Privacy Policy

This Privacy Policy explains how Holipay (“we,” “us”) collects, uses, shares, and protects personal information when you use our website, applications, and related services (the “Service”). It also describes choices you may have.

Holipay is a comparison and cashback platform. We do not sell travel tickets. When you book with a third-party airline or agency (“Provider”), that Provider’s privacy policy governs data they collect on their own sites.

By using the Service, you acknowledge this Policy. If you do not agree, please do not use the Service.

Depending on how you use the Service, we may collect:

• Account data: such as email address and authentication-related details you provide
• Profile and preference data: such as language, currency, and communication preferences
• Search and usage data: routes searched, pages viewed, clicks to Providers, device/browser type, approximate location derived from IP, referral URLs, and similar diagnostics
• Cashback and payout data: tracked referral or booking identifiers from Partners, cashback status, and payout details you submit to receive rewards (for example account details needed to send a withdrawal)
• Support data: messages and attachments you send through our contact forms
• Cookies and similar technologies: as described in our Cookie Policy

We do not intentionally collect full payment card numbers for Provider bookings, because those payments are handled on Provider sites. Do not send sensitive payment credentials through our contact forms.

We use personal information to:

• Operate, maintain, secure, and improve the Service
• Attribute referrals, calculate, verify, and pay Cashback
• Prevent fraud, abuse, and unauthorized access
• Respond to support requests and service notices
• Personalize language, currency, and relevant content where appropriate
• Analyze aggregated or de-identified trends to improve performance
• Comply with law and enforce our Terms of Service
• Send service-related messages; marketing only where permitted and with an ability to opt out

We process information where necessary to provide the Service you request, to pursue legitimate interests (such as security, fraud prevention, and product improvement) balanced against your rights, to comply with legal obligations, or where you have given consent (for example certain cookies or marketing).

We do not sell your personal information. We may share information only as needed for the purposes above, including with:

• Service providers: hosting, analytics, email, customer support tools, security, and payout processors that act on our instructions
• Advertising and affiliate Partners: to attribute clicks and bookings for Cashback (typically limited identifiers and event data, not unnecessary profile data)
• Providers: only to the extent you choose to leave Holipay and interact with them; thereafter their policies apply
• Professional advisors and authorities: where reasonably necessary for legal compliance, disputes, or safety
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality

We are not responsible for Providers’ or other independent third parties’ privacy practices once you leave the Service.

We may process and store information in countries other than where you live. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for cross-border transfers.

We retain personal information only as long as needed for the purposes described in this Policy, including Cashback verification, accounting, dispute resolution, security, and legal compliance. Retention periods vary by data type and legal requirements. When no longer needed, we delete or de-identify information where reasonably practicable.

We implement technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure. You use the Service at your own risk regarding internet security, and you must protect your account credentials.

Depending on your location, you may have rights to access, correct, delete, restrict, or port personal information, to object to certain processing, or to withdraw consent where processing is consent-based. You may also opt out of marketing emails using unsubscribe links.

To exercise rights, contact us via our Contact page. We may need to verify your identity before acting. Some rights are limited by law (for example where we must retain records for fraud prevention or Cashback audits).

If you are in the EEA, UK, or a similar jurisdiction, you may lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can try to resolve your concern.

The Service is not directed to children under 16 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

We may use automated tools to detect fraud, secure accounts, and validate Cashback eligibility. These tools are used to protect Holipay and users. They do not produce legal effects solely based on profiling beyond what is necessary for the Service and fraud prevention.

We use cookies and similar technologies as described in our Cookie Policy. You can manage non-essential cookies through our consent tools and browser settings.

We may update this Policy from time to time. The “Last updated” date will change when we post revisions. Material changes may be highlighted on the Service or communicated by email where appropriate. Continued use after an update constitutes acceptance of the revised Policy where permitted by law.

Privacy questions and requests should be submitted through our Contact page only. We do not publish additional personal contact details in this Policy.