Privacy Policy

Last Updated: December 17, 2025
Effective Date: December 17, 2025
Version: 2.0


Quick Summary

Key points about your privacy:
🔒 We collect only information necessary to provide travel services
🔒 Your data is shared only with service providers (airlines, hotels, embassies)
🔒 We never sell your personal information to third parties
🔒 Your data is protected with industry-standard security
🔒 You have rights to access, correct, and delete your data
🔒 Questions? Contact us at support@goflybd.com


Introduction

At goFLY Limited, accessible from https://goflybd.com, protecting your privacy is one of our highest priorities. We are committed to being transparent about how we collect, use, store, and protect your personal information. This Privacy Policy explains:

  • What information we collect
  • How we use your information
  • Who we share your information with
  • How we protect your information
  • Your rights regarding your data

This Privacy Policy applies to:

  • ✅ Our website https://goflybd.com
  • ✅ All services provided by goFLY Limited
  • ✅ Communications with us (phone, email, WhatsApp, in-person)

This Privacy Policy does not apply to:

  • ❌ Third-party websites we link to
  • ❌ Services provided directly by our partners (airlines, hotels, embassies)

Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy should be read together with our:


Table of Contents

  1. Consent
  2. Information We Collect
  3. How We Collect Information
  4. How We Use Your Information
  5. Information Sharing and Disclosure
  6. Data Storage and Security
  7. Data Retention
  8. Cookies and Tracking Technologies
  9. Third-Party Services
  10. Your Privacy Rights
  11. GDPR Rights (European Users)
  12. CCPA Rights (California Users)
  13. Children’s Privacy
  14. International Data Transfers
  15. Changes to This Policy
  16. Contact Information

1.1 Your Consent

By using our website or services, you hereby consent to this Privacy Policy and agree to its terms.

1.2 Withdrawing Consent

You may withdraw your consent at any time by:

  • Contacting us at support@goflybd.com
  • Unsubscribing from marketing emails
  • Adjusting cookie preferences in your browser

Note: Withdrawing consent may affect our ability to provide certain services to you.

1.3 Consent for Minors

If you are under 18 years of age, you must have consent from a parent or guardian to use our services and share personal information with us.


2. Information We Collect

We collect different types of information depending on how you interact with us:

2.1 Personal Information

CategoryData TypesPurpose
Identity DataFull name, date of birth, gender, nationality, passport details, national IDBooking flights, visa applications, tour packages
Contact DataEmail address, phone number, postal address, WhatsApp numberCommunication, booking confirmations, updates
Financial DataPayment card details, bank account information, billing addressProcessing payments
Travel DataTravel history, passport copies, visa copies, frequent flyer numbers, travel preferencesProviding travel services, visa applications
Booking DataBooking references, itineraries, service preferences, special requestsManaging your bookings

2.2 Technical Information

CategoryData TypesPurpose
Device DataIP address, browser type and version, operating system, device typeWebsite functionality, security
Usage DataPages visited, time spent, click patterns, referring websiteWebsite improvement, analytics
Location DataGeneral geographic location (from IP address)Content localization, fraud prevention

2.3 Communication Data

CategoryData TypesPurpose
CorrespondenceEmails, chat logs, phone call notes, WhatsApp messagesCustomer support, record keeping
FeedbackReviews, survey responses, complaintsService improvement

2.4 Sensitive Information

For visa applications and certain travel services, we may collect sensitive information such as:

  • Passport biodata pages
  • Photographs
  • Employment information
  • Financial statements
  • Medical information (if relevant to travel)
  • Criminal record declarations (if required by embassies)

⚠️ Important: We collect sensitive information only when necessary for the specific service requested, and with your explicit consent.


3. How We Collect Information

We collect information through the following methods:

3.1 Information You Provide Directly

SourceExamples
Website formsBooking forms, contact forms, inquiry forms
Account registrationWhen you create an account on our website
Direct communicationPhone calls, emails, WhatsApp messages, office visits
Document submissionPassport copies, bank statements, photos for visa applications
Surveys and feedbackVoluntary responses to our surveys

3.2 Information Collected Automatically

SourceExamples
Website usagePages visited, links clicked, time spent
CookiesPreferences, session information
Log filesIP address, browser type, access times
Analytics toolsAggregated usage statistics

3.3 Information from Third Parties

SourceExamples
Partner airlinesBooking confirmations, schedule changes
Payment processorsTransaction confirmations
Embassies/visa centersVisa status updates
Social mediaIf you connect via social login

4. How We Use Your Information

We use your information for the following purposes:

