Effective date: 26 August 2026
This Privacy Policy explains how SaveKey Pty Ltd, including the SaveKey and SaveKey Air brands (“SaveKey”, “SaveKey Air”, “we”, “us” or “our”), collects, holds, uses, discloses and protects personal information.
SaveKey Pty Ltd is based in Australia and is developing and providing travel, flight-booking, charter coordination, travel-agent and reward services across Australia and selected international markets.
We respect your privacy and are committed to handling personal information responsibly and transparently.
This Policy applies to personal information we handle in connection with:
savekey.co, savekeyair.com, and related SaveKey websites;
SaveKey Air flight-search and booking services;
our authorised travel-agent and sub-agent network;
charter and group-travel enquiries and arrangements;
SaveKey Reward programmes, vouchers, coupons, gift cards and other eligible benefits;
customer-service and support interactions;
business partners, suppliers and service providers;
mobile applications, booking portals, agent portals or other SaveKey digital services where offered.
Where applicable, we handle personal information in accordance with relevant privacy and data-protection laws, including the Privacy Act 1988 (Cth) and Australian Privacy Principles, and applicable privacy laws in other jurisdictions in which we operate or offer services.
The information we collect depends on the service you use and the requirements of the airline, travel supplier, booking platform, destination country or applicable law.
This may include:
name;
title;
email address;
telephone number;
residential or contact address;
country of residence;
date of birth; and
other information required to identify or contact you.
When arranging or managing travel, we may collect information such as:
passenger name and date of birth;
gender, where required by an airline, immigration authority or booking system;
nationality;
passport or other travel-document information;
passport expiry date and issuing country;
visa or immigration information where required;
flight itinerary;
origin, destination and transit locations;
booking reference or Passenger Name Record (PNR);
ticket details;
travel dates;
seat preferences;
baggage requirements;
frequent-flyer membership details;
meal preferences;
special-service requests; and
other information reasonably required to arrange or manage your journey.
Certain travel requests, such as accessibility assistance, medical assistance, religious meal preferences or similar services, may reveal information that is considered sensitive information or special-category data under some privacy laws.
We will only collect and use such information where reasonably necessary for the requested service and where permitted by applicable law.
If you make a booking or enquiry on behalf of another person, you may provide personal information about that traveller.
You should ensure that you have their authority to provide the information to us and, where appropriate, make them aware of this Privacy Policy.
For group and charter bookings, we may receive passenger information from a group organiser, travel agent, sub-agent, employer, family member or other authorised representative.
We may collect:
fare and booking information;
payment status;
invoices and receipts;
booking modifications;
cancellations and refund information;
supplier and agent transaction records;
reward eligibility;
reward value;
voucher, coupon or gift-card information; and
reward redemption records.
Payments may be processed by banks, payment gateways, card processors or other authorised payment-service providers.
Depending on the payment method used, we may receive transaction identifiers, payment status and limited payment information.
SaveKey does not intend to store full payment-card numbers where payment processing is handled by an authorised third-party payment provider.
We may retain information contained in:
emails;
enquiry forms;
customer-support requests;
telephone or online communications;
complaints;
feedback;
travel-agent communications; and
other correspondence with us.
When you use our websites or digital services, we may automatically collect information including:
IP address;
browser type;
operating system;
device information;
access date and time;
pages viewed;
links or buttons used;
referring website;
technical errors; and
general usage and analytics information.
We may use cookies and similar technologies as described below.
Where a SaveKey service offers these features and you provide permission, we may access:
approximate or precise location;
camera access for scanning documents, QR codes or receipts; and
notification permissions.
You can normally manage these permissions through your browser or device settings.
We may collect personal information:
directly from you;
through a SaveKey Air website or booking platform;
through an authorised SaveKey Air travel agent or sub-agent;
from a person making a booking on your behalf;
from airlines and charter operators;
from Global Distribution Systems (GDS);
through New Distribution Capability (NDC) connections;
from airline and travel APIs;
from travel technology and reservation platforms;
from payment providers;
from reward and voucher providers;
from customer-support providers;
from business partners; and
automatically through cookies, analytics and website technologies.
When you book through a SaveKey Air agent or sub-agent, that agent may collect your information and provide the information necessary for us or our travel suppliers to process your booking.
We may collect, hold, use and disclose personal information where reasonably necessary to:
search for available flights;
obtain fares and availability;
create and manage reservations;
issue or facilitate airline tickets;
process booking changes;
manage cancellations and refunds;
coordinate baggage, seating or special-service requests;
communicate travel information; and
assist with disruptions or customer-support enquiries.
We may use passenger and enquiry information to:
assess demand for proposed charter or group flights;
coordinate passenger groups;
communicate proposed schedules and pricing;
work with licensed airlines and charter operators; and
administer confirmed charter or group-travel arrangements.
