Privacy Policy

Last updated: August 18, 2026

Data controller

The RideFly platform is operated by «أربع مواسم للسفر والسياحة» (the company's registered Arabic name) (licensed by the Iraqi Tourism Authority), which is responsible for processing your data under this policy.

1. Data we collect

Account data: name and phone number (we use a WhatsApp code to sign in).
Booking data: traveler names, date of birth, gender, passport number and validity when needed.
Payment data: processed via secure payment gateways — we do not store your full card details on our servers.
Usage data: pages and searches, to improve the service.

2. How we use your data

To complete your bookings, issue tickets and communicate about them.
Support, customer service and booking-related notifications.
Improving the platform and preventing fraud.

3. Data sharing

We share the minimum necessary with airlines, hotels, suppliers and payment gateways solely to fulfill your booking. We do not sell your data to any third party.

4. WhatsApp sign-in

We use a verification code sent to WhatsApp to confirm your number. Your phone number is used to sign in and to communicate about your bookings.

5. Cookies

We use essential cookies to run the site and remember your preferences (such as language and recent searches). You can manage them from your browser settings.

6. Retention & security

We keep your data for as long as needed to provide the service and meet legal obligations, applying reasonable protections (HTTPS transport encryption).

7. Your rights

You can request to access, correct or delete your data by contacting us: WhatsApp or [email protected].