What this notice covers
This privacy notice applies to information processed through the Palko Air public website, flight-search and booking flow, Manage booking environment, online check-in functions and associated passenger self-service features.
Separate or additional privacy information may apply to future commercial services, operating partners or third-party platforms when those services become available.
Information we process
The information processed depends on how you use the website. It may include information you actively provide as well as technical information necessary to maintain a booking journey.
Flight search and journey information
This can include selected origin and destination, travel dates, journey type, passenger count, selected flights and selected fare information.
Booking and contact information
During booking, information may include booking references, booking identifiers, selected flight segments, customer email address and, when supplied, a telephone number.
Passenger information
Passenger details entered during the reservation process are processed in order to create and service the booking. The exact information required can depend on the journey and the passenger services being used.
Seat and check-in information
Where used, this can include seat selections, passenger identifiers, check-in status and boarding-pass information.
Browser session storage
The current booking environment uses browsersession storage to carry information between individual steps of the booking and self-service journey.
This may include selected flight information, passenger and booking data, contact details, seat selections, confirmation information and temporary access information used by Manage booking.
Session storage is browser-side storage associated with the active browser session. It is different from advertising or behavioural tracking cookies.
In the current frontend reviewed for this notice, Palko Air does not intentionally deploy advertising pixels or third-party analytics tracking.
Why information is used
Information is processed where necessary to provide or prepare the functions requested through the website. Depending on the service, this can include:
- searching for available flights and fares;
- creating and maintaining a reservation;
- associating passengers with a booking;
- recording seat selections;
- supporting booking management and check-in;
- creating boarding-pass information;
- processing or recording payment status;
- maintaining the security and integrity of the service.
As commercial operations develop, the applicable legal bases and any additional processing purposes will be documented in the production version of this notice.
Booking & passenger data
Booking information is transmitted to the Palko Air backend when a reservation is created. Passenger information is then associated with the relevant booking.
Manage booking uses temporary access information after a successful booking-reference and passenger verification step. Booking references and surnames are not intentionally left in the browser address bar after successful authentication.
A booking reference or access link should be treated as private travel information. Do not publish or unnecessarily share it with other people.
Payments
The current development booking environment contains a simulated payment workflow used for testing the reservation lifecycle.
It should not be understood as the final production payment service. When commercial payment processing is introduced, this notice will be updated to describe the relevant payment provider and associated data processing.
Palko Air does not intend to store complete payment-card credentials in the browser booking session.
Sharing & service providers
A commercial airline service can require information to be exchanged with organisations involved in providing the requested journey, such as operating, airport, payment, technology or legally required government services.
The production privacy notice will identify or appropriately describe the relevant categories of recipients once those arrangements are finalised.
Personal information will not be described as shared for advertising purposes unless such processing is actually introduced and disclosed.
Retention
Browser session data is used to maintain continuity through the active booking and self-service flow.
Server-side booking records are separate from browser session storage and may need to be retained for operational, legal, accounting, security or customer-service purposes.
Production retention periods will be documented when the applicable commercial and regulatory requirements are finalised.
Your rights
Where European data-protection law applies, individuals may have rights concerning their personal information, depending on the circumstances and legal basis of the processing.
These can include rights of access, correction, deletion, restriction, objection and data portability, as well as the right to lodge a complaint with the competent supervisory authority.
Some rights can be limited where information must be retained or processed to meet legal, contractual, safety, security or aviation-related obligations.
Contact & updates
Palko Air will publish full data-controller and privacy contact details before commercial passenger services and production customer-data processing are launched.
For current project-related enquiries, use thePalko Air contact page.
This notice may be updated as the booking platform, operating model, suppliers and regulatory arrangements develop. The revision date shown at the top of this page indicates the current version.