PRIVACY
POLICY

Oravyo is the data controller for personal data processed through our website and flight comparison services. Contact: support-oravyo@gmail.com We do not operate brick-and-mortar retail locations for walk-in support. For privacy requests, data subject access requests, or complaints, email us at support-oravyo@gmail.com with the subject line "Privacy Request". We aim to respond within 30 days (or sooner where required by law).

We collect information in the following categories: A) Information you provide voluntarily • Contact details when you email us (name, email address, message content). • Newsletter sign-up information if you subscribe (email address). • Any information you include in support or partnership inquiries. B) Information collected automatically when you use the site • Device and browser data (IP address, browser type, operating system, device identifiers where available). • Usage data (pages viewed, referral URL, approximate location derived from IP, timestamps, click paths). • Search parameters you enter (origin, destination, dates, passenger count, cabin class) to generate comparison results and affiliate deep links. • Technical logs required for security, fraud prevention, and debugging. C) Information from third parties • Our travel and affiliate partners may provide aggregated or technical attribution data when you click through to book (e.g., that a referral originated from Oravyo). • Analytics providers (such as Google Tag Manager / Google Analytics if enabled) may process pseudonymous usage statistics. We do not intentionally collect sensitive categories of data (such as health, biometric, or government ID numbers) through the comparison widget. Do not send such data in free-text support emails unless strictly necessary.

We use personal data to: • Provide flight search, comparison, and clickout referral to booking partners. • Maintain, secure, and improve website performance and user experience. • Remember preferences (e.g., locale, trip type) where cookies or local storage are used. • Measure traffic, conversion, and product analytics in aggregate or pseudonymous form. • Attribute affiliate referrals fairly when you complete actions on partner sites. • Respond to support, legal, and compliance requests. • Enforce our Terms of Service and protect against abuse, bots, and fraud. • Comply with applicable laws, regulations, and lawful requests from authorities. We do not sell your personal information to data brokers for their independent marketing purposes.

Where the GDPR or UK GDPR applies, we rely on: • Contract / pre-contractual steps: processing search inputs to show results you request. • Legitimate interests: analytics, security, fraud prevention, affiliate attribution, and service improvement — balanced against your rights. • Consent: non-essential cookies, certain marketing communications, and optional features where consent is requested. • Legal obligation: retaining records where required by tax, accounting, or regulatory rules. You may object to processing based on legitimate interests where applicable. We will assess your request in line with applicable law.

We may share data with: • Travel meta-search and booking partners (e.g., Kayak and other affiliate networks) when you click an offer — limited to what is needed for referral, attribution, and service delivery. • Infrastructure providers (hosting, CDN, email delivery) under contractual confidentiality and security obligations. • Analytics and tag management providers if configured on our site. • Professional advisers (lawyers, accountants) under confidentiality. • Authorities when required by law or to protect rights, safety, and security. Partners you visit after clickout have their own privacy policies. We are not responsible for their independent processing once you leave Oravyo.

We use cookies, local storage, and similar technologies as described in our Cookie Policy. These may include strictly necessary cookies, preference cookies, analytics cookies, and affiliate attribution cookies. You can manage preferences via your browser settings and, where offered, our cookie notice. See /cookies for full details.

We retain personal data only as long as necessary for the purposes described in this policy, unless a longer period is required by law. • Support emails: typically up to 24 months unless needed for ongoing disputes or legal holds. • Server logs: typically 30–90 days unless required for security investigations. • Analytics: per provider settings, often 14–26 months in pseudonymous form. • Affiliate attribution cookies: per partner policies, often 30 days to 12 months. When data is no longer needed, we delete or anonymize it using commercially reasonable methods.

We implement administrative, technical, and organizational measures designed to protect personal data, including HTTPS encryption in transit, access controls, and vendor due diligence. No method of transmission or storage is 100% secure. If you believe your interaction with us has been compromised, contact support-oravyo@gmail.com promptly.

Oravyo may process data in the United States and other countries where our service providers operate. When transferring personal data from the EEA, UK, or other regions with transfer restrictions, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms where required.

Depending on your location, you may have the right to: • Access a copy of personal data we hold about you. • Correct inaccurate data. • Delete data (subject to exceptions). • Restrict or object to certain processing. • Data portability where applicable. • Withdraw consent where processing is consent-based. • Lodge a complaint with your local supervisory authority. California residents may have additional rights under the CCPA/CPRA, including knowing, deleting, and opting out of certain sharing — contact support-oravyo@gmail.com. We do not sell personal information as defined under CPRA for cross-context behavioral advertising payment. To exercise rights, email support-oravyo@gmail.com with sufficient detail to verify your request.

Oravyo is not directed to children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact support-oravyo@gmail.com and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change. Material changes may be highlighted on the site. Continued use after changes constitutes acceptance where permitted by law.

Privacy questions and requests: support-oravyo@gmail.com Related documents: Cookie Policy (/cookies), Terms of Service (/terms).