Status: Draft for review — not effective.
This Privacy Policy explains how Volaire Travel & Logistics LLC handles personal information through volairetravel.com and in connection with inquiries and services. Volaire is responsible for the processing described in this policy. Contact us at contact@volairetravel.com or telephone +1 305-847-1510.
Information we receive
Contact and inquiry information: Your name, business, email address, telephone number, itinerary or shipment requirements, requested dates, preferences, correspondence, and any documents you choose to provide.
Booking and traveler information: Information needed for the requested arrangement, such as traveler names, dates of birth, nationality, passport or identification details, passenger lists, emergency contacts, and service preferences. This website has no dedicated identity-document collection workflow. Any separate method must be confirmed before requesting sensitive documents. Do not include unnecessary identity, health, financial, or confidential shipment information in a general inquiry.
Transaction information: Quotes, contracts, invoices, billing details, payment status, refunds, and associated transaction references. Payment processing is handled as follows: Online card payments and electronic booking acceptance are currently disabled. The website stores owner-created quote information but does not collect payment-card numbers. No Stripe or Square checkout SDK is loaded and no active payment processor is configured. Any future payment integration will require an updated notice before use..
Technical information: The technical information collected by the website and its providers, including any IP addresses, browser or device information, logs, cookie identifiers, and usage information, is described here: The application receives submitted form data and uses a SHA-256 hash of the connection IP address for temporary rate limiting. It stores short-lived form-session identifiers and hashed submission tokens. Hosting and authentication providers receive network requests and may process operational logs and sign-in data. The application code contains no analytics tags, advertising pixels, session replay, Brevo browser tracker or embedded social-media widgets. Google Fonts styles and font files load from Google servers, which receive the associated network request. This source review does not establish the full inventory of cookies or logs generated by the hosting platform.. Our Cookie Notice provides the associated technology details and choices.
We receive information from you, an authorized organizer or representative, relevant travel or logistics providers, and the service providers described below. If another person makes an arrangement for you, we may receive your details from that person and use them for the purposes described in this policy.
How we use information
We use relevant information to respond to inquiries, prepare and administer arrangements, coordinate with providers, communicate service updates, process payments and refunds, maintain records, protect against fraud and misuse, resolve disputes, and meet legal requirements. Optional marketing is handled according to your choices and applicable law.
Accessibility, dietary, or other information that reveals health or similarly sensitive details is used only as necessary to handle your request and where permitted by law. We request a separate consent where required. Provide only the detail needed to arrange assistance, rather than a complete medical history.
Who receives information
Service providers for your arrangement: Airlines, aircraft operators, accommodation providers included in a package, yacht operators, chauffeur companies, handling agents, freight or customs providers, and other suppliers receive information necessary to quote, deliver, or support the requested service. Some act as independent controllers under their own privacy notices.
Business and technology providers: Providers supporting website hosting, inquiry management, communications, document storage, payment processing, security, and any enabled analytics process information for the functions they perform. Our current tools and relevant privacy links are: ChatGPT Sites/OpenAI hosts the site and provides owner sign-in; the configured runtime uses Cloudflare Workers, D1 database storage and R2 object storage for inquiry attachments. Brevo receives marketing contact email addresses, list membership and suppression status, and processes departmental inquiry notifications and signup alerts. Google Fonts supplies the site fonts. WhatsApp is an external link that is contacted only when you follow it. Provider notices: https://openai.com/policies/privacy-policy/ ; https://www.cloudflare.com/privacypolicy/ ; https://www.brevo.com/legal/privacypolicy/ ; https://policies.google.com/privacy ; https://www.whatsapp.com/legal/privacy-policy ..
Other permitted recipients: We may provide information to legal or professional advisers, authorities where legally required, parties necessary to investigate fraud or enforce rights, and parties to a genuine business reorganization subject to applicable safeguards. We do not make passenger or shipment information public merely because an inquiry is submitted.
Sales sharing and targeted advertising: No advertising, targeted-advertising or data-sale integration is implemented in the reviewed website code. Google Fonts and hosting services receive requests needed to supply their services. Business-wide data-sale, sharing and offline handling practices still require owner confirmation before this draft can become effective; this code review does not establish a company-wide promise..
