Privacy policy

Who is responsible for your data

AVIO Solutions Limited, registration no. 77693458, #1202, 12/F., 299 QRC, 287-299 Queen's Road Central, Sheung Wan, Hong Kong, is the data controller for air-viva.com. You can reach us through the channels on our contact page.

What we collect

Searches: the route, dates, cabin and passenger mix you search for. A search on its own is not linked to your identity.

Bookings: the details a booking needs — each traveller's name, date of birth where the fare requires it, travel document details and nationality where the airline requires them, and the booker's contact email and phone number.

Your account: your booking history and the traveller details you have used before, kept so a future booking can be filled in faster. Signing in works by a link sent to your email — there is no password to create or store.

Payments: payments are processed by payment providers, not by us. We receive confirmation of the payment and limited details such as the card type and result — never your full card number.

Support: if you message us on WhatsApp, we receive what you send there. WhatsApp is a service of Meta and has its own privacy terms.

Technical: server logs and the strictly necessary cookies described below.

Why we use it

To make and manage your booking — including passing traveller details to the airline or its reservation system, which is what a flight booking is.

To take payment through a payment provider, issue your tickets, and send you the emails a booking needs: confirmations, sign-in links, and reminders about a fare hold you placed.

To answer your questions, to keep the platform secure and prevent fraud, and to meet legal obligations such as accounting rules.

Who we share it with

The airline operating your flight and the reservation systems it uses — they need the traveller details to hold seats and issue tickets.

Payment providers, to process the payment you chose.

Service providers that run the platform for us: transactional email delivery, and hosting in the European Union. They process data on our instructions.

Authorities, where the law requires it. We do not sell personal data, and we do not share it for advertising.

Cookies

We use strictly necessary cookies only: a short-lived booking session cookie while you complete a booking, and a sign-in cookie for your account. There are no advertising or analytics cookies on this website.

How long we keep it

Booking and payment records are kept for as long as accounting and aviation rules require. Saved traveller details are kept while your account is active — you can ask us to remove them at any time.

Travel document numbers are shown masked in your account, even to you — signing in proves control of the inbox, not the right to re-read a passport number.

How we protect it

Connections to this website are encrypted. Payment provider credentials are stored encrypted, payment card numbers never reach our systems, and access to booking data inside the company is limited to the people who handle bookings.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete what we are not legally required to keep. These rights follow Hong Kong's Personal Data (Privacy) Ordinance, and where the GDPR or a similar law applies to you, the rights it grants apply too.

The quickest way to exercise them is through the channels on our contact page. Most of your booking data is also visible directly in My bookings.

Changes to this policy

When this policy changes, the new version is published here with a new date. A change never applies backwards to data we already hold without a lawful basis.