Privacy Policy

Last updated: August 21, 2026

Fiji Airways Holidays ("we," "our," or "us") operates fijiairwaysvacations.com, a hotel booking platform powered by Booking Provider's booking technology and APIs. This Privacy Policy explains:

  • What data Fiji Airways Holidays collects and stores (account authentication and booking data for platform functionality)
  • What data Booking Provider collects and processes (all booking processing and payment data)
  • How data is used and protected

🔒 CRITICAL NOTICE:

Fiji Airways Holidays stores booking data (guest names, contact details, hotel information, dates, pricing) in our database for platform functionality (displaying bookings, sending confirmation emails, managing access). However, Booking Provider handles all booking processing, payment processing, and customer support. Fiji Airways Holidays never receives, processes, or stores payment card information, CVV codes, or banking details - these are handled entirely by Booking Provider via Stripe. When you make a booking, your data is also subject to Booking Provider's Privacy Policy.

Who We Are

Fiji Airways Holidays operates the fijiairwaysvacations.com website platform. We provide the user interface, design, and website functionality. We store account authentication data (email and password) and booking data (guest information, hotel details, dates, pricing) for platform functionality such as displaying bookings to users, sending confirmation emails, and managing booking access. However, we do not process payments or handle booking confirmations - these are handled by Booking Provider.

Booking Provider is the third-party service provider that handles booking-related data, payment processing, and booking support through the platform.

What This Policy Covers

This Privacy Policy describes how Fiji Airways Holidays collects, uses, processes, and shares personal information, including account authentication data and booking data stored for platform functionality. This policy also explains how Booking Provider handles booking processing, payment processing, and customer support when you make a reservation through fijiairwaysvacations.com.

This policy applies to all users of fijiairwaysvacations.com and our services. When you make a booking, your booking data is also subject to Booking Provider's Privacy Policy, as Booking Provider handles the actual booking processing and payment transactions.

1. Information We Collect

1.1 Information Fiji Airways Holidays Collects

Fiji Airways Holidays collects and stores:

  • Account information: Email address, password (hashed and encrypted)
  • Booking data (for platform functionality): Guest names, contact details (email, phone), hotel information, travel dates, number of guests, room details, pricing information, special requests, booking status
  • Website usage: IP address, browser type and version, device information, pages visited
  • Cookies: Session management, preferences (currency, language)
  • Location data: General location based on IP address (not precise location)

🔒 Critical: Fiji Airways Holidays stores booking data for platform functionality (displaying bookings, sending emails, managing access), but we do NOT collect, process, or store payment card information, CVV codes, or banking details. Payment information is handled entirely by Booking Provider via Stripe.

1.2 Information Booking Provider Collects and Processes

When you make a booking through fijiairwaysvacations.com, the Booking Provider collects and processes:

  • Personal Identification Information: Guest names, email address, phone number, etc.
  • Booking details: Travel dates, hotel selection, number of guests, room preferences, special requests
  • Payment information: Credit card details, CVV codes, billing address (collected directly by Booking Provider via Stripe - never touches Fiji Airways Holidays servers)
  • Technical Data: IP address, browser type and version, time zone setting, location, browser plug-in types and versions, operating system and platform
  • Usage Data: Information about how you use the booking platform
  • Marketing and Communications Data: Your preferences in receiving marketing from Booking Provider and your communication preferences

Important: Booking Provider handles all booking processing, payment processing, and customer support. Fiji Airways Holidays stores a copy of booking data for platform functionality (displaying bookings, sending emails), but payment card information is never stored by Fiji Airways Holidays - it is handled entirely by Booking Provider via Stripe.