We may process relevant booking and transaction information to:
determine eligibility for applicable SaveKey Reward offers;
calculate reward value;
issue vouchers, coupons, gift cards or other benefits;
manage reward validity and redemption; and
prevent duplicate, fraudulent or unauthorised reward claims.
We may process information to:
allocate and manage bookings;
support authorised agents and sub-agents;
calculate commissions or commercial entitlements;
resolve customer or agent enquiries; and
monitor compliance with our agreements and policies.
We may use information to:
verify identity or booking details;
prevent fraud and misuse;
investigate suspicious activity;
protect customer accounts and transactions;
manage cybersecurity risks; and
enforce our terms and conditions.
We may use information to:
improve our websites and booking processes;
analyse service performance;
identify technical problems;
understand customer demand;
develop routes, charter opportunities and reward programmes; and
improve customer experience.
Where appropriate, we may use aggregated or de-identified information for analytics and business planning.
We may send:
booking confirmations;
ticketing information;
schedule or itinerary updates;
payment information;
reward notifications;
service announcements;
security alerts; and
customer-support communications.
Where permitted by law and, where required, with your consent, we may also send promotional communications about SaveKey Air services, travel offers and rewards.
You can opt out of marketing communications at any time.
Different privacy laws use different legal bases for processing personal information.
Where laws such as the GDPR or UK GDPR apply, we may process personal information on one or more applicable grounds, including:
performance of a contract or steps requested before entering into a contract;
consent;
compliance with legal obligations;
legitimate interests, where those interests are not overridden by your rights and interests; and
other lawful bases available under applicable legislation.
Withdrawing consent does not necessarily require us to stop processing information where another lawful basis permits or requires continued processing.
For example, we may need to retain booking or financial records after a journey has been completed.
Travel services necessarily involve information being shared between multiple organisations.
We may disclose relevant personal information to:
Passenger information may be provided to the airline or appropriately licensed charter operator responsible for providing the flight.
We may transmit information through reservation and distribution systems used to search, book, ticket and manage flights.
Information may be shared with the authorised SaveKey Air agent or sub-agent involved in your booking or customer service.
Where required, passenger information may be provided to immigration, customs, border-security, aviation-security, law-enforcement or other government authorities.
Airlines may also be legally required to provide passenger information to authorities in countries associated with your journey.
Banks, card processors, payment gateways and other payment-service providers may process information necessary to complete transactions and refunds.
Where your booking includes a SaveKey Reward, limited information may be provided to voucher, coupon, gift-card, merchant or reward-service providers where necessary to issue or redeem the applicable benefit.
We may use third-party providers for services such as:
cloud hosting;
cybersecurity;
communications;
email and SMS;
analytics;
customer support;
accounting;
document management;
fraud prevention; and
IT infrastructure.
We may disclose information where reasonably necessary to:
lawyers;
accountants;
auditors;
insurers;
regulators;
courts;
law-enforcement agencies; or
government authorities.
We may also disclose information where required or authorised by law.
We do not sell personal information as part of our ordinary business model.
Air travel is inherently international.
Your information may therefore be processed or disclosed outside Australia, including in:
the country where your journey begins;
your destination country;
any transit country;
countries where airlines or charter operators are based;
countries where GDS, NDC, reservation or travel-technology providers process information; and
countries where our service providers or business partners operate.
Given SaveKey Air's current and intended operating markets, overseas recipients may include organisations located in India, the United Arab Emirates and other Middle Eastern countries, the United Kingdom, the United States, Singapore, New Zealand, countries within the European Economic Area, and other countries relevant to your itinerary or travel supplier.
Because the countries involved can depend on your specific airline, route, booking system and destination, it may not always be practicable to provide an exhaustive list in advance.
Where applicable, we take reasonable steps or use appropriate contractual, organisational and technical safeguards for international transfers as required by relevant privacy laws.
Our websites may use cookies and similar technologies.
These may include:
Essential cookies
Required for website functionality, security, sessions and booking processes.
Preference cookies
Used to remember selections and settings.
Analytics cookies
Used to understand website usage, performance and customer experience.
Marketing cookies
Where used, these may help us measure advertising or provide more relevant marketing, subject to applicable consent requirements.
Where required by law, non-essential cookies will be used only after appropriate consent.
You can manage cookies through your browser and, where available, our cookie-management tools.
Disabling certain cookies may affect website functionality.
Where permitted by applicable law, we may use your contact details to provide information about:
flight offers;
charter opportunities;
new routes;
SaveKey Rewards;
travel promotions; and
other SaveKey Air services.
Where consent is required, we will obtain it before sending marketing communications.
You can unsubscribe at any time by using the unsubscribe option provided in the communication or contacting us.
Service communications relating to an existing booking, account, transaction, safety issue or reward are not generally considered marketing communications.
Our travel and reward systems may use automated technology to assist with activities such as:
flight searching and fare comparison;
booking validation;
fraud and security screening;
reward eligibility calculations;
customer-service routing; and
personalised service or travel recommendations.
