Privacy policy
Last updated: 29 October 2026
This policy explains what personal information we collect when you visit flightspro.online, call us or book a flight with us, why we collect it, who we share it with and what rights you have. We share booking details with airlines and other parties only as needed to issue your tickets. We do not sell your personal information for money, and calling us does not sign you up for marketing calls or text messages.
1. Who we are
The FlightsPro website and booking service are operated by PurpleSky OÜ, which is the controller of your personal information under this policy.
PurpleSky OÜFaehlmanni 2-7, 10125 Tallinn, Estonia
Registry code: 14556675
VAT number: EE102097513
Phone: +1 (888) 217-5091
Email: [email protected]
In this policy, "FlightsPro", "we", "us" and "our" mean PurpleSky OÜ. "You" means anyone who visits the website, calls us or travels on a booking made through us.
2. What this policy covers
This policy applies to the website flightspro.online, to phone calls with us and to bookings made through us. Airlines and other companies that receive your booking details use them under their own privacy policies, which we encourage you to read.
3. Information we collect
When you visit the website
- Technical information: your IP address, browser type, device type, operating system, language settings, the pages you visit, the page that referred you, and the date and time of your visit. Our hosting provider records this in server logs.
- Information from cookies and similar technologies: see section 6.
The website does not ask you to create an account and does not collect payment details.
When you call us
- Call information: your phone number, the date, time and length of the call, and how you found our number (for example, which advertisement or page you came from).
- Your travel request: for example travel dates, departure and destination airports, number of travelers and preferences.
- Call recordings: some calls may be recorded for quality, training, booking-verification and dispute-resolution purposes. If a call is recorded, you will be told at the start of the call. If you do not want the call recorded, you can say so.
When you make a booking
- Passenger details: full names as shown on travel documents, date of birth, gender, and for some trips passport or ID details, nationality and redress or Known Traveler numbers. Airlines and governments require this information to issue tickets and let you travel.
- Contact details: phone number and email address, so we can send your confirmation and tell you about changes to your flights.
- Payment details: card number, expiry date, security code, cardholder name and billing address. We use these only to take payment for your booking and to prevent fraud, and we do not keep your card security code after the payment is processed.
- Optional details: frequent flyer numbers, seat or meal preferences and special assistance requests. A request for assistance may reveal health information; we use it only to pass the request to the airline, with your consent.
- Booking records: your itinerary, booking reference, ticket numbers, the amounts paid and our communications with you.
4. How and why we use your information
If you are in the European Economic Area or the United Kingdom, we must have a legal basis for using your personal information. The table below shows what we use it for and the legal basis we rely on.
| Purpose | Legal basis |
|---|---|
| Answering your questions, searching fares and preparing a booking for you | Steps taken at your request before entering into a contract |
| Making and managing your booking, taking payment, issuing tickets, sending confirmations and handling changes, cancellations and refunds | Performance of our contract with you |
| Passing special assistance requests to the airline | Your explicit consent |
| Providing passenger information that airlines and governments require for travel and security screening | Performance of the contract; compliance with legal obligations |
| Preventing and detecting payment fraud and misuse of our services | Our legitimate interests; compliance with legal obligations |
| Running, securing and improving the website | Our legitimate interests |
| Measuring which advertisements bring visitors and calls, and showing relevant advertisements | Your consent where the law requires it; otherwise our legitimate interests |
| Keeping accounting and tax records and handling complaints or legal claims | Compliance with legal obligations; our legitimate interests |
We do not use your information for automated decision-making that has legal or similarly significant effects on you, except for automated fraud checks on card payments. If a payment is declined for this reason, you can ask us to review the decision.
5. Who we share your information with
- Airlines that will operate your flights, so they can issue your ticket and carry you.
- Booking and ticketing providers, such as global distribution systems and ticket consolidators, that we use to reserve and issue tickets.
- Payment processors and banks, to process payments and refunds and to prevent fraud.
- Government authorities where the law requires it for travel and security, for example the US Transportation Security Administration (Secure Flight) and border authorities of the countries you travel to. Airlines usually pass this information on directly.
- Service providers who work for us under contract, such as website hosting, telephony and call recording, email and customer support tools, and analytics or advertising platforms. They may use your information only to provide their services to us.
- Professional advisers such as lawyers, accountants and auditors, where needed.
- Law enforcement and courts when the law requires it, or to protect our rights, our customers or the public.
- A buyer or successor if our business is sold, merged or reorganized, in which case this policy will continue to apply to your information.
We do not sell your personal information for money. Some US state laws treat the use of advertising cookies for targeted advertising as "sharing" or "selling". See section 10 for how to opt out.
6. Cookies and similar technologies
Cookies are small files stored on your device. Similar technologies include local storage, pixels and tags placed by advertising platforms. Our Cookie Policy lists the cookies and similar technologies we use and how long they last.