4.1 Service Delivery

PurposeDescription
Booking processingTo complete flight, hotel, tour, and visa bookings
Visa applicationsTo submit and manage visa applications on your behalf
Travel documentationTo issue tickets, vouchers, and confirmations
Customer supportTo respond to inquiries and resolve issues
Special requestsTo accommodate dietary, mobility, or other needs

4.2 Communication

PurposeDescription
Transactional messagesBooking confirmations, payment receipts, itineraries
Service updatesSchedule changes, visa status, important notices
Customer supportResponses to your questions and requests
MarketingPromotional offers, newsletters (with your consent)

4.3 Business Operations

PurposeDescription
Website maintenanceTo operate, maintain, and improve our website
AnalyticsTo understand how users interact with our services
Product developmentTo develop new features and services
Quality assuranceTo monitor and improve service quality

4.4 Legal and Security

PurposeDescription
Fraud preventionTo detect and prevent fraudulent activities
Legal complianceTo comply with laws and regulations
Dispute resolutionTo resolve complaints and disputes
Record keepingTo maintain records for legal and tax purposes

5. Information Sharing and Disclosure

5.1 Service Providers (Necessary Sharing)

To provide our services, we must share your information with:

Partner TypeInformation SharedPurpose
AirlinesName, passport details, contact info, frequent flyer numbersFlight bookings, ticketing
HotelsName, contact info, arrival/departure dates, special requestsReservations
Embassies/Visa CentersFull visa application data including passport, photos, financialsVisa processing
Tour operatorsName, contact info, dietary/mobility requirementsTour arrangements
Insurance providersName, DOB, passport details, travel datesTravel insurance
Ground transportName, contact info, flight detailsAirport transfers
Payment processorsPayment details, billing addressTransaction processing

5.2 We Do NOT Sell Your Data

⚠️ goFLY Limited does NOT sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

5.3 Other Disclosures

We may disclose your information in the following circumstances:

CircumstanceDetails
Legal requirementsWhen required by law, court order, or government request
Safety concernsTo protect life, safety, or security of individuals
Fraud preventionTo investigate or prevent illegal activities
Business transfersIn case of merger, acquisition, or asset sale (with notice)
With your consentWhen you explicitly authorize sharing

6. Data Storage and Security

6.1 Where We Store Your Data

Your personal information is stored:

  • On secure servers in Bangladesh
  • With cloud service providers who maintain data centers globally
  • In encrypted formats where applicable

6.2 Security Measures

We implement industry-standard security measures to protect your data:

Security LayerMeasures
TechnicalSSL/TLS encryption, firewalls, intrusion detection, secure payment processing (PCI-DSS compliant)
AdministrativeAccess controls, employee training, confidentiality agreements, regular security audits
PhysicalSecure office premises, locked storage for physical documents

6.3 Payment Security

  • All online payments processed through SSLCOMMERZ (PCI-DSS compliant)
  • We do NOT store full credit card numbers on our servers
  • Payment pages are encrypted with SSL technology

6.4 Security Limitations

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

6.5 Data Breach Response

In the event of a data breach that may affect your personal information:

  • We will investigate and contain the breach promptly
  • We will notify affected users within 72 hours when required by law
  • We will cooperate with relevant authorities
  • We will take steps to prevent future incidents

7. Data Retention

7.1 Retention Periods

Data TypeRetention PeriodReason
Booking records7 yearsLegal, tax, and audit requirements
Visa application documents3 years after applicationReference for future applications, disputes
Payment records7 yearsFinancial regulations
Communication records3 yearsCustomer service, dispute resolution
Marketing preferencesUntil you opt outTo respect your preferences
Website analytics26 monthsStandard analytics retention
Account dataUntil account deletion requestedAccount management

7.2 Data Deletion

After the retention period expires, we will:

  • Securely delete or anonymize your personal data
  • Remove identifying information from records
  • Destroy physical documents securely

7.3 Requesting Early Deletion

You may request deletion of your data before the retention period ends. However, we may retain certain data if:

  • Required by law
  • Needed for ongoing legal matters
  • Necessary for legitimate business purposes

See Your Privacy Rights for how to request deletion.


8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience.

