a flight, rent a vehicle, or create an account. A minor may appear as an accompanied passenger on an adult's booking but cannot create an account or book independently. We do not knowingly collect data from children under 13.
13. Changes to this policy
We may update this Policy for regulatory changes or new features. Material changes will be notified by email or push at least 15 days before they take effect.
14. Contact us
For questions about this Policy or your personal data: privacy@fly-and-drive.com.
DPO (EU): dpo@fly-and-drive.com