- Strictly necessary: we store your cookie choice so we don't ask again on every page. It doesn't identify you and is always on.
- Fonts: the website loads its typeface from Google Fonts, which means your browser sends your IP address to Google when a page loads. Google Fonts does not set cookies.
- Analytics and advertising: we use tools such as Google Ads, Microsoft Advertising and Microsoft Clarity, and may use Google Analytics or Meta, to measure how our website and advertisements perform and to show relevant advertisements. You can opt out of them at any time, as described below.
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps and session replay, to improve and market our services. Website usage data is captured using first- and third-party cookies and other tracking technologies to determine the popularity of pages and online activity. This information is also used for site optimization, fraud and security purposes, and advertising. For more information about how Microsoft collects and uses your data, see the Microsoft Privacy Statement.
Analytics and advertising cookies are on when you arrive, and you can opt out at any time with the "Your privacy choices" link at the bottom of every page. If your browser sends a Global Privacy Control signal, we opt you out of advertising cookies automatically.
You can also block or delete cookies in your browser settings, and you can manage personalized advertising through Google Ad Settings and the settings of other advertising platforms.
7. Calls, texts and emails
We contact you about bookings you have made with us, for example to send your confirmation or tell you about a schedule change. These service messages are part of our service and are not marketing.
We do not make marketing calls or send marketing text messages to you unless you have given separate, express consent for that purpose. Calling our number is not consent to receive automated or pre-recorded marketing calls or texts. If you ever receive a marketing message that refers to FlightsPro, you can reply STOP to text messages or ask the caller to stop, and you can contact us at [email protected].
8. International transfers
We are based in Estonia. To book your travel, we must send your information to airlines, booking systems and authorities in the countries involved in your trip, including the United States, which may be outside the European Economic Area. Where those transfers are necessary to perform your booking, we rely on that necessity. For our service providers outside the European Economic Area, we use safeguards permitted by law, such as the European Commission's Standard Contractual Clauses or transfers to companies certified under the EU-US Data Privacy Framework.
9. How long we keep your information
We keep personal information only as long as we need it for the purposes described in this policy:
- server logs: for a short period needed to keep the website secure;
- call information and recordings of calls that did not lead to a booking: for as long as needed to answer your request and deal with any questions or complaints;
- booking records and related payment records: for as long as required by Estonian accounting and tax law (currently seven years from the end of the financial year), and for the period in which legal claims about the booking can be made;
- card details: only as long as needed to process the payment, any refund and any related dispute.
After that, we delete or anonymize the information.
10. Your rights
If you are in the European Economic Area or the United Kingdom
You have the right to:
- access the personal information we hold about you;
- have inaccurate information corrected;
- have your information deleted, unless we must keep it, for example for accounting purposes;
- restrict how we use your information;
- receive your information in a portable format;
- object to our use of your information based on legitimate interests, including for direct marketing;
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
You also have the right to complain to a data protection authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee. You can also complain to the authority in the country where you live or work.
If you are in the United States
Depending on the state where you live, you may have the right to:
- know what personal information we collect, use and disclose;
- access and receive a copy of your personal information;
- correct inaccurate personal information;
- delete your personal information, subject to legal exceptions;
- opt out of the "sale" or "sharing" of your personal information and of targeted advertising;
- limit the use of sensitive personal information, such as passport details, to what is needed to provide our service. We already use it only for that purpose.
To opt out of the sale or sharing of your personal information and of targeted advertising, use the "Your privacy choices" link at the bottom of every page and switch off advertising cookies. We also honor Global Privacy Control (GPC) browser signals as a request to opt out of sale, sharing and targeted advertising. You may use an authorized agent to make a request on your behalf. We will not discriminate against you for exercising your rights. If we decline your request, you may appeal by contacting us, and if you disagree with our decision on appeal you can contact your state attorney general.
How to make a request
Email us at [email protected], call us or write to us at the address in section 1. We may need to verify your identity before we act on your request. We respond within one month (EEA and UK) or within 45 days (US), and will tell you if we need more time as the law allows.
11. Children
Our website and services are not directed to children under 16, and we do not knowingly collect their personal information except as passenger details provided by a parent or guardian who books travel for them. If you believe a child has given us personal information directly, please contact us and we will delete it.
12. Security
We use reasonable technical and organizational measures to protect personal information, including encrypted connections (HTTPS) to the website, restricted access for staff who handle bookings, and payment processing through providers that follow payment card industry security standards. No method of transmission or storage is completely secure, but we work to protect your information and to act quickly if a problem occurs.
13. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes, we will make them clear on the website.
14. Contact us
If you have questions about this policy or how we handle your information, contact PurpleSky OÜ by email at [email protected], by phone at +1 (888) 217-5091 or by post at Faehlmanni 2-7, 10125 Tallinn, Estonia.