Privacy Policy

Effective date: 26 August 2026

This Privacy Policy explains how SaveKey Pty Ltd, including the SaveKey and SaveKey Air brands (“SaveKey”, “SaveKey Air”, “we”, “us” or “our”), collects, holds, uses, discloses and protects personal information.

SaveKey Pty Ltd is based in Australia and is developing and providing travel, flight-booking, charter coordination, travel-agent and reward services across Australia and selected international markets.

We respect your privacy and are committed to handling personal information responsibly and transparently.


1. Scope of This Policy

This Policy applies to personal information we handle in connection with:

  • savekey.co, savekeyair.com, and related SaveKey websites;

  • SaveKey Air flight-search and booking services;

  • our authorised travel-agent and sub-agent network;

  • charter and group-travel enquiries and arrangements;

  • SaveKey Reward programmes, vouchers, coupons, gift cards and other eligible benefits;

  • customer-service and support interactions;

  • business partners, suppliers and service providers;

  • mobile applications, booking portals, agent portals or other SaveKey digital services where offered.

Where applicable, we handle personal information in accordance with relevant privacy and data-protection laws, including the Privacy Act 1988 (Cth) and Australian Privacy Principles, and applicable privacy laws in other jurisdictions in which we operate or offer services.


2. Information We May Collect

The information we collect depends on the service you use and the requirements of the airline, travel supplier, booking platform, destination country or applicable law.

Personal and Contact Information

This may include:

  • name;

  • title;

  • email address;

  • telephone number;

  • residential or contact address;

  • country of residence;

  • date of birth; and

  • other information required to identify or contact you.

Passenger and Travel Information

When arranging or managing travel, we may collect information such as:

  • passenger name and date of birth;

  • gender, where required by an airline, immigration authority or booking system;

  • nationality;

  • passport or other travel-document information;

  • passport expiry date and issuing country;

  • visa or immigration information where required;

  • flight itinerary;

  • origin, destination and transit locations;

  • booking reference or Passenger Name Record (PNR);

  • ticket details;

  • travel dates;

  • seat preferences;

  • baggage requirements;

  • frequent-flyer membership details;

  • meal preferences;

  • special-service requests; and

  • other information reasonably required to arrange or manage your journey.

Certain travel requests, such as accessibility assistance, medical assistance, religious meal preferences or similar services, may reveal information that is considered sensitive information or special-category data under some privacy laws.

We will only collect and use such information where reasonably necessary for the requested service and where permitted by applicable law.

Information About Other Travellers

If you make a booking or enquiry on behalf of another person, you may provide personal information about that traveller.

You should ensure that you have their authority to provide the information to us and, where appropriate, make them aware of this Privacy Policy.

For group and charter bookings, we may receive passenger information from a group organiser, travel agent, sub-agent, employer, family member or other authorised representative.

Booking and Transaction Information

We may collect:

  • fare and booking information;

  • payment status;

  • invoices and receipts;

  • booking modifications;

  • cancellations and refund information;

  • supplier and agent transaction records;

  • reward eligibility;

  • reward value;

  • voucher, coupon or gift-card information; and

  • reward redemption records.

Payment Information

Payments may be processed by banks, payment gateways, card processors or other authorised payment-service providers.

Depending on the payment method used, we may receive transaction identifiers, payment status and limited payment information.

SaveKey does not intend to store full payment-card numbers where payment processing is handled by an authorised third-party payment provider.

Communications

We may retain information contained in:

  • emails;

  • enquiry forms;

  • customer-support requests;

  • telephone or online communications;

  • complaints;

  • feedback;

  • travel-agent communications; and

  • other correspondence with us.

Website and Device Information

When you use our websites or digital services, we may automatically collect information including:

  • IP address;

  • browser type;

  • operating system;

  • device information;

  • access date and time;

  • pages viewed;

  • links or buttons used;

  • referring website;

  • technical errors; and

  • general usage and analytics information.

We may use cookies and similar technologies as described below.

Location and Device Permissions

Where a SaveKey service offers these features and you provide permission, we may access:

  • approximate or precise location;

  • camera access for scanning documents, QR codes or receipts; and

  • notification permissions.

You can normally manage these permissions through your browser or device settings.


