At Yumie, we take your privacy seriously. We understand that when you choose to use our services, you place your trust in us, and we value that trust. We are committed to protecting the personal data you share with us and to handling that data in a manner that is fair, transparent, and aligned with your best interests.

This Privacy & Cookie Notice explains how we collect, use, disclose, and otherwise process your personal data. It also explains the rights you may have in relation to your personal data and how you can contact us. This Notice also includes our Cookie Notice, which explains how Yumie uses cookies and similar tracking technologies.

Yumie provides online travel booking-related services through its own websites and mobile applications, as well as through other online channels, such as partner websites and social media platforms. This Notice applies across all such platforms and also applies to personal data collected through any channel linked to those platforms, including when you contact our customer support team by email or through other support channels.

We may update this Privacy & Cookie Notice from time to time. We encourage you to review this page periodically so that you remain informed about our current privacy practices.

Terms Used in This Notice

“Trip” means the various travel products that may be booked, obtained, purchased, paid for, rented, bundled, reserved, or consumed through a Travel Provider.

“Travel Provider” means a provider of accommodation, hourly stay services, attractions and activities, transportation, travel agency services, travel insurance, or any related product or service offered for booking on the Platform. This may include hotels, motels, apartments, B&Bs, property owners, theme parks, museums, sightseeing operators, car rental companies, cruise operators, train services, airport transfer providers, tour bus operators, and other travel-related suppliers.

“Travel Services” means the online purchase, ordering, payment support, payment processing, or booking services that Yumie provides or supports on the Platform in relation to products and services made available by Travel Providers from time to time.

“Travel Booking” means a booking, purchase, payment, or reservation relating to travel.

What Personal Data Does Yumie Collect?

To help you book the right Trip and use our services effectively, we may ask you to provide certain information when you use our services. This generally includes standard information such as your contact details, preferred communication methods, and payment information. You may also choose to provide additional information relevant to your Trip, such as your expected arrival time.

We also collect information about the devices you use to access our services, including computers, mobile phones, tablets, or other devices. This may include your IP address, browser type, language settings, operating system, device identifiers, and similar technical information.

In some cases, we may also receive information about you from third parties or collect certain information automatically through your use of our websites, applications, emails, advertisements, or other online services.

Why Does Yumie Collect and Use Your Personal Data?

We use your personal data primarily to provide, operate, maintain, and improve our online Travel Services and to ensure that you receive a smooth, secure, and efficient booking experience.

We may also use your personal data to communicate with you, provide support, send you offers and promotions, improve our products and services, detect and prevent fraud, comply with legal obligations, and for other purposes described in more detail below.

How We Protect and Retain Personal Data

We implement reasonable technical, administrative, and physical safeguards designed to prevent unauthorized access to, misuse of, alteration of, disclosure of, or loss of personal data.

We use appropriate business systems, security controls, and access restrictions to protect the personal data you provide to us. Access to personal data stored in our systems is limited to authorized personnel who need such access for legitimate business purposes.

We retain your personal data for as long as we reasonably consider necessary to provide our services to you, maintain your Yumie account, comply with applicable law, resolve disputes, detect or prevent fraud or unlawful activity, enforce our agreements, or otherwise operate our business.

How Yumie Shares Personal Data with Third Parties

Yumie works with a range of third parties in order to provide its services. In some circumstances, we share personal data with those third parties. The primary reason for doing so is to enable and manage your Travel Booking with the relevant Travel Provider.

We may also share personal data with service providers, payment partners, advertising partners, members of the FLYBOOKING Inc. group, and public authorities where required by law or where necessary to protect our rights, enforce our terms, or prevent fraud and abuse.

Further details about our third-party data sharing practices are set out below.

How You Can Manage the Personal Data You Provide to Yumie

You may have the right to access, correct, update, delete, restrict, object to, or request portability of your personal data, subject to applicable law. More information about those rights and how to exercise them is set out below.

How We Use Personal Data

We may use the personal data we collect for the following purposes:

Travel Bookings. We use your personal data to create, process, confirm, manage, and administer your Travel Booking. This includes sending booking confirmations, modification confirmations, reminders, and other booking-related communications. In some cases, this may also include processing your personal data to support online check-in with a Travel Provider or to handle matters such as damage deposits.

Customer Support. When you contact customer support, we may use relevant information, such as your booking details and account information, to help resolve your issue and provide assistance.

