Privacy Policy – Plane To Paradise LLC

Last Updated: 28/11/2025

Introduction

At Plane To Paradise LLC (“Plane To Paradise,” “we,” “our,” or “us”), protecting your personal data is a core responsibility. This Privacy Policy explains how we collect, process, secure, and share your personal information when you use our platform to book flights and related airline services only.

This policy complies with:

• United States laws: FTC, CCPA/CPRA, COPPA, DOT regulations, and PCI DSS requirements.
• European laws: GDPR, ePrivacy Directive, UK DPA 2018.
• International standards: OECD Privacy Guidelines, ISO/IEC security frameworks, and U.S.–EU Data Privacy Framework.

We operate with transparency, fairness, and accountability across all data practices.

1. Company Overview

Entity Name: Plane To Paradise LLC
Jurisdiction: Pennsylvania, USA
Entity Number: 7570169
Registered Address: 2706 Victoria Lane, Easton, PA 18045, USA

Accreditations:

• IATAN (International Airlines Travel Agent Network)
• ASTA (American Society of Travel Advisors)

Extended Operations
Customer Support Partner: Sky Rebate Travels, Dehradun, India (www.skyrebate.com) — handling reservations and customer service under strict data protection contracts.
Security Partner: Backbone Security, Inc. — conducting penetration testing, security audits, and compliance monitoring.

2. Scope of This Policy

This Privacy Policy applies to all users who access:

• Our website, customer service channels, and live chat.
• Flight booking and airline-related services only.
• Phone, chat, and email interactions managed via Sky Rebate Travels.
• Payment transactions processed by PCI DSS–certified partners.

This policy does not apply to third-party websites linked from our platform.

3. Definitions

• Personal Data: Information identifying an individual (e.g., name, passport number).
• Processing: Collecting, storing, transferring, or deleting data.
• Data Subject: The traveler or customer.
• Controller: Plane To Paradise LLC.
• Processor: Service providers and BPO partners acting on our behalf.
• Suppliers: Airlines and authorized consolidators only.
• Sensitive Data: Accessibility needs, medical notes (processed only with consent).
• Applicable Law: FTC, CCPA, GDPR, DOT, PCI DSS, and other global frameworks.

4. Categories of Data We Collect

• A. Identification Data
  Full legal name, date of birth, passport/ID details, airline loyalty numbers.
• B. Contact Information
  Email (mandatory for tickets), phone number (for urgent flight updates), billing address, optional emergency contact.
• C. Payment Data
  Credit/debit card details, billing information, split-charge processing. We do not store full card numbers.
• D. Travel Data
  Flight itineraries, booking references, seat selections, baggage selections.
• E. Special Requests
  Meal preferences, disability/mobility assistance, medical notes (optional and consent-based).
• F. Technical Data
  IP address, device details, cookies, analytics, session data.
• G. Communications
  Email correspondence, live chat records, call recordings (Sky Rebate).

5. Why We Collect Data

• Booking Fulfillment – Required to issue airline tickets.
• Payment Processing – PCI DSS–secure payment handling.
• Regulatory Compliance – DOT, TSA, immigration.
• Flight Updates – Itinerary changes, delays, disruptions.
• Security & Fraud Prevention – With Backbone Security monitoring.
• Customer Support – Verify bookings, resolve issues.
• Analytics & Improvement – Improve transparency and usability.
• Marketing – Only when you give explicit opt-in consent.

6. Legal Basis for Processing

• U.S. Laws: Contract, compliance, fraud protection, CCPA rights.
• GDPR: Contractual necessity, legal obligation, legitimate interest, explicit consent.
• International: OECD and cross-border transfer frameworks.

7. Data Sharing

We share data only with:

• Airlines & Consolidators: Required for issuing tickets.
• Sky Rebate Travels: Customer service partner.
• Backbone Security, Inc.: Audit and monitoring.
• Payment Processors: PCI DSS–certified providers.
• Government Authorities: When required (DOT, TSA, immigration).

We do not sell personal data for marketing purposes.

8. International Transfers

Transfers to India (Sky Rebate) and other regions are performed under:

• GDPR Standard Contractual Clauses
• U.S.–EU Data Privacy Framework
• Contractual security controls
• Independent security audits by Backbone Security

9. Data Retention

• Booking Records: Retained for up to 7 years (DOT/IRS).
• Payment Data: Retained only for settlement or disputes.
• Call/Chat Logs: 1–3 years.
• Deletion Requests: Processed unless overridden by legal retention rules.

10. Data Security

Technical Safeguards:

• SSL/TLS encryption
• PCI DSS–compliant payment processing
• Role-based restricted access
• Real-time monitoring systems

Independent Security Audits (Backbone Security):

• Penetration testing
• Vulnerability scans
• Compliance audits
• Breach simulations

Sky Rebate Call Center Security:

• PCI DSS–trained staff
• Strict call recording access rules
• Use of agent aliases for privacy

⚠️ While no system is fully immune, we commit to notifying users and authorities in case of any data breach.

11. User Rights

• Access
• Correction
• Deletion
• Portability
• Restriction/Objection
• Do Not Sell (CCPA rights)

Requests: support@planetoparadise.com

12. Cookies

• Essential Cookies – Required for flight booking.
• Analytics Cookies – Improve site performance.
• Advertising Cookies – Only with consent.

13. Children’s Data

Not intended for children under 13 (U.S.) or 16 (EU). Accidental data is erased.

14. Updates

We update policies when required and will display the new “Last Updated” date. Major changes may be emailed to active customers.

15. Contact

Plane To Paradise LLC
📍 2706 Victoria Lane, Easton, PA 18045, USA
📧 support@planetoparadise.com
📞 +1-855-738-4299

Opt-In

By selecting the checkbox during payment, you consent to receive flight-related messages and exclusive offers from Plane to Paradise. We will only contact you if you choose to opt in.

Final Statement

Plane To Paradise LLC is committed to transparency, compliance, and global data protection standards. With Backbone Security conducting independent security audits and Sky Rebate Travels handling customer care under strict contractual controls, you can trust that your data is processed securely, responsibly, and ethically.