3. How We Collect Information

We may collect personal information:

  • directly from you;

  • through a SaveKey Air website or booking platform;

  • through an authorised SaveKey Air travel agent or sub-agent;

  • from a person making a booking on your behalf;

  • from airlines and charter operators;

  • from Global Distribution Systems (GDS);

  • through New Distribution Capability (NDC) connections;

  • from airline and travel APIs;

  • from travel technology and reservation platforms;

  • from payment providers;

  • from reward and voucher providers;

  • from customer-support providers;

  • from business partners; and

  • automatically through cookies, analytics and website technologies.

When you book through a SaveKey Air agent or sub-agent, that agent may collect your information and provide the information necessary for us or our travel suppliers to process your booking.


4. Why We Collect and Use Your Information

We may collect, hold, use and disclose personal information where reasonably necessary to:

Search, Book and Manage Travel

  • search for available flights;

  • obtain fares and availability;

  • create and manage reservations;

  • issue or facilitate airline tickets;

  • process booking changes;

  • manage cancellations and refunds;

  • coordinate baggage, seating or special-service requests;

  • communicate travel information; and

  • assist with disruptions or customer-support enquiries.

Arrange Charter and Group Travel

We may use passenger and enquiry information to:

  • assess demand for proposed charter or group flights;

  • coordinate passenger groups;

  • communicate proposed schedules and pricing;

  • work with licensed airlines and charter operators; and

  • administer confirmed charter or group-travel arrangements.

Provide SaveKey Rewards

We may process relevant booking and transaction information to:

  • determine eligibility for applicable SaveKey Reward offers;

  • calculate reward value;

  • issue vouchers, coupons, gift cards or other benefits;

  • manage reward validity and redemption; and

  • prevent duplicate, fraudulent or unauthorised reward claims.

Operate Our Travel-Agent Network

We may process information to:

  • allocate and manage bookings;

  • support authorised agents and sub-agents;

  • calculate commissions or commercial entitlements;

  • resolve customer or agent enquiries; and

  • monitor compliance with our agreements and policies.

Security, Fraud Prevention and Verification

We may use information to:

  • verify identity or booking details;

  • prevent fraud and misuse;

  • investigate suspicious activity;

  • protect customer accounts and transactions;

  • manage cybersecurity risks; and

  • enforce our terms and conditions.

Improve Our Services

We may use information to:

  • improve our websites and booking processes;

  • analyse service performance;

  • identify technical problems;

  • understand customer demand;

  • develop routes, charter opportunities and reward programmes; and

  • improve customer experience.

Where appropriate, we may use aggregated or de-identified information for analytics and business planning.

Communicate With You

We may send:

  • booking confirmations;

  • ticketing information;

  • schedule or itinerary updates;

  • payment information;

  • reward notifications;

  • service announcements;

  • security alerts; and

  • customer-support communications.

Where permitted by law and, where required, with your consent, we may also send promotional communications about SaveKey Air services, travel offers and rewards.

You can opt out of marketing communications at any time.


5. Legal Bases Where Applicable

Different privacy laws use different legal bases for processing personal information.

Where laws such as the GDPR or UK GDPR apply, we may process personal information on one or more applicable grounds, including:

  • performance of a contract or steps requested before entering into a contract;

  • consent;

  • compliance with legal obligations;

  • legitimate interests, where those interests are not overridden by your rights and interests; and

  • other lawful bases available under applicable legislation.

Withdrawing consent does not necessarily require us to stop processing information where another lawful basis permits or requires continued processing.

For example, we may need to retain booking or financial records after a journey has been completed.


6. Who We May Share Information With

Travel services necessarily involve information being shared between multiple organisations.

We may disclose relevant personal information to:

Airlines and Charter Operators

Passenger information may be provided to the airline or appropriately licensed charter operator responsible for providing the flight.

GDS, NDC and Travel Technology Providers

We may transmit information through reservation and distribution systems used to search, book, ticket and manage flights.

Travel Agents and Sub-Agents

Information may be shared with the authorised SaveKey Air agent or sub-agent involved in your booking or customer service.

Airports, Government and Border Authorities

Where required, passenger information may be provided to immigration, customs, border-security, aviation-security, law-enforcement or other government authorities.

Airlines may also be legally required to provide passenger information to authorities in countries associated with your journey.

Payment Providers

Banks, card processors, payment gateways and other payment-service providers may process information necessary to complete transactions and refunds.

