Privacy Policy

This Privacy Policy describes how AirDeelay.com (“we”, “us”, “our”) processes personal data. AirDeelay.com is owned and operated by BETA STONE HOLDINGS LIMITED, a company registered in Cyprus under Registration Number HE374184, with its registered office at Ευαγόρα Παλληκαρίδη, 2, 3035, Λεμεσός, Κύπρος (Limassol, Cyprus).

We are committed to protecting your privacy and ensuring the lawful, fair, and transparent processing of your personal data in accordance with the EU General Data Protection Regulation (GDPR), applicable Cyprus legislation, and other relevant data protection regulations.

By using our website or services, you confirm that you have read and understood this Privacy Policy.

1. DATA CONTROLLER

The data controller responsible for your personal data is:

BETA STONE HOLDINGS LIMITED
Ευαγόρα Παλληκαρίδη, 2
3035 Λεμεσός, Κύπρος (Limassol, Cyprus)
Registration Number: HE374184
Email: privacy@airdeelay.com

2. PERSONAL DATA WE PROCESS

We may collect and process the following categories of personal data:

2.1. Usage Data

Includes IP address, geographical location, browser type and version, operating system, referral source, length of visit, pages viewed, click patterns, and related analytics. Collected via cookies and similar technologies.

2.2. Lead Advertisement Data

When you interact with our Google or Facebook Lead Ads, we may collect:

• name and surname
• email address
• phone number
• airline and flight-related details
• any data voluntarily submitted

2.3. Account Data

When you register an account on AirDeelay.com, we may process:

• name and surname
• email address
• phone number
• date of birth
• login credentials
• any additional information provided during account creation

2.4. Service Provision Data

Includes all information required to provide flight compensation claim services, such as:

• contact details
• flight information
• boarding passes and tickets
• claim documentation
• identity verification documents
• communications relating to your claim
• payment details (masked—no full card numbers stored)

2.5. Messaging and Newsletter Data

Email address, subscription preferences, and interaction data if you subscribe.

2.6. Correspondence Data

Includes content and metadata of email, chat, and contact form communications.

2.7. Legal and Compliance Data

Any personal data required for legal claims, compliance, fraud prevention, or regulatory obligations.

3. PURPOSES AND LEGAL BASES FOR PROCESSING

We process personal data only when legally permitted. The purposes and legal bases include:

3.1. Website Operation and Improvement

Legal basis: legitimate interest (Art. 6(1)(f) GDPR)
To maintain, secure, and optimise our website.

3.2. Provision of Services and Performance of Contract

Legal basis: performance of a contract (Art. 6(1)(b) GDPR)
To process flight compensation claims, communicate with you, and deliver our services.

3.3. Marketing and Lead Communications

Legal basis: consent (Art. 6(1)(a) GDPR)
To contact you with relevant information when you provide your details in lead ads or subscribe to newsletters.

3.4. Customer Support Communications

Legal basis: legitimate interest (Art. 6(1)(f) GDPR)

3.5. Legal Obligations and Compliance

Legal basis: compliance with law (Art. 6(1)(c) GDPR)

3.6. Establishment, Exercise, or Defence of Legal Claims

Legal basis: legitimate interest (Art. 6(1)(f) GDPR)

3.7. Risk Management and Insurance

Legal basis: legitimate interest (Art. 6(1)(f) GDPR)

4. DISCLOSURE OF PERSONAL DATA

We may share your personal data with:

4.1. Group Companies and Affiliates

Where necessary for administrative or operational purposes.

4.2. Professional Service Providers

Such as:

• payment processors
• IT and hosting providers
• email service providers
• customer support solutions
• marketing and analytics platforms
• legal advisers
• insurers

All service providers are required to maintain appropriate technical and organisational security measures.

4.3. Public Authorities and Courts

Where required by law or necessary for legal claims.

4.4. International Transfers

If your data is transferred outside the EU/EEA, we implement legally required safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.

5. DATA RETENTION

We retain personal data only as long as necessary for the purposes for which it is collected, or as required by law.

Retention periods include:

• Account data: up to 3 years after last activity or 10 years after completion of services
• Service provision data: up to 10 years after the service is completed
• Messaging data: up to 2 years (or until consent is withdrawn)
• Correspondence data: up to 2 months after inquiry resolution
• Usage data: as long as necessary for analytics purposes
• Legal documents: retained according to applicable statutory limitation periods

We may retain data longer if necessary to comply with legal obligations or defend legal claims.

6. MARKETING COMMUNICATIONS

We may send marketing communications via email or SMS if:

• you have provided explicit consent, or
• you are an existing customer who has not opted out.

You may withdraw your consent or opt out at any time by:

• clicking the “unsubscribe” link in emails, or
• contacting us at privacy@airdeelay.com

Opting out from marketing does not affect service-related communications.

7. YOUR RIGHTS UNDER GDPR

You have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to object to processing, including marketing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Supervisory authority (Cyprus):
Office of the Commissioner for Personal Data Protection
Website: www.dataprotection.gov.cy

You may exercise your rights by contacting us at: privacy@airdeelay.com

8. COOKIES

AirDeelay.com uses cookies to ensure website functionality, enhance user experience, and support analytics and advertising.

Types of cookies used include:

• Required cookies – essential for website functionality
• Functional cookies – improve usability and performance
• Analytics cookies – analyse website usage
• Advertising cookies – manage advertising and measure effectiveness

A detailed cookies list is available in our Cookie Policy.

You can manage your cookie preferences in your browser settings or via our cookie settings page.

9. THIRD-PARTY COOKIES AND SERVICE PROVIDERS

Our service providers may use cookies, including but not limited to:

• Cloudflare
• Google Analytics
• Google Tag Manager
• Facebook/Meta
• YouTube
• Zendesk
• Hotjar
• Bing
• LinkedIn
• TikTok
• Yandex
• Other analytics or support tools as required for service provision

Each provider is responsible for its own privacy policy.

10. THIRD-PARTY LINKS

AirDeelay.com may contain links to external websites. We are not responsible for the privacy practices or content of such websites. We recommend reviewing their privacy policies before submitting personal data.

11. CHILDREN’S DATA

Our website and services are intended for individuals aged 16 or older. We only process data of minors when consent is provided by a parent or legal guardian. If we discover that we have processed data of a minor without such consent, we will delete it promptly.

12. DATA ACCURACY

You must ensure that the information you provide to us is accurate and up to date. You may request corrections at any time.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically. Any changes will be posted on AirDeelay.com. In the event of material changes, we may notify you via email.

14. CONTACT INFORMATION

For all inquiries regarding this Privacy Policy or your personal data, please contact:

BETA STONE HOLDINGS LIMITED
Email: privacy@airdeelay.com
Website: AirDeelay.com