Where an automated process makes or materially contributes to a decision that significantly affects an individual, and applicable law requires additional transparency, review or other rights, we will provide the required information and protections.
We take reasonable technical and organisational measures designed to protect personal information against:
misuse;
interference;
loss;
unauthorised access;
unauthorised modification; and
unauthorised disclosure.
Depending on the systems and risks involved, these measures may include:
encryption;
access controls;
authentication controls;
secure hosting;
logging and monitoring;
staff access restrictions;
security updates;
backup and recovery processes;
supplier-security assessments; and
incident-response procedures.
No internet transmission or information-storage system can be guaranteed to be completely secure.
If a data breach occurs, we will assess and respond to it in accordance with applicable law, including applicable notification requirements.
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or where retention is required or permitted by law.
Retention periods may depend on:
the type of booking or transaction;
airline or supplier requirements;
reward validity periods;
accounting and taxation obligations;
corporate and regulatory requirements;
fraud prevention;
dispute or chargeback periods;
legal claims; and
applicable limitation periods.
Some booking, transaction and financial records may therefore be retained for several years after a booking has been completed.
When information is no longer reasonably required and there is no legal reason to retain it, we will take reasonable steps to delete or de-identify it.
Air travel frequently involves children and young travellers.
A parent, guardian or other person with appropriate authority may provide personal information about a child when making or managing a booking.
We may collect information about a child passenger where it is reasonably necessary to:
make or manage the travel booking;
issue a ticket;
comply with airline requirements;
provide requested travel assistance; or
comply with immigration, border-control, safety or legal requirements.
SaveKey Air accounts, purchases or contractual arrangements intended for adults should be created or authorised by an adult with appropriate authority.
Where applicable law requires parental or guardian consent for processing a child's personal information, we will take reasonable steps to obtain or verify that consent.
Your rights depend on the privacy laws applicable to you.
Subject to applicable law, you may have rights to:
request access to personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of certain information;
object to certain processing;
request restriction of processing;
withdraw consent;
request portability of certain information;
object to direct marketing; and
make a privacy complaint.
Some rights are subject to exceptions.
For example, we may be unable to delete information that must be retained for legal, tax, fraud-prevention, contractual or regulatory reasons.
To make a request, contact:
We may need to verify your identity before processing a request.
If you believe we have not handled your personal information appropriately, please contact us at:
Please provide sufficient information for us to understand and investigate your concern.
We will acknowledge and review privacy complaints and aim to respond within a reasonable period.
If you are not satisfied with our response, you may have the right to raise the matter with the relevant privacy or data-protection authority in your jurisdiction.
In Australia, this may include the Office of the Australian Information Commissioner (OAIC) where applicable.
Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to our activities, we handle personal information in accordance with those requirements.
This includes applicable requirements concerning collection, use and disclosure, security, access and correction, direct marketing and overseas disclosures.
Eligible privacy complaints may be escalated to the Office of the Australian Information Commissioner (OAIC).
Where applicable to our activities, we will handle digital personal data in accordance with India's Digital Personal Data Protection Act 2023 and the Digital Personal Data Protection Rules 2025, as the relevant provisions and obligations apply and come into force.
Where applicable, personal-data processing associated with our UAE operations will be handled in accordance with relevant UAE privacy requirements, including Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data, subject to its scope and applicable exceptions.
Different requirements may apply within certain UAE financial free zones or other jurisdictions.
Where the EU General Data Protection Regulation (GDPR) applies to our processing, individuals may have additional rights, including applicable rights concerning access, correction, erasure, restriction, portability, objection and complaints to an appropriate supervisory authority.
Where the UK GDPR and applicable UK data-protection legislation apply, UK individuals may exercise applicable statutory data-protection rights and may have the right to complain to the Information Commissioner's Office (ICO).
Our websites and booking services may link to or integrate with third-party websites and platforms, including airlines, travel suppliers, payment providers and reward providers.
Those organisations may separately determine how they process personal information and may have their own privacy policies.
We encourage you to review the privacy policies of relevant third parties.
We may update this Privacy Policy when:
our services change;
we introduce new booking or reward technology;
our travel-agent or charter operations expand;
our service providers change; or
applicable privacy laws or regulatory requirements change.
The latest version will be published on our website with an updated effective date.
Where required by law, we will provide additional notice of material changes.
For privacy questions, requests or complaints:
Privacy: privacy@savekeyair.com
Security: privacy@savekeyair.com
Customer Support: support@savekeyair.com
SaveKey Pty Ltd
Adelaide, South Australia
Australia
We collect information needed to search, book and manage travel and provide applicable SaveKey Rewards.
Travel bookings may require information to be shared with airlines, charter operators, GDS/NDC platforms, travel agents, payment providers and government authorities.
Because air travel is international, your information may be processed in other countries connected with your booking.
We take reasonable measures to protect personal information.
We do not sell personal information as part of our ordinary business model.
You may request access to or correction of your information and exercise other applicable privacy rights by contacting privacy@savekeyair.com.