Reward Providers

Where your booking includes a SaveKey Reward, limited information may be provided to voucher, coupon, gift-card, merchant or reward-service providers where necessary to issue or redeem the applicable benefit.

Technology and Business Service Providers

We may use third-party providers for services such as:

  • cloud hosting;

  • cybersecurity;

  • communications;

  • email and SMS;

  • analytics;

  • customer support;

  • accounting;

  • document management;

  • fraud prevention; and

  • IT infrastructure.

Professional Advisers and Authorities

We may disclose information where reasonably necessary to:

  • lawyers;

  • accountants;

  • auditors;

  • insurers;

  • regulators;

  • courts;

  • law-enforcement agencies; or

  • government authorities.

We may also disclose information where required or authorised by law.

We do not sell personal information as part of our ordinary business model.


7. International Data Transfers

Air travel is inherently international.

Your information may therefore be processed or disclosed outside Australia, including in:

  • the country where your journey begins;

  • your destination country;

  • any transit country;

  • countries where airlines or charter operators are based;

  • countries where GDS, NDC, reservation or travel-technology providers process information; and

  • countries where our service providers or business partners operate.

Given SaveKey Air's current and intended operating markets, overseas recipients may include organisations located in India, the United Arab Emirates and other Middle Eastern countries, the United Kingdom, the United States, Singapore, New Zealand, countries within the European Economic Area, and other countries relevant to your itinerary or travel supplier.

Because the countries involved can depend on your specific airline, route, booking system and destination, it may not always be practicable to provide an exhaustive list in advance.

Where applicable, we take reasonable steps or use appropriate contractual, organisational and technical safeguards for international transfers as required by relevant privacy laws.


8. Cookies and Similar Technologies

Our websites may use cookies and similar technologies.

These may include:

Essential cookies
Required for website functionality, security, sessions and booking processes.

Preference cookies
Used to remember selections and settings.

Analytics cookies
Used to understand website usage, performance and customer experience.

Marketing cookies
Where used, these may help us measure advertising or provide more relevant marketing, subject to applicable consent requirements.

Where required by law, non-essential cookies will be used only after appropriate consent.

You can manage cookies through your browser and, where available, our cookie-management tools.

Disabling certain cookies may affect website functionality.


9. Marketing

Where permitted by applicable law, we may use your contact details to provide information about:

  • flight offers;

  • charter opportunities;

  • new routes;

  • SaveKey Rewards;

  • travel promotions; and

  • other SaveKey Air services.

Where consent is required, we will obtain it before sending marketing communications.

You can unsubscribe at any time by using the unsubscribe option provided in the communication or contacting us.

Service communications relating to an existing booking, account, transaction, safety issue or reward are not generally considered marketing communications.


10. Automated Processing

Our travel and reward systems may use automated technology to assist with activities such as:

  • flight searching and fare comparison;

  • booking validation;

  • fraud and security screening;

  • reward eligibility calculations;

  • customer-service routing; and

  • personalised service or travel recommendations.

Where an automated process makes or materially contributes to a decision that significantly affects an individual, and applicable law requires additional transparency, review or other rights, we will provide the required information and protections.


11. How We Protect Personal Information

We take reasonable technical and organisational measures designed to protect personal information against:

  • misuse;

  • interference;

  • loss;

  • unauthorised access;

  • unauthorised modification; and

  • unauthorised disclosure.

Depending on the systems and risks involved, these measures may include:

  • encryption;

  • access controls;

  • authentication controls;

  • secure hosting;

  • logging and monitoring;

  • staff access restrictions;

  • security updates;

  • backup and recovery processes;

  • supplier-security assessments; and

  • incident-response procedures.

No internet transmission or information-storage system can be guaranteed to be completely secure.

If a data breach occurs, we will assess and respond to it in accordance with applicable law, including applicable notification requirements.


12. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or where retention is required or permitted by law.

Retention periods may depend on:

  • the type of booking or transaction;

  • airline or supplier requirements;

  • reward validity periods;

  • accounting and taxation obligations;

  • corporate and regulatory requirements;

  • fraud prevention;

  • dispute or chargeback periods;

  • legal claims; and

  • applicable limitation periods.

Some booking, transaction and financial records may therefore be retained for several years after a booking has been completed.

When information is no longer reasonably required and there is no legal reason to retain it, we will take reasonable steps to delete or de-identify it.


