Deals Login Sign Up

Privacy Policy

Last updated: January 2025. This policy explains what data Elarion Airline collects, why, and the rights you have over it.

1. Data we collect

  • Account data: name, email address, phone number, country and password hash.
  • Booking data: traveler names, dates of birth, passport numbers where required by operators, and order history.
  • Payment data: transaction hashes you submit, wallet receipts you upload, and refund addresses you save. We never ask for private keys or seed phrases — anyone who does is not us.
  • Technical data: IP address, device and browser information, and pages visited, used for security and fraud prevention.

2. A note on blockchains

Cryptocurrency transactions are recorded on public blockchains. Transaction hashes, amounts, addresses and timestamps you submit or that confirm your payment are inherently public and cannot be deleted by us. Please consider this before paying.

3. How we use data

We use your data to create and fulfil bookings, verify payments, send transactional emails (confirmations, payment updates, reminders), provide support, comply with legal obligations, and improve the platform. We do not sell personal data.

4. Sharing

Booking details are shared with the relevant operators (airlines, tour operators, properties) as required to fulfil your travel. Payment evidence may be reviewed by our finance team. We disclose data to authorities only where legally required.

5. Retention

Booking and financial records are retained for seven years for accounting and dispute resolution. Support correspondence is retained for three years. You may request deletion of marketing data at any time.

6. Your rights

You may request access, correction, export or deletion of your personal data, subject to our legal retention duties. Contact privacy@elarionairline.com and we will respond within 30 days.

7. Security

Passwords are stored as salted Argon2id hashes, sessions regenerate on privilege change, uploads are stored outside the web root with randomized names, and admin actions are audit-logged. No system is perfectly secure; please use a strong unique password and enable two-factor authentication.

8. Cookies

We use strictly necessary cookies for login sessions, CSRF protection and checkout state. We do not use advertising trackers.