Account Administration. If you create a Yumie account through our website or mobile application, we use the personal data you provide to manage that account and to enable account-related features, including managing bookings, accessing offers, saving preferences, and customizing your experience.

Online Communities and Forums. We may allow account holders to engage with each other through online groups, forums, or travel communities. Where these features are made available, personal data may be used to enable those interactions.

Marketing Activities. We may use your personal data for marketing purposes, including sending newsletters, promotional messages, special offers, discounts, and other information relating to travel-related products and services. You may unsubscribe from marketing emails at any time by using the unsubscribe link included in those communications.

Based on the information you provide to us, we may also personalize the content, offers, and recommendations shown to you on Yumie websites, applications, co-branded websites, social media platforms, or third-party websites and apps. Some offers may be bookable directly through Yumie or a co-branded site, and others may relate to third-party products or services we believe may be relevant to you.

If you participate in promotions, sweepstakes, contests, referral programs, or similar campaigns, we may use the personal data relevant to administering those campaigns.

Communications. We may contact you by email, chatbot, mail, phone, SMS, push notification, or other channels based on the contact information you have provided. We also process communications you send to us. These communications may be necessary for a variety of reasons, including:

• responding to and handling requests made by you or by the Travel Provider connected to your booking;
• facilitating communications between customers and Travel Providers regarding bookings, requests, suggestions, or reviews;
• reminding you to complete a booking flow that you started but did not finish;
• sending surveys or inviting you to review Yumie or a Travel Provider after you use our services;
• sending practical travel information, booking support information, or assistance information before, during, or after your Trip;
• sending account, security, or administrative messages, even where you do not have an upcoming Travel Booking; and
• sending notices or warnings in connection with suspected misconduct or abuse.

Market Research. From time to time, we may invite you to participate in market research. Any invitation will explain what personal data we collect for that research and how we use it.

Service Improvement, Analytics, and Personalization. We use personal data to analyze and improve our products, services, and user experience. This includes testing, troubleshooting, business analytics, personalization, product development, and optimization of our websites and apps. Where appropriate, we seek to use de-identified or aggregated information for these purposes.

Location-Based Pricing. When you search on our website or app, including when looking for accommodation, rental cars, or flights, we may process your IP address to determine whether you are located in the European Economic Area or elsewhere, so that we can present pricing or product information appropriate to your region.

Reviews and Destination Information. During or after your Trip, we may invite you to submit a review. We may also invite your travel companions or the actual travelers for whom you booked to provide a review. Reviews may relate to the Travel Provider, destination, or the quality of the travel service you experienced. If you submit a review, you agree that we may display it on the relevant Travel Provider page on our website, within our mobile apps, on our social media channels, on the Travel Provider’s online platforms, or on partner websites, so that other travelers can learn from your experience.

Call Monitoring and Recording. If you call our customer support team, we may use automatic phone number detection to identify the booking associated with your number, which can help save time for you and our support agents. Our support agents may still need to verify your identity for security purposes. Calls may be monitored or recorded for quality assurance, staff training, complaint handling, fraud detection, and legal purposes. Not all calls are recorded. Where recordings are made, they are generally deleted after a period of time unless we reasonably need to retain them for fraud investigations or legal matters.

Security, Fraud Prevention, and Risk Management. To help maintain a safe and trustworthy environment for you and other travelers, Yumie works with business partners and Travel Providers to analyze and use certain personal data to detect, prevent, investigate, and address fraud, abuse, unauthorized activity, and security risks. We may also use personal data for identity verification, booking validation, security incident response, or where a safety concern has been reported. In some cases, we may temporarily suspend or cancel a booking while we complete a risk review.

Legal and Compliance Purposes. In certain situations, we may need to use your personal data to respond to legal requests, resolve disputes, comply with court orders, cooperate with law enforcement, meet regulatory obligations, or enforce our Terms or other legal rights. If we rely on automated processing that produces legal effects or similarly significant effects for you, we will implement safeguards required by applicable law, including, where required, the right to request human review.

You are free to choose whether to provide personal data to Yumie. However, where certain personal data is necessary for us to provide specific services, process a booking, or respond to a request, we may not be able to provide those services if you do not supply the required information.

Legal Bases for Processing

Where applicable under relevant law, we process personal data on one or more of the following legal bases:

Performance of a contract. We process your personal data where necessary to enter into, perform, and manage your Travel Booking and to provide related customer support.