1.3 Data Flow Clarification

When you book on fijiairwaysvacations.com:

  1. You create an account with Fiji Airways Holidays (email + password) - stored by Fiji Airways Holidays
  2. You search hotels using Booking Provider's API - search data goes to Booking Provider
  3. Booking data (guest names, dates, hotel selection) is sent to Booking Provider for processing
  4. Fiji Airways Holidays stores a copy of booking data in our database for platform functionality (displaying bookings, sending confirmation emails, managing access)
  5. Payment information is collected directly by Booking Provider via Stripe - Fiji Airways Holidays never receives, processes, or stores payment card data
  6. Booking Provider processes the booking and payment, then sends confirmation to both you and Fiji Airways Holidays
  7. Fiji Airways Holidays uses the stored booking data to display your bookings in your account and send confirmation emails

2. How We Use Your Information

Fiji Airways Holidays uses stored data for:

  • Account authentication and login
  • Storing and displaying bookings in your account
  • Sending booking confirmation emails and vouchers
  • Managing booking access (for guest access via secure tokens)
  • Facilitating cancellations and amendments through our platform (which then calls Booking Provider's API)
  • Website functionality and improvement
  • Analytics and usage patterns
  • Security and fraud prevention

Booking Provider uses booking data for:

  • Processing and confirming bookings
  • Managing cancellations and amendments
  • Payment processing
  • Customer support
  • Sending booking confirmations and vouchers
  • Maintaining booking records
  • Compliance with legal obligations

Booking Provider collects this data under the lawful bases set out in the GDPR, which include your consent, contract performance, legitimate business interests, and compliance with legal obligations.

We do NOT use your information for: Processing payment card data (handled by Booking Provider via Stripe), processing bookings with hotels (handled by Booking Provider), or handling refunds (handled by Booking Provider). We store booking data for platform functionality only.

3. Information Sharing and Disclosure

3.1 Fiji Airways Holidays Shares With:

  • Booking Provider: Booking data is sent to Booking Provider for processing. Booking Provider also receives booking data directly when you make a booking through our platform
  • Cloud hosting services: Vercel (for website hosting) - account and booking data is stored securely
  • Email service providers: For sending booking confirmation emails and transactional emails
  • Analytics services: For website performance (e.g., Vercel Analytics)
  • Authentication services: For account management (e.g., NextAuth)

Important: Fiji Airways Holidays stores booking data in our database for platform functionality, but we do not share payment card information as we never receive it. Payment data is handled entirely by Booking Provider via Stripe.

3.2 Booking Provider Shares Booking Data With:

  • Hotels/accommodation providers: Guest information for reservation fulfillment
  • Payment processors: Stripe (payment information collected directly by Stripe)
  • Third-party service providers: Who perform functions on Booking Provider's behalf (web hosting, data analysis, customer service, marketing assistance)

Booking Provider ensures that their third-party service providers respect your personal data and comply with GDPR and other relevant data protection laws. Please refer to Booking Provider's Privacy Policy for full details.

3.3 Legal Requirements

We may disclose your information if required by law or to:

  • Comply with legal obligations, court orders, or government requests
  • Protect our rights, property, or safety
  • Prevent fraud, abuse, or security issues
  • Protect the rights or safety of our users or the public

3.4 We Do NOT Sell Your Data

Fiji Airways Holidays does not sell, rent, or trade your personal information to third parties for marketing purposes. Booking Provider also does not sell your booking data. Please refer to Booking Provider's Privacy Policy for their data sharing practices.

4. Data Security

Fiji Airways Holidays: We implement appropriate technical and organizational security measures to protect account authentication data and stored booking data:

  • Encryption of data in transit (SSL/TLS)
  • Password hashing and secure storage
  • Secure data storage and access controls for booking data
  • Regular security assessments and updates
  • Access tokens for secure guest access to bookings

Booking Provider: Booking Provider uses appropriate technical and organizational measures to protect the personal information they collect and process about you. Please refer to Booking Provider's Privacy Policy for details on their security practices.

Important: Payment card information is handled entirely by Booking Provider via Stripe and never touches Fiji Airways Holidays servers. Please refer to Stripe's security practices and privacy policy for payment security information.

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Payment Information

🔒 CRITICAL SECURITY NOTICE:

Fiji Airways Holidays NEVER collects, processes, transmits, or stores credit card information, CVV codes, or banking details.

All payment data is collected and processed by Booking Provider via Stripe. When you enter payment information on fijiairwaysvacations.com, it is transmitted directly to Booking Provider's payment gateway (powered by Stripe) and never passes through Fiji Airways Holidays’ servers.

