FLY INTIRA PRIVACY POLICY WEBSITE STATEMENT

​

FLY INTIRA (“we”, “us”, or “our”) is committed to protecting personal data and ensuring privacy rights of all users who interact with our digital platforms. This Privacy Policy incorporates recommendations from our legal team and aligns with applicable privacy regulations including the PDPA, GDPR, Indonesia PDP Law, UAE and Saudi PDPLs, and international standards such as ICAO Annex 9.

 

Key Legal References

- Thailand: Personal Data Protection Act B.E. 2562 (PDPA)

- European Union: General Data Protection Regulation (GDPR)

- Indonesia: Personal Data Protection Law No. 27/2022

- UAE: Federal Decree-Law No. 45 of 2021

- Saudi Arabia: Personal Data Protection Law (Saudi PDPL)

- ICAO Annex 9 (Facilitation)

- Other relevant directives such as ePrivacy, labor and consumer laws

​

Types of Data Collected

- Identity Data: name, surname, date of birth, gender, nationality, ID/passport numbers.

- Contact Data: phone number, email, address.

- Travel Data: flight booking reference, seat preference, special assistance needs.

- Technical Data: IP address, browser type, system info.

- Cookies & Behavioral Data: website usage, visit times, search terms.

- Marketing Preferences: communication choices.

- Payment Data: billing information.

- Recruitment Data (if applicable): resume, interview data.

 

Data Collection Methods

- Direct interactions: bookings, registration, support requests.

- Automated technologies: cookies, scripts, web analytics.

- Third parties: travel agents, GDS systems, affiliates.

 

Purposes and Legal Bases​

- Booking & flight operations

- Customer support & communication

- Experience personalization

- Marketing (with consent)

- Legal compliance (aviation, immigration)

- Service improvement and fraud prevention

 

Legal Bases:

- Consent

- Contract necessity

- Legal obligation

- Legitimate interests

 

International Data Transfers

Transfers may occur to jurisdictions where FLY INTIRA or partners operate. Protections include:

- Standard Contractual Clauses (SCCs)

- Encryption and access controls

- Routine cybersecurity assessments

 

Data Subject Rights

Under PDPA and GDPR:

- Right to access, rectify, erase, and port data

- Right to restrict or object to processing

- Right to withdraw consent

- Right to lodge complaints with authorities

 

Children's Data

We do not knowingly collect data from individuals under 16 without verified parental/legal guardian consent.

 

Automated Decision-Making

FLY INTIRA does not engage in automated decisions with legal or significant effects based solely on automated processing.

 

Data Security & Retention

We implement encryption, access control, training, and audits to safeguard data.

Data is retained only as long as necessary. It is deleted/anonymized securely thereafter.

 

Breach Notification

- Notify authorities within 72 hours (as required)

- Inform affected users without undue delay

 

Policy Updates

This policy is reviewed regularly. The latest version is published on our website. Continued use indicates acceptance.

 

Contact Us

FLY INTIRA

Contact Address: 2/10 Sukhumvit Road, Soi Sukhumvit 11, Khlong Toei Nuea, Wattana District, Bangkok 10110

Telephone: +662 2524289 Email: DPO@flyintira.com

​

​