Privacy Policy

1. Data controller and contact details

The data controller for personal data processed through ag-flights.com is AG Lifestyle Ltd, registration number C425583, Amathusa Costal Heights, Flat/Office 13, Iras 2, 4532 Agios Tychonas, Limassol, Cyprus.

For any question about how your personal data is processed, contact us at sky@ag-flights.com or +357 97 693 545.

2. Purposes and legal basis for processing

We process the personal data you submit through the booking form (Pilot for a Day, scenic flights, romantic/photo flights, gift certificates, private jet charter) to respond to your request, check flight availability and arrange the booking. The legal basis is performance of a contract, or steps taken at your request before entering into one (GDPR Art. 6(1)(b)).

We process limited technical data to protect the booking form from automated and fraudulent submissions (a hidden trap field and a submission-rate limit), on the basis of our legitimate interest (GDPR Art. 6(1)(f)).

Analytics data (Google Analytics 4) is processed only with your consent (GDPR Art. 6(1)(a)). A consent banner is shown on your first visit, and analytics does not run until you accept it — see section 12.

3. Categories of personal data processed

Data you provide directly.Name, phone/WhatsApp number, email (optional for most requests, required for gift certificates), preferred flight date and departure location, number of participants, and, depending on the request type, the gift certificate recipient’s name, a personal message, or the departure and destination points for a charter enquiry.

Data collected automatically when you visit the site. Standard request-level technical data handled by our hosting provider, Vercel Inc.; your language preference (the ag_locale cookie); and, only if you accept analytics, usage statistics through Google Analytics 4. See section 12 for the full list of cookies and similar technologies.

4. Recipients of personal data

We share booking-request data with the following categories of recipients, only to the extent needed to handle your request:

• our customer request management system (Kommo CRM);
• our email service, to notify the AG Flights team of a new request;
• the aircraft operator carrying out the specific flight, to the extent needed to arrange it.

Aircraft operator we work with: Dento Aviation.

We do not sell personal data and do not share booking-form data with advertising networks.

5. International data transfers

This website is hosted on infrastructure operated by Vercel Inc., United States. As a result, data submitted through the site may be processed on servers outside the European Economic Area. Some other services we use (including analytics and web fonts) are also operated by providers based outside the EEA.

To protect personal data when it is transferred outside the European Economic Area, Vercel applies the safeguard mechanisms required by law, including the European Commission’s Standard Contractual Clauses where applicable. Further details are available in Vercel’s Privacy Notice.

6. Retention period

We keep personal data only for as long as necessary for the purposes described in section 2 — including the time needed to respond to your request, arrange the flight, and meet applicable accounting and tax record-keeping obligations — after which it is deleted or anonymised.

Data from requests that did not result in a booking is kept for no more than 12 months from the last interaction. Data relating to confirmed and completed bookings, together with the accounting, payment and tax records required by law, is kept for 6 years after the relevant transaction is completed. Google Analytics user and event data is kept for no more than 14 months. After these periods expire, data is deleted or anonymised, except where longer retention is required to comply with a legal obligation, resolve a dispute, or establish, exercise or defend legal claims.

7. Your rights as a data subject

Under the GDPR you have the right to access your personal data, request its correction or erasure, restrict or object to its processing, and request data portability. To exercise any of these rights, contact us at sky@ag-flights.com.

8. Right to withdraw consent

Where processing relies on your consent (for example, Google Analytics), you may withdraw it at any time using the “Analytics settings” control in the site footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

9. Right to lodge a complaint with a supervisory authority

If you believe our processing of your personal data breaches the GDPR, you have the right to lodge a complaint with the Cyprus data protection supervisory authority.

Supervisory authority: Office of the Commissioner for Personal Data Protection of the Republic of Cyprus. Address: 15 Kypranoros Street, 1061 Nicosia, Cyprus. Email: commissioner@dataprotection.gov.cy. Website: dataprotection.gov.cy.

You may also lodge a complaint with the supervisory authority of an EU member state where you habitually reside, work, or where the alleged infringement occurred.

10. Whether providing data is required, and consequences of not providing it

Providing your name, phone number and, where applicable, email address is necessary for us to process your request and get back to you — without it, we cannot confirm flight availability or arrange a booking. Other details, such as a personal message on a gift certificate, are optional.

11. Automated decision-making and profiling

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you within the meaning of GDPR Art. 22.

12. Cookies and similar technologies

• ag_locale — cookie, set by AG Flights, expires after 1 year. Remembers your EN/RU language choice.
• ag-flights:analytics-consent:v1 — browser local storage, set by AG Flights, kept until you clear your browser. Remembers your analytics consent choice.
• _ga, _ga_* and other Google Analytics cookies — set by Google, only after you accept analytics; lifetime is set by Google, not by AG Flights.

You can change your analytics consent at any time using the “Analytics settings” control in the site footer.