Privacy Policy

Who handles your information

NOVABRIDGEVPN LTD operates FlyDeal365 and is responsible for personal information processed for this website and enquiries sent to us. Our company details and privacy contact are below. We do not operate customer accounts or take booking payments.

Search and travel partners

As you type an airport or city, suggestions are requested from Travelpayouts. It receives the typed query and connection information such as IP address and browser details. Historical-price requests use our gateway and include route and date selections. Its cache holds sanitised historical observations, not passenger identities; rate limits use short-lived in-memory connection information.

Partner flight tools stay off until you choose to load them. Loading Travelpayouts shares connection information and search locations, dates, cabin and traveller counts with its services. The bundled widget also uses preferences, affiliate attribution and usage measurement. External booking partners receive information when you continue to their websites and explain their processing in their own notices.

FlyDeal365 has no live advertising or first-party analytics tags. Loading a partner widget is not consent to future FlyDeal365 advertising or analytics. You can keep partner tools off and continue using the owned search planner and guides.

Contact and correspondence

When you email us, we receive your email address, the name you provide, subject, message and delivery metadata. We use these to respond, handle feedback, consider business enquiries and deal with privacy requests. Email uses the existing Microsoft 365 mailbox and any configured forwarding. A website submission form is not currently enabled; the Contact page itself submits nothing.

Provide only what is needed for your enquiry. Correspondence retention depends on its purpose, whether the enquiry is resolved, and legal or dispute-related needs. A fixed mailbox retention period and forwarding settings have not yet been verified; ask us for details before sending sensitive information.

Security, storage and retention

Hosting logs can include IP address, time, requested URL, response status, browser information and referring page, for security and fault diagnosis. Nginx is configured for daily rotation with seven archived generations. This is not a guarantee that every record is erased after exactly seven days. Backup, mailbox and provider retention require separate assessment.

Your manual language choice and Home Screen invitation preference are stored on your device without automatic expiry. Browser site-data controls can reset them. Our Cookies and Storage page explains partner storage and withdrawal controls.

Purposes, legal bases and recipients

We use legitimate interests in providing and securing a free travel discovery service and answering enquiries as the basis for necessary website operations and ordinary correspondence. Handling statutory data-rights obligations relies on the applicable legal obligation. Optional bundled partner storage and measurement are gated by your choice to load those tools. These bases and provider purposes remain subject to legal review.

Recipients include hosting and email infrastructure providers, authorised people handling enquiries, and the search or booking partners involved in features you use. These include Travelpayouts/Aviasales search and measurement services and Google Fonts used by the widget. Providers may process data outside the UK. Specific locations, contracts and transfer safeguards are not fully verified and remain a legal-review item; contact us for details.

Your rights and privacy enquiries

Depending on the processing and applicable law, you may request access, correction, erasure, restriction or portability of personal information. You may object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. These rights have conditions and exceptions.

Send privacy requests to contact@novabridgevpn.com with FlyDeal365 Privacy request in the subject. We may need proportionate information to verify your identity. You may complain to the UK Information Commissioner’s Office or your relevant supervisory authority. This notice remains subject to final legal review and is not a certification of compliance.

Recent searches in this tab

When you submit a valid flight search, short-lived first-party state automatically keeps up to six submitted itineraries so you can return and repeat your search without entering it again. sessionStorage flydeal365-recent-session-v3 holds only location codes and city/airport types, dates and legs, journey type, traveller counts, cabin and save/expiry times. Records are limited to this tab and at most 30 minutes. No advertising identifier, tracking profile, inferred preference or long-term history is created; these records are not used to select recommendations or sent to a history-collection service.

Use Clear history or remove one search on the homepage. Clear and pause recent searches in Privacy choices erases itineraries and pauses capture for this tab session; the pause preference contains no itinerary or identifier. Expiry is checked while the homepage runs and on return; browser suspension or session restoration can delay physical erasure. If browser storage is blocked, only temporary page memory is used and searches may disappear on navigation or reload. Older session records are shortened to the new limit and reduced to essential fields; the retired local history is erased. Browser site-data controls also remove state. Permitted scripts may technically access browser storage and other people using a shared device may see the displayed trips.

Destination inspiration requests historical observations from our existing gateway automatically when the carousel comes into view. It uses the displayed London departure city, current travel month and one-way Economy/USD context, not a profile or inferred location. Amounts are historical observations, not live bookable offers. Recent-search amounts appear only for an exact comparable route/date and supported context; unsupported prices and unverified price movements are omitted.