8.2 Types of Cookies We Use

Cookie TypePurposeDuration
Essential CookiesWebsite functionality, security, login sessionsSession / Short-term
Preference CookiesRemember your settings (language, currency)1 year
Analytics CookiesUnderstand how visitors use our website26 months
Marketing CookiesDeliver relevant content (if enabled in future)Variable

8.3 Specific Cookies

Cookie NameProviderPurpose
Session IDgoFLYMaintain your session while browsing
Language preferencegoFLYRemember your language choice
Currency preferencegoFLYRemember your currency selection
Google Analytics (_ga, _gid)GoogleWebsite analytics

8.4 Third-Party Cookies

Currently, goFLY Limited does NOT use:

  • ❌ Google Ads cookies
  • ❌ Facebook Pixel
  • ❌ Other advertising tracking cookies

If we introduce third-party advertising in the future, we will update this policy and seek your consent.

8.5 Managing Cookies

You can control cookies through your browser settings:

BrowserInstructions Link
ChromeChrome Cookie Settings
FirefoxFirefox Cookie Settings
SafariSafari Cookie Settings
EdgeEdge Cookie Settings

⚠️ Note: Disabling cookies may affect website functionality.

8.6 Do Not Track

Our website currently does not respond to “Do Not Track” browser signals. However, you can use browser settings to limit tracking.


9. Third-Party Services

9.1 Services We Use

ServiceProviderPurposePrivacy Policy
Payment ProcessingSSLCOMMERZSecure paymentsSSLCOMMERZ Privacy
AnalyticsGoogle AnalyticsWebsite statisticsGoogle Privacy
Email Service(Provider name)Email communicationsN/A
Hosting(Provider name)Website hostingN/A

9.2 Third-Party Links

Our website may contain links to third-party websites, including:

⚠️ Important: We are not responsible for the privacy practices of third-party websites. We encourage you to read their privacy policies before providing any personal information.

9.3 Social Media

If you interact with us through social media platforms:

Your interactions are also subject to those platforms’ privacy policies.


10. Your Privacy Rights

Regardless of your location, you have the following rights regarding your personal data:

10.1 Rights Summary

RightDescription
Right to AccessRequest a copy of your personal data we hold
Right to RectificationRequest correction of inaccurate or incomplete data
Right to ErasureRequest deletion of your data (subject to legal requirements)
Right to Restrict ProcessingRequest limitation of how we use your data
Right to ObjectObject to certain types of processing (e.g., marketing)
Right to Data PortabilityRequest transfer of your data in a machine-readable format
Right to Withdraw ConsentWithdraw consent for processing based on consent
Right to ComplainLodge a complaint with a supervisory authority

10.2 How to Exercise Your Rights

To exercise any of these rights:

  1. Email us: support@goflybd.com
    • Subject: “Privacy Rights Request – [Your Name]”
  2. Call us: +880 9639-203090
  3. WhatsApp: +880 1713-289178
  4. Write to us: goFLY Limited 1 Shukrabad Road Motiur Nibash Beside New Model Degree College Opposite of Metro Shopping Mall Dhaka – 1207, Bangladesh

10.3 Verification

To protect your privacy, we may ask you to verify your identity before processing requests. This may include:

  • Providing booking reference numbers
  • Confirming personal details
  • Providing a copy of ID (for sensitive requests)

10.4 Response Time

We will respond to your request within 30 days. If we need more time, we will inform you of the reason and extension period.

10.5 Fees

Most requests are processed free of charge. However, we may charge a reasonable fee for:

  • Manifestly unfounded or excessive requests
  • Repetitive requests for the same information

11. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR).

11.1 Legal Basis for Processing

Processing ActivityLegal Basis
Service deliveryContract performance
Visa applicationsContract performance, legal obligation
Marketing communicationsConsent
Website analyticsLegitimate interest
Fraud preventionLegitimate interest, legal obligation
Legal complianceLegal obligation

11.2 Your GDPR Rights

In addition to the general rights above, GDPR provides:

RightDescription
Right to AccessRequest copies of your personal data. A small fee may apply.
Right to RectificationRequest correction of inaccurate information.
Right to Erasure (“Right to be Forgotten”)Request deletion under certain conditions.
Right to Restrict ProcessingRequest limitation of processing under certain conditions.
Right to ObjectObject to processing based on legitimate interests.
Right to Data PortabilityRequest transfer of data to another controller.
Rights Related to Automated Decision-MakingNot to be subject to purely automated decisions with legal effects.

11.3 Data Protection Authority

If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

11.4 International Transfers

When we transfer your data outside the EEA, we ensure appropriate safeguards are in place (see Section 14).


12. CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA).

12.1 Your CCPA Rights

RightDescription
Right to KnowRequest disclosure of categories and specific pieces of personal data collected about you
Right to DeleteRequest deletion of personal data collected from you
Right to Opt-OutOpt out of the sale of personal data
Right to Non-DiscriminationNot be discriminated against for exercising your rights

12.2 Do Not Sell My Personal Information

goFLY Limited does NOT sell personal information. We do not sell, rent, or trade your personal data to third parties for monetary or other valuable consideration.