Cookies and browser choices
Our Cookie Notice describes technologies used on the website, their providers, purposes, duration, and available controls. The website’s response to browser Do Not Track signals is: The preference controls treat an enabled Global Privacy Control signal or a Do Not Track value of “1” as a request not to use optional popup-memory storage. No analytics or advertising code is enabled by accepting preferences. These controls do not manage cookies set by the hosting/sign-in platform or independent sites. Where applicable law requires us to honor a recognized opt-out preference signal, such as Global Privacy Control, we will give effect to it for the processing covered by that law. Browser signals may not control processing by independent services you visit separately.
Retention and security
We retain information for the time needed to handle your inquiry or arrangement, meet accounting and legal requirements, resolve disputes, and protect legitimate legal rights. Our retention periods or the criteria determining them are: Form sessions expire after 30 minutes. Expired session and rate-limit database rows become eligible for cleanup after a further 24 hours, with cleanup triggered by subsequent form-session requests; this is not a scheduled deletion guarantee. Rate-limit windows are 15 minutes or one hour. The current application has no automatic deletion schedule for inquiries, attachments, quotes, consent histories or subscriber suppression records; these remain until deleted through an authorized operational process. A business retention schedule and provider-log retention must be confirmed before this policy becomes effective. Optional browser preferences expire as described in the Cookie Notice.. We limit retention of identity and sensitive documents to what is needed for the relevant purpose and applicable obligations.
Implemented application controls include server-side API credentials, owner authorization for inquiry records and attachments, same-origin submission checks, hashed form and unsubscribe tokens, rate limits, and attachment size/type checks. Attachments are not malware-scanned by this application. No website or transmission method can be guaranteed completely secure. Please do not send passwords, full card details, or unnecessary sensitive documents through an ordinary email or general contact form. Ask us for the appropriate submission method.
International arrangements
Volaire is based in the United States. An international itinerary or shipment can require information to be processed in the United States and in the countries where the relevant service providers operate. Those countries may have different data-protection laws. Where applicable law requires a transfer safeguard, we will use an appropriate lawful mechanism and provide information about it on request. Booking a trip is not treated as blanket consent to every international transfer.
Your choices and requests
You can ask us to review, correct, or update information you provided, or request deletion, by emailing contact@volairetravel.com with the subject “Privacy Request.” Depending on the law that applies, you may also have rights of access, portability, restriction, objection, withdrawal of consent, or opting out of sale, sharing, targeted advertising, or certain profiling. We will respond within the applicable deadline, explain any lawful exception, and not unlawfully discriminate against you for exercising a right.
We may need proportionate information to verify identity or a representative’s authority. We will not request unnecessary sensitive documents for verification. Where the law provides an appeal, you may email the same address with “Privacy Appeal.” You may also complain to the relevant data-protection authority or regulator.
You may unsubscribe from marketing using the instructions in the message or by contacting us. Service messages concerning an active arrangement may continue when necessary. Providing information is generally voluntary, but we may be unable to arrange a requested service without essential traveler, payment, or shipment details.
Children and other people’s information
The website is intended for adults arranging services. We do not seek information directly from children under 13 through the website. We may receive a child’s traveler information from a parent, guardian, or authorized organizer when necessary for a family or group arrangement and permitted by law. Contact us if you believe a child has submitted information directly without appropriate authorization.
Links messaging and policy changes
Linked services and messaging platforms, including WhatsApp if you choose to use it, have their own information practices. Review their privacy notices before providing information. We will update the effective date when this policy changes and provide additional notice or obtain consent when the law requires it for a material change.
## Newsletter choices
A separate, unchecked opt-in is required to join the launch mailing list. Inquiries never automatically subscribe a customer. We store the consent text version, time, email, optional first name and signup source. Brevo List 3 receives opted-in contacts. Local and Brevo unsubscribe choices are preserved; the authenticated Brevo webhook updates local suppression when reachable. You may unsubscribe through a marketing email, your signup management link, or by contacting us. Service inquiries and marketing permission remain separate.
## Business mailing address
Volaire Travel & Logistics LLC 12418 SW 266th Ln, Homestead, FL 33032