On this page
- Who We Are (Data Controller)
- What Data We Collect
- How We Use Your Data
- Legal Bases for Processing
- Cookies
- Google Analytics 4
- Travelpayouts Affiliate Network
- Data Sharing and Third Parties
- International Data Transfers
- Data Retention
- Your Rights Under GDPR
- Right to Lodge a Complaint
- Children’s Privacy
- Changes to This Policy
- Contact Us
1. Who We Are (Data Controller)
Data Controller: MyFlightOffers, Dublin,
Ireland.
Website: myflightoffers.com
Contact: [email protected]
MyFlightOffers is subject to the EU GDPR (EU Regulation 2016/679) as a data controller established in Ireland, an EU member state. The supervisory authority for data protection in Ireland is the Data Protection Commission (DPC).
2. What Data We Collect
A) Data you provide directly
- Contact enquiries: name, email address, and message content when you contact us via the contact page
- Email newsletter (if applicable): email address only, collected with your explicit consent
B) Data collected automatically when you visit
- IP address (anonymised by Google Analytics 4 before storage)
- Browser type and version
- Operating system
- Pages visited, time on page, and referral source
- Device type (mobile, desktop, or tablet)
- Country of access (not precise location)
C) Data collected via third-party tools
- Google Analytics 4: anonymised usage statistics to understand how visitors use the site
- Travelpayouts: affiliate click and conversion tracking when you click a flight link and book on a partner site
- Cookies: as described in Section 5 below
We do not collect payment card data. We do not process flight bookings. No financial transactions occur on this site. We do not collect passport numbers, travel document data, or any sensitive personal data as defined under GDPR Article 9.
3. How We Use Your Data
- Analytics: to understand how users find and use the site, identify popular content, and improve navigation. Legal basis: legitimate interests.
- Contact enquiries: to read and respond to your message. Legal basis: performance of a contract / legitimate interests.
- Affiliate tracking: to measure which links lead to bookings and receive commission from OTA partners via Travelpayouts cookies. Legal basis: legitimate interests.
- Newsletter (if applicable): to send fare alerts or travel tips by email. Legal basis: consent. Withdraw consent at any time by clicking the unsubscribe link in any email.
4. Legal Bases for Processing (GDPR Article 6)
| Processing Activity | Legal Basis | GDPR Article 6 Reference |
|---|---|---|
| Analytics data (GA4) | Legitimate interests — improving website functionality | Article 6(1)(f) |
| Contact form data | Necessary for responding to your enquiry | Article 6(1)(b) / 6(1)(f) |
| Affiliate tracking (Travelpayouts cookies) | Legitimate interests | Article 6(1)(f) |
| Newsletter (if applicable) | Consent | Article 6(1)(a) |
5. Cookies
What cookies are
Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your browser and, depending on the type of cookie, remember preferences or track behaviour across sessions.
Cookies we use
| Type | Name / Source | Purpose | Duration |
|---|---|---|---|
| Strictly necessary | Session cookies | Basic site functionality and security | Session |
| Analytics | _ga, _gid, _ga_[ID] (Google Analytics 4) |
Measure how users interact with the site; anonymous usage statistics | Up to 2 years (_ga); 24 hours (_gid) |
| Affiliate / tracking | Travelpayouts (marker 721514) | Track affiliate clicks and attribute bookings on partner OTA/airline sites | 30 days |
How to manage cookies
- Block or delete cookies through your browser settings.
- To opt out of Google Analytics tracking, install the Google Analytics opt-out browser add-on.
- Disabling analytics cookies does not affect your ability to use the site or search for flights.
- Disabling Travelpayouts cookies means we cannot attribute bookings made via our links. This does not affect the fare you pay or your ability to book.
6. Google Analytics 4
- We use Google Analytics 4 to analyse site traffic and user behaviour in aggregate.
- GA4 anonymises IP addresses by default before storage. We do not receive full IP addresses.
- Data is processed by Google LLC on our behalf. Google is certified under the EU–US Data Privacy Framework (adopted July 2023), providing an adequate level of protection under GDPR Article 45.
- Google’s privacy policy: policies.google.com/privacy
- To opt out of GA4 tracking across all websites: install the Google Analytics opt-out browser add-on.
7. Travelpayouts Affiliate Network
MyFlightOffers participates in Travelpayouts, an affiliate network for travel products. When you click a flight search link on this site, Travelpayouts cookies may be set to track whether a booking is subsequently made on a partner airline or OTA website.
If a booking is made, Travelpayouts reports the conversion to us and we receive a commission. We do not receive your booking details, passenger information, or payment data from this process.
8. Data Sharing and Third Parties
- We do not sell personal data to any third party.
- We share anonymised, aggregated analytics data only with Google (via GA4) and Travelpayouts (via affiliate cookies) as described above.
- We will disclose personal data to law enforcement or regulatory authorities only where required by applicable Irish or EU law.
9. International Data Transfers
- Google LLC (GA4): processes data in the USA. Google is certified under the EU–US Data Privacy Framework (adopted July 2023), providing an adequate level of protection under GDPR Article 45.
- Travelpayouts: may process data outside the EEA. Travelpayouts uses standard contractual clauses where no adequacy decision is in place.
- We do not otherwise transfer personal data outside the EEA.
10. Data Retention
| Data Type | Retention Period |
|---|---|
| Analytics data (GA4) | Maximum 14 months for user-level data (GA4 default); aggregated reports may be retained longer |
| Contact enquiry data | Up to 2 years, then deleted |
| Affiliate cookie data (Travelpayouts) | 30 days (Travelpayouts cookie lifetime) |
| Newsletter subscribers (if applicable) | Until unsubscribed, plus 30 days for deletion processing |
11. Your Rights Under GDPR
Under GDPR Articles 15–22, you have the following rights:
- Right of access (Article 15): request a copy of any personal data we hold about you
- Right to rectification (Article 16): request correction of inaccurate personal data
- Right to erasure (Article 17): request deletion of your personal data where no legitimate grounds for continued processing exist
- Right to restrict processing (Article 18): request that we limit how we process your data in certain circumstances
- Right to data portability (Article 20): receive your data in a structured, machine-readable format
- Right to object (Article 21): object to processing based on legitimate interests, including direct marketing
- Rights related to automated decision-making (Article 22): we do not carry out automated decision-making or profiling that produces legal or similarly significant effects
Email [email protected] with the subject line “Data Subject Request”. We will respond within 30 days as required by GDPR. We may need to verify your identity before processing a request.
12. Right to Lodge a Complaint
If you believe your data rights under GDPR have been infringed, you have the right to lodge a complaint with the Data Protection Commission (DPC) — the supervisory authority in Ireland:
Website:
dataprotection.ie
Email: [email protected]
Post: Data Protection Commission, 21 Fitzwilliam Square South,
Dublin 2, D02 RD28, Ireland
13. Children’s Privacy
- This site is not directed at children under 16 years of age.
- We do not knowingly collect personal data from children under 16.
- If you believe a child has submitted personal data via this site, contact us at [email protected] for prompt deletion.
14. Changes to This Policy
We may update this privacy policy from time to time. The date at the top of this page shows when it was last revised. Continued use of the site after a policy change constitutes acceptance of the updated policy. For material changes, we will make the update clearly visible.
15. Contact Us
For privacy-related queries, email [email protected] with the subject line “Privacy Enquiry”. We aim to respond within 5 working days.
We collect minimal data, use it only to run and improve the site, and do not sell it. Legal jurisdiction: Ireland (EU). Your data rights are those under full EU GDPR. The supervisory authority is the Data Protection Commission (DPC), Ireland — not the ICO.
Last Updated: May 2026