12.3 Categories of Information Collected

In the past 12 months, we have collected the following categories:

CategoryExamplesCollected?
IdentifiersName, email, phone, passport✅ Yes
Personal Information (CA Civil Code)Name, address, payment info✅ Yes
Commercial InformationBooking history, transaction records✅ Yes
Internet/Network ActivityBrowsing history, search history on our site✅ Yes
Geolocation DataGeneral location from IP✅ Yes
Professional/Employment InfoEmployment details for visa applications✅ Yes (when provided)
Sensitive Personal InformationPassport, financial data✅ Yes (for services)

12.4 Exercising CCPA Rights

To exercise your CCPA rights:

We will respond within 45 days (extendable to 90 days if needed).

12.5 Authorized Agent

You may designate an authorized agent to make requests on your behalf. The agent must provide written authorization from you.


13. Children’s Privacy

13.1 Age Restrictions

goFLY Limited services are intended for users 18 years of age and older. We do not knowingly collect personal information from children under:

  • 13 years of age (general policy)
  • 16 years of age (for GDPR-covered regions)

13.2 Minor Travelers

When booking travel for minors (under 18), the parent or legal guardian is responsible for:

  • Providing the minor’s information
  • Consenting to data processing on behalf of the minor
  • Ensuring accuracy of information provided

13.3 Parental Rights

Parents or guardians may:

  • Request access to data collected about their child
  • Request deletion of their child’s data
  • Withdraw consent for data collection

13.4 Unintentional Collection

If you believe we have inadvertently collected information from a child under 13, please contact us immediately at support@goflybd.com. We will take prompt action to delete such information.


14. International Data Transfers

14.1 Where Your Data May Be Transferred

To provide our services, your data may be transferred to:

DestinationPurpose
AirlinesFlight bookings (data centers globally)
HotelsReservations (destination countries)
EmbassiesVisa applications (destination countries)
Payment processorsTransaction processing
Cloud providersData storage and processing

14.2 Safeguards for International Transfers

When transferring data internationally, we ensure protection through:

  • Standard contractual clauses
  • Data processing agreements with recipients
  • Encryption during transfer
  • Limiting data shared to what’s necessary

14.3 EEA Transfers

For transfers from the EEA to countries without adequate data protection laws, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Binding Corporate Rules (where applicable)
  • Your explicit consent (for specific transfers)

15. Changes to This Policy

15.1 Updates

We may update this Privacy Policy from time to time to reflect:

  • Changes in our practices
  • New services or features
  • Legal or regulatory requirements
  • Industry best practices

15.2 Notification

When we make changes:

  • We will update the “Last Updated” date at the top
  • For material changes, we may notify you via email or website notice
  • Continued use after changes constitutes acceptance

15.3 Version History

VersionDateSummary
1.0January 2017Initial release
2.0December 17, 2025Comprehensive update: GDPR, CCPA, expanded rights

15.4 Previous Versions

You may request previous versions of this policy by contacting us.


16. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

goFLY Limited

Data Protection Contact:

goFLY Limited
1 Shukrabad Road Motiur Nibash
Beside New Model Degree College
Opposite of Metro Shopping Mall
Dhaka – 1207, Bangladesh

Contact Channels

ChannelDetailsBest For
Emailsupport@goflybd.comPrivacy requests, formal inquiries
Hotline+880 9639-203090General inquiries
WhatsApp+880 1713-289178Quick questions
Websitegoflybd.com/contact-usContact form

Business Hours

DayHours
Sunday – Thursday10:00 AM – 6:00 PM (BST)
Saturday10:00 AM – 6:00 PM (BST)
FridayClosed

For Privacy-Specific Requests

Email Subject Format: “Privacy Request – [Type] – [Your Name]” Types:

  • Access Request
  • Deletion Request
  • Correction Request
  • Opt-Out Request
  • General Inquiry

Related Pages


Your privacy matters to us. At goFLY Limited, we are committed to protecting your personal information and being transparent about our data practices. If you have any questions or concerns, please don’t hesitate to contact us.


goFLY Limited
IATA Certified • ATAB Member • Civil Aviation Licensed
Serving 10,000+ Happy Travelers Since 2017

🌐 www.goflybd.com
📞 +880 9639-203090
📧 support@goflybd.com


© 2017-2025 goFLY Limited. All Rights Reserved.