Last updated 19 October 2026

Privacy and cookie policy

This policy explains how Flyxor (“we”, “us”) collects and uses personal data when you use Flyxor, our marketplace for empty leg flights, private aircraft, aircraft parts and aviation services. It is written for visitors and sellers in the United States, the European Union, the United Kingdom and the United Arab Emirates.

1. Who we are

Flyxor is the data controller for personal data processed through Flyxor. For any privacy question or request, email [email protected].

2. What we collect

Account details you give us: your name, email address, phone number, password (stored only as a secure hash), company name if you add one, and gender if you choose to add it.

Seller profile: whether you sell as an individual or a company, your public name, city, country, business phone and WhatsApp number, website, description and logo or photo.

Verification documents: a trade licence, company registration, operator certificate (AOC), broker ID, or for individuals a national ID or passport. Only our team can see these.

Listings: the details, prices, photos and photo descriptions you publish.

Messages: what you write to our team, and JPG images if our team has allowed you to send them.

Technical data: your IP address, browser type, sign-in times and failed sign-in attempts. We use these to keep accounts secure and to stop abuse.

Analytics: only if you accept analytics cookies, we use Google Analytics to understand how pages are used, with IP anonymisation turned on.

3. How we use it and why

• To run your account and publish your listings, including showing your seller profile and giving your contact number to buyers who ask for it. Legal basis: performing our contract with you.
• To check sellers and listings before they go live, review documents and award badges. Legal basis: our legitimate interest in a safe, trustworthy marketplace.
• To keep the site secure: blocking repeated wrong passwords, preventing fraud and spam. Legal basis: legitimate interests and, where it applies, legal obligations.
• To answer your messages and send service emails about your account. Legal basis: contract.
• Analytics, only with your consent. You can withdraw consent at any time. Legal basis: consent.
• To meet legal duties, for example answering lawful requests from authorities. Legal basis: legal obligation.

We do not sell your personal data, and we do not use it for targeted advertising.

4. Who we share it with

• Everyone who visits the site sees your public seller profile and live listings. Your phone and WhatsApp number are shown when a visitor clicks to see them.
• Service providers who host the website and database, send email and, with your consent, provide analytics. They may only use the data to provide their service to us.
• Authorities or advisers when the law requires it, or to protect our users or our rights.
• A buyer of our business, if the company is sold or merged. This policy would still apply.

5. International transfers

Our servers and service providers may be located outside your country. When personal data from the EU, UK or UAE is transferred to a country without an adequacy decision, we use safeguards such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum.

6. How long we keep it

• Account, profile, listings and messages: while your account is open. When it is deleted, they are deleted too.
• Verification documents: while your seller profile is active, then deleted with the account.
• Sign-in and security records: up to 90 days.
• Records we must keep by law (for example accounting) are kept for as long as the law requires.

7. Security

We use encrypted connections (HTTPS), hashed passwords, private storage for documents, access limited to our team, sign-in lockouts and a log of every staff action. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

8. Your rights (EU, UK and UAE)

Depending on where you live, you can ask us to:

• give you a copy of your personal data;
• correct data that is wrong;
• delete your data;
• limit or object to how we use it;
• send your data to you or another company in a common format;
• withdraw consent, for example for analytics cookies, at any time.

Email [email protected]. We answer within one month, or sooner where the law requires. You can also complain to your data protection authority, for example your EU national authority, the UK Information Commissioner’s Office (ICO) or, in the UAE, the UAE Data Office (or the DIFC or ADGM Commissioner if you are in those free zones).

9. US state privacy rights

If you live in California or another US state with a consumer privacy law (such as Virginia, Colorado, Connecticut, Texas or Oregon), you have the right to know what personal data we collect and how we use it, to get a copy, to correct it and to delete it. We do not sell personal data or share it for cross-context behavioural advertising, so there is nothing to opt out of. We will not treat you differently for using your rights. To make a request, email [email protected]. We may need to confirm your identity first, and you can use an authorised agent.

10. Cookies

We only use the cookies below. Analytics cookies are set only after you click “Accept all”.

You can change your choice at any time: Cookie settings. You can also delete cookies in your browser settings.

11. Children

Flyxor is for adults. We do not knowingly collect data from anyone under 18. If you think a child has given us personal data, email [email protected] and we will delete it.

12. Changes and contact

We may update this policy. We will change the date at the top and, for important changes, tell sellers by email or in their account. Questions? Email [email protected].

← Back to Flyxor