Privacy Policy
Your privacy matters to us. This policy explains how Flying Rate collects, uses, and protects your information.
Last Updated: June 7, 2026Introduction / Scope
Flying Rate takes your privacy very seriously. This Privacy Policy explains how we collect, store, use, share, and otherwise process your personal information in connection with your use of flyingrate.com and related services. Please read this carefully, as it contains important information about your rights and our obligations.
This Policy applies to all visitors and users of flyingrate.com, including users located in the European Economic Area (EEA), United Kingdom, Switzerland, the United States, and anywhere else in the world.
Key Definitions
| Term | Definition |
|---|---|
| “We / Us / Our” | Flying Rate, the operator of flyingrate.com |
| “You / Your” | The individual visiting or using flyingrate.com |
| “Personal Information” | Any information relating to an identified or identifiable natural person (GDPR Art. 4(1)) |
| “Services” | flyingrate.com and all associated sub-domains and services |
| “Processing” | Any operation performed on personal data (collection, storage, use, disclosure, erasure) |
| “CMP” | Consent Management Platform — the tool used to collect and manage your cookie consent preferences |
Information We Collect
3.1 Information You Provide Directly
- Name and email address (when you contact us)
- Any information voluntarily submitted via email or feedback forms
3.2 Information Collected Automatically
- IP address (used at country/region level — non-precise geolocation, not GPS)
- Browser type, version, and language settings
- Device type, operating system, and device identifiers
- Pages visited, time spent, referral URLs, and traffic data
- Interaction data (clicks, scrolls, engagement metrics)
- Search queries and content consumed (where applicable)
3.3 Tracking Technologies Used
- Cookies — small text files placed on your device hard drive
- Session cookies — expire when you close your browser
- Persistent cookies — remain until their expiry date or until deleted
- Flash cookies / Local Storage Objects (LSOs) — used for certain site features
- Web beacons / pixel tags / clear GIFs — used to count page visits and track activity
- Device fingerprinting — identifies your device via hardware and software characteristics
- Do Not Track (DNT) — we do not currently respond to DNT signals. Learn more at allaboutdnt.com
3.4 Sensitive Data NOT Collected
We do not collect payment card details, government-issued IDs, financial account numbers, health or medical records, or special category data as defined in GDPR Article 9.
How and Why We Use Your Information
- Provide, operate, and improve the website and its content
- Understand how visitors use the site (traffic analysis, performance)
- Serve relevant advertising (see ad-specific sections below)
- Respond to enquiries, feedback, and support requests
- Monitor site security and prevent fraudulent activity (IAB TCF Special Purpose 1)
- Deliver and present advertising and content (IAB TCF Special Purpose 2)
- Save and communicate your privacy choices (IAB TCF Special Purpose 3)
- Comply with legal obligations under GDPR, UK GDPR, and CCPA
- Enforce our Terms of Service and protect our legal rights
Cookies and Tracking Technologies
Cookie Opt-Out Options
Google AdSense and Display Advertising
This website uses Google AdSense to display advertisements. Google AdSense uses the DoubleClick DART cookie to serve ads based on your visit to this and other websites. You can opt out of the DoubleClick DART cookie by visiting adssettings.google.com.
For users in the EEA and UK, ads are served by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). For all other users, ads are served by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). For EEA/UK users, personalised advertising requires your consent. Non-personalised ads may still be shown without consent.
AFS / RSOC Search Advertising
This website may display Google AdSense for Search (AFS) or Related Search on Content (RSOC) ads — text-based search advertisements triggered by page content and related search terms.
- AFS/RSOC ads are served by Google LLC and its authorised RSOC feed providers including Sedo, Predicto, MidoWeb, and System1
- These ads are matched to page content and visitor interest signals
- Clicking an AFS/RSOC result takes you to a Google search results page or advertiser page
- This site operates in compliance with the Google RAF Policy (effective August 25, 2025)
Legal basis: EEA/UK/Switzerland — Consent (GDPR Art. 6(1)(a)). All other regions — Legitimate Interest (Art. 6(1)(f)).
Video Advertising
This website may display video advertisements including outstream, interstitial, and in-stream video ad formats served via the Google IMA SDK and other third-party video ad technology providers listed in the IAB Global Vendor List (GVL). For EEA/UK/Switzerland users, consent is required under IAB TCF v2.3 Purposes 2 and 7 and Special Purpose 2 before personalised video ads are served.
Native Advertising and Content Recommendations
This website may display native advertising units and content recommendation widgets labelled “Sponsored” or “Recommended” from providers such as Taboola, Outbrain, Revcontent, or similar networks. These providers may use cookies and tracking technologies to serve relevant content. EEA/UK/Switzerland users can manage consent for these vendors via the CMP.
