Privacy Policy

This Privacy Policy explains how personal information is collected, used, disclosed, and protected when you use the website www.cheapflyshop.ca or our travel booking services.

We are an independent non-IATA online travel agency acting as an intermediary. We arrange flight tickets through contracted suppliers.

Prices on cheapflyshop.ca are generally displayed in Canadian dollars (CAD).

We are responsible for the personal information under our control. We use contractual and other means to ensure a comparable level of protection when information is processed by our service providers.

This Policy applies to personal information we collect from individuals in Canada through our website, telephone, email, and related services.

It is intended to comply with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial legislation.

Residents of Quebec should also note that additional requirements under Quebec's Law 25 may apply.

We collect personal information that is reasonably necessary to provide our travel services. This may include:

3.1 Identity and Contact Information

• Full name, title, email address, telephone number, postal address.

3.2 Travel and Booking Information

• Travel dates, destinations, passenger details, frequent flyer numbers, seat or meal preferences.
• Passport number, nationality, date of birth, and passport expiry date (when required by airlines or for Advance Passenger Information).

3.3 Payment Information

• Payment card details and billing address (card data is processed through secure payment providers; we do not store full card numbers).

3.4 Sensitive / Health-Related Information (only if provided by you)

• Dietary requirements, mobility or health information needed for special assistance requests.

3.5 Technical and Usage Information

• IP address, browser type, device information, pages visited, and cookie data.

3.6 Communications

• Records of emails, calls (calls may be recorded for quality and training), and other correspondence.

We do not knowingly collect personal information from children under 13 without appropriate parental involvement in the booking.

We collect and use personal information for the following purposes:

• To process, confirm, and manage flight and travel bookings.
• To issue tickets and send confirmations, itineraries, and travel documents.
• To communicate with you about your booking, changes, cancellations, schedule updates, and customer support.
• To process payments, refunds, and chargebacks.
• To comply with legal and regulatory requirements (including airline Advance Passenger Information rules).
• To detect and prevent fraud and security incidents.
• To improve our website and services.
• To send marketing communications where we have obtained appropriate consent or where permitted by law (you may withdraw consent at any time).

We identify the purposes for which we collect personal information at or before the time of collection, or as soon as practicable thereafter.

We obtain consent for the collection, use, and disclosure of personal information (except where PIPEDA or other law permits collection/use without consent). Consent may be express or implied, depending on the sensitivity of the information and the reasonable expectations of the individual.

By providing personal information and completing a booking, you consent to the collection, use, and disclosure of that information for the purposes described in this Policy.

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide certain services.

We may disclose personal information to:

• Airlines, consolidators, and travel suppliers – to fulfill your booking and issue tickets.
• Payment processors – to process payments securely.
• Service providers – who assist with IT, customer support, email delivery, analytics, and fraud prevention (under contractual obligations to protect the information).
• Professional advisers – lawyers, accountants, and insurers where required.
• Government authorities and law enforcement – when required by law or to protect rights and safety.

We do not sell personal information.

Because our company is based in the United States and we use service providers and travel suppliers that operate internationally, personal information collected from Canadian customers is transferred to and processed in the United States and potentially other countries.

When personal information is transferred outside Canada, it may be subject to the laws of those other jurisdictions (including the possibility of access by foreign courts, law enforcement, and national security authorities).

We use contractual and other means to provide a comparable level of protection while the information is being processed by our service providers.

By using our services and providing personal information, you acknowledge and consent to this transfer and processing outside Canada.

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required for legal, accounting, tax, or dispute-resolution purposes.

• Booking and transaction records are typically retained for several years after the travel date (commonly 6–7 years).
• Marketing information is retained until you withdraw consent or we no longer need it.
• Technical logs are generally retained for shorter periods unless needed for security or legal reasons.

When personal information is no longer required, we securely destroy, erase, or anonymize it.

We implement reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification.

Payment card data is processed through providers that maintain PCI-DSS compliance. No method of transmission or storage is completely secure.

We take reasonable steps to ensure that personal information is as accurate, complete and up-to-date as necessary for the purposes for which it is used.

You are responsible for providing accurate information when making a booking (especially passenger names that must match passports).

Under PIPEDA you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete personal information.
• Withdraw consent to the use or disclosure of your personal information (subject to legal or contractual restrictions).
• Challenge our compliance with PIPEDA principles.

To make a request, please email support@cheapflyshop.ca with the subject line "Privacy Request" and sufficient information for us to identify you and locate the relevant records.

We will respond within a reasonable time (generally within 30 days).

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

We use cookies and similar technologies to operate the website, remember preferences, analyze traffic, and improve user experience.

You can manage cookie settings through your browser. Disabling certain cookies may affect site functionality.

Our website may contain links to third-party sites (airlines, hotels, etc.). We are not responsible for the privacy practices of those sites.

Please review their privacy policies.

We may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated "Last Updated" date.

Material changes may also be communicated by email or other means where appropriate.

Continued use of our services after changes constitutes acceptance of the updated Policy.

For questions about this Privacy Policy or to exercise your rights, please contact us:

You may also contact the Office of the Privacy Commissioner of Canada:

• Website: priv.gc.ca
• Telephone: 1-800-282-1376