Legitimate interests. We may process your personal data where necessary for our legitimate interests, or those of a third party, including to provide and improve our services, personalize the user experience, carry out analytics, send certain service-related communications, and detect and prevent fraud or other unlawful activity, provided that those interests are not overridden by your rights and interests.

Legal obligations. We may process your personal data where necessary to comply with applicable law, regulation, court order, lawful request, or other legal obligation.

Consent. Where required by applicable law, we will obtain your consent before processing your personal data for certain purposes, such as email marketing or other consent-based activities. You may withdraw your consent at any time, subject to applicable law.

If you would like to object to certain processing activities based on legitimate interests and you cannot manage that directly through your account settings, please contact us at service.Yumie@flybooking.io.

How We Share Personal Data with Third Parties

In certain circumstances, we share your personal data with third parties, including the following categories:

• Travel Providers. To complete and manage your booking, we must share relevant booking information with the Travel Provider. Depending on the Trip and Travel Provider, this may include contact information, payment information, preferences you indicated during booking, and related booking details. In some cases, we may also share historical information relevant to your relationship with that Travel Provider, such as whether you have booked with them before, how many completed bookings you have made through Yumie, confirmation that no misconduct has been reported, your prior cancellation rate, or whether you submitted reviews for past bookings. If you make a booking-related request, we may also contact the Travel Provider to help address it.
• If you do not pay through Yumie during the booking process, we may share your payment card details with the relevant Travel Provider so that they can collect payment directly, if you have provided that information to us. In the event of a claim or dispute relating to a Travel Booking, we may also share information reasonably necessary for dispute handling, including your contact details, booking confirmation details, or evidence relating to submission or cancellation of the booking.
• Travel Providers may also process your personal data independently of Yumie. They may ask you directly for additional personal data in order to provide services or comply with local law. We encourage you to review the Travel Provider’s privacy notice where available.
• Connectivity Partners. Some Travel Providers ask us to share your personal data with their contracted connectivity or reservation management partners so that your booking can be completed and administered on the provider’s behalf.
• Yumie Local Offices and Affiliates. To deliver our services, we may share personal data with companies within the Yumie or FLYBOOKING Inc. group, including for customer support and internal operations.
• Third-Party Service Providers. We use external service providers to support our business, including for customer support, market research, fraud detection and prevention, payment processing, refund processing, chargeback handling, settlement, analytics, hosting, technical infrastructure, and other operational needs.
• Payment Service Providers and Financial Institutions. If you request a refund or if a payment dispute arises, we may share relevant order details, booking confirmations, or IP address information with payment providers or financial institutions as needed to process the request or investigate fraud.
• Advertising and Marketing Partners. We may share certain personal data, including hashed email addresses, with advertising partners to support marketing campaigns, customer matching, suppression of existing customers from irrelevant campaigns, and personalized advertising.
• Advertising Partners and Search Integration Partners. We work with advertising and integrated search partners that help users compare Yumie offers with offers available through other online travel agencies. If you are referred to Yumie through such a partner and complete a booking, we may share relevant booking information with that partner.
• Public Authorities. We may disclose personal data to law enforcement agencies, courts, regulators, or other governmental authorities where required by law or where reasonably necessary to prevent, detect, or report crime, fraud, security incidents, or unlawful activity, or to protect the rights, property, or safety of Yumie, our users, our partners, or others.
• Business Partners. We work with a variety of global business partners that distribute, advertise, or support Yumie services and Travel Provider offerings. If you make a booking through a business partner’s website or application, certain information such as your contact details, payment information, and booking information may be shared with us so that we can confirm and manage the booking. Where customer support is provided by a business partner, Yumie may also share booking-related information with that partner as necessary to provide timely support. The partner may also receive information relating to your booking and your interactions on that partner’s platform for its own business purposes. If you book through a business partner, please review that partner’s privacy notice to understand how it handles your personal data.
• We may also exchange limited user-related information with business partners where strictly necessary to detect and prevent fraud.
• Partner Pricing Arrangements. We may offer certain rates identified as partner rate. Where you book an accommodation under such a rate, your booking may be fulfilled with the support of a commercial partner that is different from the Travel Provider you selected. In that case, we may need to share certain personal data with that commercial partner in order to complete the booking. If you book using a partner rate, we encourage you to review the information presented during booking and in your confirmation email.

How We Share Personal Data Within the FLYBOOKING Inc. Group

Yumie is part of the FLYBOOKING Inc. group of companies.