Who We Share Your Information With
- Group companies — related entities within our operating group for internal administration
- Service providers — hosting, analytics, and technical support partners acting on our behalf
- Ad tech vendors — Google, IAB TCF-registered vendors for advertising purposes
- Legal authorities — when required by law, court order, or regulatory obligation
- Business transfers — in connection with a merger, acquisition, or sale of assets
- With your consent — for any other purpose you have explicitly agreed to
Third-Party Links and Content
Our website may contain links to third-party websites including tour operators, booking platforms, accommodation providers, and travel services. These sites have their own privacy policies and we accept no responsibility or liability for their content, privacy practices, or use of your data. We do not endorse any linked site. Your use of third-party sites is at your own risk.
Third-Party Services and Data Processors
| Service | Purpose | Operator | Privacy Policy |
|---|---|---|---|
| Google Analytics | Traffic analysis | Google Ireland Ltd (EU) / Google LLC (US) | policies.google.com/privacy |
| Google AdSense | Display advertising | Google Ireland Ltd (EU) / Google LLC (US) | policies.google.com/privacy |
| Google AFS / RSOC | Search advertising | Google LLC, US | policies.google.com/privacy |
| Google IMA SDK | Video advertising | Google LLC, US | policies.google.com/privacy |
| CDN / Hosting | Content delivery | Amazon Web Services EMEA SARL, Luxembourg | aws.amazon.com/privacy |
| WordPress / CMS | Site platform | Automattic Inc., US | automattic.com/privacy |
Where personal data is transferred to the United States, transfers are made pursuant to Standard Contractual Clauses (SCCs) under GDPR Article 46 and/or the EU–US Data Privacy Framework (DPF) where applicable.
Data Security
We implement reasonable technical and organisational measures to protect your personal information, including HTTPS/TLS encryption for data in transit and access controls for data at rest. However, no method of transmission over the internet or electronic storage is 100% secure. Transmission of data to our website is at your own risk.
EU / EEA / UK / Switzerland User Rights (GDPR)
If you are located in the EU, EEA, UK, or Switzerland, you have the following rights under the GDPR and equivalent national laws:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data in certain circumstances.
Right to Restriction
Request that we limit how we process your data.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interest or for direct marketing.
Right to Withdraw Consent
Withdraw consent at any time via “Privacy Settings” in the site footer.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
Legal Basis Table
| Processing Activity | Legal Basis | GDPR Article |
|---|---|---|
| Essential site operation | Legitimate Interest | Art. 6(1)(f) |
| Analytics / performance tracking | Consent | Art. 6(1)(a) |
| Display advertising (AdSense) | Consent | Art. 6(1)(a) |
| AFS / RSOC search ads | Consent (EEA/UK/CH) / Legitimate Interest (elsewhere) | Art. 6(1)(a) / (f) |
| Video advertising | Consent | Art. 6(1)(a) |
| Native advertising | Consent | Art. 6(1)(a) |
| Fraud prevention / security | Legitimate Interest | Art. 6(1)(f) |
| Legal compliance | Legal obligation | Art. 6(1)(c) |
| Responding to enquiries | Legitimate Interest / Consent | Art. 6(1)(f) / (a) |
Flying Rate participates in the IAB Europe Transparency and Consent Framework and complies with its Specifications and Policies (version 2025-01-16.5.0.a). Flying Rate uses a Consent Management Platform (CMP) with identification number [CMP ID] to manage and transmit consent signals in accordance with the Framework.
⚠️ Deployment Note: Replace [CMP ID] above with your real numeric IAB CMP ID before publishing this page. Default consent = OFF for all non-essential Purposes. The CMP can be resurfaced via the “Privacy Settings” link in the site footer (required per IAB TCF Appendix B(C)(f)).
US State Privacy Rights
California residents (CCPA/CPRA) have the right to: know what personal information we collect; delete personal information; opt out of the “sale” or “sharing” of personal information; correct inaccurate information; and non-discrimination for exercising privacy rights. We do not sell personal information.
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA) have similar rights under their respective state laws. Contact us at [email protected] to exercise any US state privacy right.
Children’s Privacy
This website is not directed to children under the age of 13 (US / COPPA) or under the age of 16 (EEA / GDPR Art. 8). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us at [email protected] and we will promptly delete it. Where applicable, the TFUA restricted data processing parameter may be applied to limit ad personalisation for younger users.
Data Retention
| Data Type | Retention Period |
|---|---|
| Server log files | 7 days |
| Google Analytics data | 14 months |
| Advertising / CMP cookies | Per vendor as declared in CMP |
| Email contact records | Up to 12 months from last contact |
International Data Transfers
This website is operated internationally and your data may be processed in the United States or other countries outside your jurisdiction. Transfers from the EEA, UK, or Switzerland to third countries are made pursuant to Standard Contractual Clauses (SCCs) under GDPR Article 46 and/or participation in the EU–US Data Privacy Framework (DPF) where applicable.
Keeping Your Information Secure
We maintain commercially reasonable safeguards including HTTPS encryption, restricted access controls, and secure hosting infrastructure. However, no system is completely secure and we cannot guarantee absolute security of data transmitted over the internet.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last Updated” date at the top of this page indicates when the policy was most recently revised. Continued use of flyingrate.com after any update constitutes your acceptance of the revised Policy.
How to Contact Us
For any privacy-related questions, data subject rights requests, or concerns about this Policy, please contact us: