LEGAL

Privacy Policy

Last updated: June 2026

Who we are

AviaPicks ("we", "our", "us") provides flight search and on-site booking at aviapicks.com using flight inventory and ticketing infrastructure supplied by Duffel. Other travel products may be provided by separately identified partners.

For flight bookings, we collect the information needed to request an offer and create your order with Duffel and the operating airline.

What data we collect

Data you give us:

  • Passenger and contact details — including name, date of birth, email, phone number and, when required, passport information — used to create and service a flight order.
  • Search queries — origin, destination, dates, passenger count and cabin — used to request relevant flight offers.

Data collected automatically:

  • Anonymous usage analytics — pages visited, clicks, device type, browser, approximate location (country level). This helps us improve the product.
  • Booking identifiers and technical request data — used to re-price an offer, prevent payment/order mismatches, create an order and support the booking.

How we use your data

  • To search for flight offers, show current prices and complete bookings you request.
  • To send passenger information to Duffel and the relevant airline for order creation, ticketing, check-in and servicing.
  • To improve site performance and user experience through anonymised analytics.
  • To prevent fraud, reconcile payments and orders, provide support and meet legal obligations.

We never sell your personal data to third parties.

Cookies

We use cookies for the following purposes:

  • Essential cookies — language preference, dark/light mode preference. Required for the site to function.
  • Flight booking on AviaPicks does not use an Aviasales or Travelpayouts affiliate-tracking cookie.
  • Analytics cookies — anonymised data about site usage. You can opt out via your browser settings.

See our Cookie Policy for full details and opt-out instructions.

Your rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Withdraw consent for email communications at any time.
  • Lodge a complaint with your national data protection authority.

To exercise any of these rights, email us at privacy@aviapicks.com.

Data retention

The current sandbox implementation does not persist passenger or card data in an AviaPicks database. Booking data sent to Duffel is retained under Duffel's and the airline's policies. Production retention periods will be documented before live sales begin.

Picksy assistant data

Guest Picksy messages are linked to a random secure browser cookie and retained by Aviapicks for up to 24 hours so the conversation survives refresh, then expire automatically. Signed-in conversations are linked to your account. You can delete conversation history from Picksy. When Gemini mode is enabled, necessary message text is sent to Google to generate the response; passport details, payment details, private eSIM QR codes, and raw supplier payloads must never be submitted. Audit records exclude prompt text and contain only opaque identity hashes, request metadata, tool outcomes, latency, model, and token counts.

Third-party services

AviaPicks works with the following third-party services whose own privacy policies apply when you interact with them:

  • Duffel — flight inventory, order creation, ticketing and booking servicing infrastructure
  • eSIM Access — eSIM package catalogue and future fulfilment infrastructure

Changes to this policy

We may update this policy from time to time. Material changes will be noted at the top of this page with the updated date. Continued use of AviaPicks after changes are posted constitutes acceptance.

Contact

Questions about this policy? Email privacy@aviapicks.com