We may receive personal data from, or share personal data with, other companies within the FLYBOOKING Inc. group for the following purposes:

• providing services, including creating, processing, and managing bookings and handling payments;
• providing customer support;
• detecting, preventing, and investigating fraud, data leaks, and other unlawful activity;
• analyzing and improving products and services;
• providing personalized offers and sending promotional communications, where permitted by law or based on your consent where required;
• hosting, technical support, maintenance, and shared data security management; and
• complying with legal and regulatory requirements.

Where applicable, our legal basis for sharing personal data within the FLYBOOKING Inc. group is legitimate interests for the purposes described above, or compliance with legal obligations where required by law.

Companies within the FLYBOOKING Inc. group may also need to share business partner information with each other to help protect users against fraud and abuse across their online platforms.

Your Privacy Rights and Choices

Depending on applicable law, you may have rights in relation to your personal data, including the right to:

• request access to the personal data we hold about you;
• request correction or updating of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request that we restrict or block certain processing activities;
• object to certain processing activities, including processing based on legitimate interests in certain circumstances;
• request portability of personal data you have provided to us, where applicable;
• withdraw consent at any time where we rely on consent; and
• lodge a complaint with a competent data protection authority, where applicable.

We rely on you to ensure that the personal data you provide is complete, accurate, and up to date. If your personal data changes or if you believe any data we hold is inaccurate, please contact us promptly.

If you are unable to access or manage your personal data through our website or app, you may submit a request to us directly.

To exercise your rights, including rights of access or erasure, or to make a request, raise a concern, or submit a complaint regarding this Privacy & Cookie Notice, please contact us at service.yumie@flybooking.io.

If you wish to object to processing based on legitimate interests or, where applicable, public interest, please contact us at the same address to reach our Data Protection Officer. You may also contact your local data protection or supervisory authority where applicable.

Cookie Notice

When you use our online services or mobile applications, we use cookies and similar tracking technologies. In this Cookie Notice, we use the term “cookies” as a general term to refer to cookies and comparable tracking technologies unless the context requires otherwise.

We use cookies for a variety of purposes, including to operate Yumie websites and apps, analyze traffic and usage, personalize content, measure the effectiveness of communications, and support advertising and marketing activities.

The sections below explain what cookies and similar technologies are, how we use them, and what choices may be available to you.

What Are Cookies and Similar Tracking Technologies?

Browser cookies are small text files that a website stores in your browser or on your device. They can remember your preferences and settings, help websites function properly, and provide information about how you interact with online services.

Cookies may be categorized as first-party cookies or third-party cookies:

• First-party cookies are set by the domain operator itself, which in this case is Yumie.
• Third-party cookies are set by trusted partners that we allow to place cookies on our domain, such as social media partners, advertising partners, security vendors, or analytics providers.

Cookies may also be classified by duration:

• Session cookies remain on your device only until you close your browser, after which they are deleted.
• Persistent cookies remain on your device after your browser is closed and continue for a defined period unless deleted earlier. On Yumie platforms, we generally seek to use persistent cookies with limited lifespans, although in some circumstances we may extend a cookie’s lifespan for security or other necessary reasons.

Cookies may store information such as IP address, device identifiers, browser type, pages viewed, preferences, settings, and interactions with digital services.

In addition to cookies, we also use similar tracking technologies, including web beacons, scripts, tracking URLs, and software development kits (SDKs):

• Web beacons are small graphic files or code snippets that allow us or our partners to understand whether content has been viewed or interacted with. They may also be referred to as web bugs, tags, tracking pixels, pixel tags, 1x1 GIFs, or clear GIFs.
• Scripts are small code components embedded in web pages that enable functionality, security features, analytics, or advertising-related operations.
• Tracking URLs are links containing unique identifiers that help us understand the source from which you were referred to Yumie, such as a social media platform, search engine, or marketing affiliate.
• SDKs are software components embedded in mobile applications that allow app usage analysis, delivery of personalized notifications, and collection of data such as device identifiers, IP address, network information, and app activity.

In this Cookie Notice, we refer to all of the above collectively as “cookies” unless a distinction is required.

What Information Do Cookies Collect?

Cookies and similar technologies may collect information such as:

• IP address;
• device ID or other identifiers;
• pages viewed;
• browser type;
• browsing behavior;
• operating system;
• internet service provider;
• time stamps;
• whether you responded to or interacted with an advertisement;
• referring URL;
• features used or activities participated in on our website or app; and
• signals that may help us recognize whether the same user is interacting with our services across different pages or different devices.