PCI-DSS Compliance: Fiji Airways Holidays is PCI-DSS compliant by not handling card data (SAQ-A compliance). Booking Provider handles all payment processing in compliance with PCI-DSS requirements.

If you have concerns about payment security, please contact Booking Provider at [email protected] or review Stripe's privacy and security policies at stripe.com/privacy.

6. Cookies and Tracking Technologies

Fiji Airways Holidays uses cookies for:

  • Session management and keeping you logged in
  • Remembering your preferences (currency selection, language)
  • Understanding how you use the Platform
  • Improving Platform functionality and user experience
  • Analyzing traffic and usage patterns

Booking Provider may use cookies for: Booking process, payment security, and booking-related functionality. Please refer to Booking Provider's Privacy Policy for details on their cookie usage.

Types of Cookies We Use:

  • Essential Cookies: Required for Platform functionality (e.g., session management)
  • Performance Cookies: Help us understand usage patterns
  • Functional Cookies: Remember your preferences

You can control cookie settings through your browser. However, disabling cookies may limit your ability to use certain features of the Platform.

7. Your Rights and Choices

Under the GDPR, you have rights in relation to your personal data:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal obligations)
  • Objection: Object to the processing of your personal information
  • Portability: Request transfer of your data to another service
  • Withdraw Consent: Withdraw consent for data processing at any time

For account data and booking data stored by Fiji Airways Holidays: Contact [email protected] to exercise your rights regarding account authentication data and booking data stored in our database.

For booking data processed by Booking Provider: Contact [email protected] or [email protected] to exercise your rights regarding booking data processed by Booking Provider. These rights are subject to Booking Provider's Privacy Policy and GDPR rights.

To exercise these rights for account data we collect, please contact us at [email protected]

8. Third-Party Websites and Services

Fiji Airways Holidays uses Booking Provider as our booking technology provider. When you make a booking, you are entering into a contract with Booking Provider, not Fiji Airways Holidays. Your booking data is subject to:

  • Booking Provider's Privacy Policy
  • Booking Provider's Terms and Conditions
  • Stripe's Privacy Policy (payment processing)

We are not responsible for the privacy practices or content of these external services. We strongly encourage you to review the privacy policies of the Booking Provider and any accommodation providers you book with.

9. Children's Privacy

Our Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child under 18, please contact us immediately at [email protected], and we will take steps to delete such information.

10. Data Retention

Fiji Airways Holidays: We retain account data while your account is active, and delete it upon request (subject to legal obligations). Booking data stored in our database is retained for platform functionality and may be retained for legal, tax, and accounting purposes (typically 7 years from booking date). Usage data is typically retained for up to 2 years for analytics purposes.

Booking Provider: Booking Provider retains booking data for as long as necessary to fulfill the purposes they collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Booking data is typically retained for 7 years from booking date for legal, tax, and accounting purposes. Please refer to Booking Provider's Privacy Policy for details.

You can request deletion of your personal information at any time, subject to legal obligations to retain certain records.

11. International Data Transfers

Your account data may be transferred to and processed in countries other than Fiji, including countries where data protection laws may differ. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Your booking data is processed by Booking Provider, which is based in Ireland (EU GDPR compliant). When you make a booking, your data may be processed internationally by Booking Provider, Stripe, and accommodation providers according to their respective privacy practices.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Fiji Airways Holidays - Account and Website Inquiries

Email: [email protected]

General Support: [email protected]

Fiji Airways Holidays - Booking Data Inquiries

Email: [email protected]

Phone: +679 672 4244

For payment or booking data inquiries, contact our reservations team using the details above.

Acknowledgment: By using fijiairwaysvacations.com, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. You understand that Fiji Airways Holidays stores booking data in our database for platform functionality (displaying bookings, sending emails, managing access), while Booking Provider processes all bookings, handles payment processing, and provides customer support. Your booking contract is with Booking Provider, not Fiji Airways Holidays. Payment card information is never stored by Fiji Airways Holidays - it is handled entirely by Booking Provider via Stripe. You have read both this Privacy Policy and Booking Provider's Privacy Policy.