This Privacy Policy explains how Shop Before You Fly and its affiliated partners ("we," "us," or "our") collect, use, and protect personal data when you use our reserve and collect duty-free shopping services, visit our websites, use our mobile applications, or interact with us at airport retail locations (collectively, our "Services").

1. Who Is Responsible for Your Data?

Shop Before You Fly is the data controller responsible for processing your personal data. This means we determine how and why your personal data is processed and are responsible for ensuring compliance with applicable data protection laws.

If you make a purchase at an airport retail location operated by one of our partner vendors, that vendor may also process your personal data as a separate data controller according to their own privacy practices.

2. What Personal Data We Collect

We collect different types of personal data depending on how you interact with our Services:

• Identity and Contact Information: Your name, email address, phone number, and customer account details.
• Travel Information: Flight number, departure date and time, destination, and airport collection point.
• Order and Transaction Data: Products you reserve, order history, and payment information (we do not store full payment card details).
• Account Information: Username, password, and preferences if you create an account.
• Communications: Records of your correspondence with our customer support team.
• Technical Data: IP address, browser type, device information, and browsing activity on our website.

We do not intentionally collect sensitive personal data such as health information, religious beliefs, or biometric data. Please refrain from sharing such information with us.

3. How We Use Your Personal Data

We process your personal data for the following purposes:

• Providing Our Services: To process your reservations, manage your orders, notify you of collection details, and facilitate pickup at the airport.
• Customer Support: To respond to your inquiries, handle complaints, and provide assistance with your orders.
• Account Management: To create and manage your account, including your order history and preferences.
• Legal Compliance: To meet our legal and regulatory obligations, including tax and record-keeping requirements.
• Security: To protect our Services, detect fraud, and ensure the safety of our systems and users.
• Marketing: With your consent, to send you promotional communications about our products and special offers. You can opt out at any time.
• Service Improvement: To analyze how our Services are used and make improvements to enhance your experience.

4. Who We Share Your Data With

We may share your personal data with:

• Airport Retail Partners: The duty-free shop or vendor where you collect your order, so they can prepare and process your reservation.
• Service Providers: Companies that help us operate our Services, including hosting, payment processing, email delivery, and customer support.
• Airport Authorities: Where required for security or operational purposes.
• Legal and Regulatory Bodies: Where required by law or to protect our legal rights.

We do not sell your personal data to third parties for their marketing purposes.

5. International Data Transfers

As we operate across multiple airports and jurisdictions, your personal data may be transferred to and processed in countries outside your country of residence. When we transfer your data internationally, we implement appropriate safeguards to protect your information, including standard contractual clauses approved by relevant authorities.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order and transaction data is retained for the period required by applicable tax and commercial laws.
• Account information is retained while your account remains active and for a reasonable period afterward.
• Marketing preferences are retained until you withdraw your consent.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data in certain circumstances.
• Restriction: Request that we limit how we use your data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain types of processing, including direct marketing.
• Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise these rights, please contact us using the details in Section 10 below.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content. You can manage your cookie preferences through your browser settings or our cookie consent tool. For more information, please see our Cookie Policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Email: privacy@shopbeforeyoufly.com
• General Inquiries: info@shopbeforeyoufly.com

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data in accordance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date above. We encourage you to review this policy periodically.