Privacy Policy

Effective Date: October 1, 2025

KiliFlying Air ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website kiliflying-air.com (the "Site"), use our services, or otherwise interact with us. Our services include Medical Evacuation, KiliQuick (Kilimanjaro Helicopter Descent), Scenic Flights, and Chartered Flights (collectively, the "Services").

By using the Site or our Services, you consent to the practices described in this Privacy Policy. If you do not agree with these terms, please do not use the Site or our Services.

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked with a particular individual ("Personal Information"). The types of Personal Information we may collect include:

• Contact Information: Name, email address, phone number, mailing address, and emergency contact details.
• Booking and Service Information: Flight preferences, dates, passenger details (including age and special requirements), payment information (processed via secure third-party providers), and travel itineraries.
• Health and Medical Information: For Medical Evacuation services, we may collect sensitive health data (e.g., medical history, allergies, or conditions) to ensure safe and appropriate care.
• Usage Data: IP address, browser type, device information, pages visited, time spent on the Site, and referral sources.
• Communication Data: Information from emails, inquiries, or support interactions.

We collect this information directly from you (e.g., via booking forms or registrations) or automatically (e.g., through cookies or analytics tools).

2. How We Collect Information

• Directly from You: When you submit forms on the Site (e.g., booking requests, contact forms), register for newsletters, or communicate with us via email or phone.
• Automatically: Through cookies, web beacons, and similar technologies on the Site. For example, we use Google Analytics to track Site usage (see Section 9 for more on cookies).
• From Third Parties: From payment processors (e.g., Stripe or PayPal) for transactions, or partners like insurance providers for Medical Evacuation coordination.

3. How We Use Your Information

We use your Personal Information for the following purposes:

• To provide and manage the Services, including processing bookings, arranging flights, and coordinating medical evacuations.
• To communicate with you about your bookings, updates, or Service-related matters (e.g., flight confirmations or safety briefings).
• To improve our Site and Services, such as analyzing usage patterns or personalizing recommendations.
• To send marketing communications (e.g., newsletters or promotions for Scenic Flights), but only with your consent or as permitted by law. You can opt out at any time.
• To comply with legal obligations, prevent fraud, and ensure safety (e.g., verifying passenger eligibility for KiliQuick descents).
• For health-related services, to share necessary medical data with authorized healthcare providers during emergencies.

4. How We Share Your Information

We do not sell your Personal Information. We may share it in these limited circumstances:

• Service Providers: With trusted third parties who assist us, such as cloud hosting (e.g., AWS), payment processors, email services (e.g., Mailchimp), or aviation partners for flight operations.
• Medical Partners: For Medical Evacuation, we share health data only with licensed medical teams or hospitals involved in your care, with your explicit consent.
• Legal Requirements: If required by law, such as in response to a court order, or to protect our rights, safety, or property.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

All third parties are contractually obligated to protect your data and use it only for the purposes we specify.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your Personal Information, including encryption for sensitive data (e.g., health information) and secure servers. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. In the event of a data breach, we will notify affected individuals as required by applicable law.

6. Data Retention

We retain your Personal Information only as long as necessary for the purposes outlined above, or as required by law (e.g., 7 years for financial records). For inactive accounts or completed bookings, we securely delete or anonymize data after 2 years, unless you request otherwise.

7. Your Rights and Choices

Depending on your location, you may have rights under laws like the GDPR (EU) or CCPA (California). These include:

• Access: Request a copy of your Personal Information.
• Correction: Update inaccurate data.
• Deletion: Request removal (subject to legal exceptions, e.g., ongoing bookings).
• Opt-Out: Unsubscribe from marketing emails or object to processing.
• Portability: Receive your data in a structured format.

To exercise these rights, contact us at privacy@kiliflying-air.com. We will respond within 30 days. For health data, additional verification may be required to ensure we release it to the correct individual.

You can also manage cookie preferences via your browser settings.

8. International Data Transfers

KiliFlying Air operates primarily in Tanzania, but our Site and Services may be accessed globally. If you are outside Tanzania, your information may be transferred to and processed in Tanzania or other countries. We ensure appropriate safeguards (e.g., standard contractual clauses) for such transfers.

9. Cookies and Tracking Technologies

We use cookies to enhance your experience (e.g., remembering preferences) and analyze Site performance. Essential cookies are necessary for Site functionality; others (e.g., analytics) are optional.

You can disable cookies in your browser, but this may limit Site features. For more details, see our Cookie Policy.

10. Children's Privacy

Our Services are not directed to children under 16, and we do not knowingly collect their Personal Information. If we learn we have collected such data, we will delete it promptly. Parents/guardians can contact us to review or remove a child's data.

11. Changes to This Privacy Policy

We may update this Policy periodically to reflect changes in our practices or legal requirements. We will post the revised version on the Site with an updated Effective Date. Significant changes will be notified via email or a Site banner. Continued use of the Site or Services after updates constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

KiliFlying Air
Attn: Data Protection Officer
NSSF Commercial Complex 4th Floor, Kilimanjaro, Tanzania
Email: privacy@kiliflying-air.com
Phone: +255 744 303 141
Hours: 24/7

This Policy is governed by the laws of the United Republic of Tanzania. For EU residents, you may also contact your local data protection authority.

Thank you for trusting KiliFlying Air with your information. Safe travels!