13. Children and Young Travellers

Air travel frequently involves children and young travellers.

A parent, guardian or other person with appropriate authority may provide personal information about a child when making or managing a booking.

We may collect information about a child passenger where it is reasonably necessary to:

  • make or manage the travel booking;

  • issue a ticket;

  • comply with airline requirements;

  • provide requested travel assistance; or

  • comply with immigration, border-control, safety or legal requirements.

SaveKey Air accounts, purchases or contractual arrangements intended for adults should be created or authorised by an adult with appropriate authority.

Where applicable law requires parental or guardian consent for processing a child's personal information, we will take reasonable steps to obtain or verify that consent.


14. Your Privacy Rights

Your rights depend on the privacy laws applicable to you.

Subject to applicable law, you may have rights to:

  • request access to personal information we hold about you;

  • request correction of inaccurate or incomplete information;

  • request deletion of certain information;

  • object to certain processing;

  • request restriction of processing;

  • withdraw consent;

  • request portability of certain information;

  • object to direct marketing; and

  • make a privacy complaint.

Some rights are subject to exceptions.

For example, we may be unable to delete information that must be retained for legal, tax, fraud-prevention, contractual or regulatory reasons.

To make a request, contact:

privacy@savekeyair.com

We may need to verify your identity before processing a request.


15. Privacy Complaints

If you believe we have not handled your personal information appropriately, please contact us at:

privacy@savekeyair.com

Please provide sufficient information for us to understand and investigate your concern.

We will acknowledge and review privacy complaints and aim to respond within a reasonable period.

If you are not satisfied with our response, you may have the right to raise the matter with the relevant privacy or data-protection authority in your jurisdiction.

In Australia, this may include the Office of the Australian Information Commissioner (OAIC) where applicable.


16. Region-Specific Information

Australia

Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to our activities, we handle personal information in accordance with those requirements.

This includes applicable requirements concerning collection, use and disclosure, security, access and correction, direct marketing and overseas disclosures.

Eligible privacy complaints may be escalated to the Office of the Australian Information Commissioner (OAIC).

India

Where applicable to our activities, we will handle digital personal data in accordance with India's Digital Personal Data Protection Act 2023 and the Digital Personal Data Protection Rules 2025, as the relevant provisions and obligations apply and come into force.

United Arab Emirates

Where applicable, personal-data processing associated with our UAE operations will be handled in accordance with relevant UAE privacy requirements, including Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data, subject to its scope and applicable exceptions.

Different requirements may apply within certain UAE financial free zones or other jurisdictions.

European Economic Area

Where the EU General Data Protection Regulation (GDPR) applies to our processing, individuals may have additional rights, including applicable rights concerning access, correction, erasure, restriction, portability, objection and complaints to an appropriate supervisory authority.

United Kingdom

Where the UK GDPR and applicable UK data-protection legislation apply, UK individuals may exercise applicable statutory data-protection rights and may have the right to complain to the Information Commissioner's Office (ICO).


17. Third-Party Websites and Services

Our websites and booking services may link to or integrate with third-party websites and platforms, including airlines, travel suppliers, payment providers and reward providers.

Those organisations may separately determine how they process personal information and may have their own privacy policies.

We encourage you to review the privacy policies of relevant third parties.


18. Changes to This Privacy Policy

We may update this Privacy Policy when:

  • our services change;

  • we introduce new booking or reward technology;

  • our travel-agent or charter operations expand;

  • our service providers change; or

  • applicable privacy laws or regulatory requirements change.

The latest version will be published on our website with an updated effective date.

Where required by law, we will provide additional notice of material changes.


19. Contact Us

For privacy questions, requests or complaints:

Privacy: privacy@savekeyair.com
Security: privacy@savekeyair.com
Customer Support: support@savekeyair.com

SaveKey Pty Ltd
Adelaide, South Australia
Australia


Privacy at a Glance

  • We collect information needed to search, book and manage travel and provide applicable SaveKey Rewards.

  • Travel bookings may require information to be shared with airlines, charter operators, GDS/NDC platforms, travel agents, payment providers and government authorities.

  • Because air travel is international, your information may be processed in other countries connected with your booking.

  • We take reasonable measures to protect personal information.

  • We do not sell personal information as part of our ordinary business model.

  • You may request access to or correction of your information and exercise other applicable privacy rights by contacting privacy@savekeyair.com.