Privacy Policy

To provide our travel booking services, we may collect the following information:

• Full name

• Email address

• Mobile phone number

• Date of birth (where required)

• Passport information (where required for travel bookings)

• National Identity Card (NIC) details (where required)

• Billing address

• Payment information

• Emergency contact details (where applicable)

When you make a booking, we may collect:

• Flight details

• Hotel reservations

• Travel insurance selections

• Passenger information

• Booking references

• Special service requests

• Travel preferences

When you use our website or mobile application, we may automatically collect:

• IP address

• Browser type

• Device information

• Operating system

• Mobile device identifiers

• Pages visited

• Date and time of access

• Cookies and similar technologies

We use your information to:

• Process flight, hotel, and travel insurance bookings

• Confirm and manage reservations

• Process payments

• Provide customer support

• Send booking confirmations and travel updates

• Respond to enquiries and refund requests

• Improve our website and mobile application

• Prevent fraud and enhance security

• Comply with legal and regulatory obligations

We may also use your information to send promotional offers and travel updates where you have chosen to receive such communications. You may unsubscribe from marketing communications at any time.

To complete your booking, we may share your information with trusted third parties, including:

• Airlines

• Hotels

• Travel insurance providers

• Global Distribution Systems (GDS)

• Payment service providers

• Fraud prevention and security partners

• Government or immigration authorities where legally required

• Customer support and technology service providers

We only share the information necessary to provide the requested services or comply with legal obligations.

We do not sell your personal information to third parties.

All online payments are processed through secure payment gateways using industry-standard encryption and security technologies.

iCanFly does not store complete payment card details on its systems unless required for authorised payment processing or permitted by applicable law.

Our website and mobile application use cookies and similar technologies to:

• Remember your preferences

• Improve website performance

• Analyse website traffic

• Enhance your browsing experience

• Support security and fraud prevention

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

We implement appropriate technical and organisational security measures to protect your personal information against:

• Unauthorised access

• Loss

• Misuse

• Alteration

• Disclosure

• Destruction

Although we take reasonable steps to safeguard your information, no method of electronic transmission or storage can be guaranteed to be completely secure.

We retain your personal information only for as long as necessary to:

• Provide our services

• Fulfil booking obligations

• Process refunds

• Resolve disputes

• Comply with legal, accounting, and regulatory requirements

When personal information is no longer required, it will be securely deleted or anonymised where appropriate.

Subject to applicable law, you may have the right to:

• Access your personal information

• Correct inaccurate information

• Update your personal information

• Request deletion of your personal information

• Withdraw consent where processing is based on consent

• Request a copy of your personal information

Certain legal or regulatory obligations may require us to retain some information even after a deletion request.

As part of providing travel booking services, your personal information may be transferred to airlines, hotels, travel insurance providers, or other travel suppliers located outside Sri Lanka.

Where such transfers occur, iCanFly will take reasonable steps to ensure that your personal information is protected in accordance with applicable privacy and data protection requirements.

Our services are not intended for individuals under the age of 18 unless bookings are made by a parent or legal guardian.

Where we collect information relating to minors as part of a travel booking, such information is processed solely for the purpose of providing the requested travel services.

Customers who have created an iCanFly account may request account deletion by contacting Customer Support or using the account settings where available.

Please note that certain booking records, payment information, and transaction history may be retained where required by law, regulatory obligations, fraud prevention requirements, or dispute resolution purposes.

iCanFly may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or business practices.

The updated version will be published on our website and mobile application together with the revised effective date.

If you have any questions regarding this Privacy Policy or how your personal information is handled, please contact us:

iCanFly

Location: Colombo, Sri Lanka

Phone: +94 784 555 222

Email: [email protected]

Website: https://icanfly.lk