Draft — pending legal review
Privacy policy
Last updated: August 22, 2026
How DummyFlyNStay handles personal data, in line with the GDPR. This is a working draft pending legal review.
1. Data we collect
Traveller details (names, date of birth, nationality, optional passport data), contact details (email, phone), order and payment metadata, and technical logs needed to run the service.
2. Why we process it
To create your reservation, deliver documents, process payment, prevent fraud, and meet legal obligations. The legal bases are performance of the contract, legitimate interest, and legal obligation.
3. Who receives it
Airlines, hotels and booking platforms (to create the reservation), Stripe (payment), our email provider (delivery), and hosting/infrastructure providers. We do not sell personal data.
4. Retention
Order records are kept for the period required by tax and consumer law. Draft bookings that are never paid are deleted automatically after 30 days.
5. Your rights
You can access, correct, export or erase your data, object to processing, and lodge a complaint with your data protection authority. Write to reservations@dummyflynstay.com to exercise any right.