How We Use Cookies

We generally use cookies for three broad categories of purposes: functional cookies, analytics cookies, and commercial cookies.

Functional Cookies

These cookies are necessary for our websites and apps to function and to provide you with core services.

We also use functional cookies to make our services more user-friendly and responsive to your preferences. These cookies help enable essential security, account, and usability features.

For example, functional cookies help us:

• operate our website and app correctly so you can create an account, log in, and manage your bookings;
• remember your selected currency, language, search history, and other preferences so that your experience is more efficient and personalized; and
• remember your registration details so that you do not need to re-enter login information each time you return, while keeping passwords encrypted.

Analytics Cookies

These cookies help us understand how users interact with our websites and apps so that we can improve them and enhance the services we provide.

For example, analytics cookies help us:

• understand how visitors and customers use Yumie websites and apps;
• improve our sites, apps, and the relevance and usefulness of the information we provide;
• understand which features are working well and which need improvement;
• measure the effectiveness of content, communications, and advertising;
• understand how users interact with our services after seeing online advertisements, including advertisements shown on third-party websites;
• help business partners understand whether customers use accommodation offers integrated into their own sites; and
• collect information about pages viewed, entry and exit pages, platform type, emails opened, content clicked, dates, times, clicks, mouse movements, scrolling behavior, search keywords, and text entered while using our services.

Commercial Cookies

Yumie and our trusted partners use these cookies to collect information about your use of different websites, applications, or other online services over time.

Commercial cookies help us decide which products, services, and interest-based advertisements to display to you on and off our platforms.

For example, commercial cookies help us:

• place users into audience groups based on websites visited and interactions taken, so that we can show more relevant travel inspiration, accommodation recommendations, and other personalized content;
• display personalized and interest-based advertisements on Yumie websites, apps, emails, and other websites, including through retargeting based on your browsing and search activity;
• integrate social media into our websites and apps so that you can like or share content through services such as Facebook, Instagram, YouTube, Twitter, Pinterest, Snapchat, and LinkedIn; and
• work with trusted third parties that may combine information we share, such as email addresses or phone numbers, with information they already hold in order to build audience profiles or deliver targeted advertising, subject to applicable law.

Social media providers and third-party advertising providers may use their own cookies and similar technologies in accordance with their own privacy and cookie notices, which may change from time to time.

Email Pixels and Similar Technologies

We may also use technologies that are not stored on your device in the same way as browser cookies, such as pixels included in emails.

For example, emails such as newsletters may contain a one-pixel image or similar electronic marker that loads when you open the email. This helps us understand whether a message was delivered, whether and when it was opened, and which links or sections were clicked.

We may use this information to improve message relevance, timing, and content quality.

Your Cookie Choices

To learn more about how to manage or delete cookies, you may visit allaboutcookies.org or consult your browser’s help documentation.

Depending on the browser you use, you may be able to choose whether to accept or reject certain cookies through your browser settings. You can generally manage cookie settings for browsers such as Chrome, Firefox, Internet Explorer, and Safari through their built-in settings pages.

Please note that if you block certain functional cookies, some parts of our services may not function properly.

In addition to controls available on our websites and apps, you may also be able to opt out of certain analytics and advertising cookies:

• Analytics. If you do not want Google Analytics to collect analytics information from a particular browser, you may use the Google Analytics opt-out browser add-on, where available.
• Advertising. Our advertising and marketing partners may participate in industry self-regulatory programs such as the Network Advertising Initiative (NAI) and the Interactive Advertising Bureau (IAB). You may be able to opt out of certain behavior-based advertising through www.networkadvertising.org, www.youronlinechoices.com, or www.youradchoices.com.
• You may also be able to adjust settings on your mobile device to limit certain advertising or tracking activities. Please note that opting out of online advertising networks does not mean that you will no longer see ads or that you will no longer be subject to online advertising or marketing analytics. It generally means that participating networks will stop showing you ads tailored to your interests and browsing behavior.
• Some browsers offer a “Do Not Track” setting. At this time, Yumie does not respond to browser-based Do Not Track signals.

How to Contact Us

If you have any questions about this Privacy & Cookie Notice, please contact us at service.Yumie@flybooking.io.

We may update this Privacy & Cookie Notice from time to time. If an update is relevant to you or materially affects how your personal data is protected, we encourage you to review this page periodically for the latest version.