Privacy Policy

This Privacy Policy applies to personal information we collect through:

• our website
• booking assistance services
• chat features
• web forms
• email
• messaging platforms
• telephone calls
• customer support interactions
• payment and billing processes
• supplier communications
• travel-related documents you provide to us; and
• any other interaction you have with us

This Privacy Policy does not apply to the privacy practices of airlines, airports, payment processors, loyalty programs, government agencies, global distribution systems, visa providers, insurers, accommodation providers, transport operators or other third parties. Those organisations may have their own privacy policies.

The personal information we collect depends on how you use our services.

We may collect:

Identity and contact information

• name
• title
• date of birth
• gender, where required for booking
• nationality
• residential address
• billing address
• email address
• telephone number
• emergency contact details
• passport or identity document details
• visa, residency or immigration-related details, where relevant to the requested service

Travel and booking information

• travel dates
• origin, destination and transit points
• flight preferences
• cabin preferences
• fare preferences
• seat preferences
• baggage requirements
• meal requests
• accessibility or special assistance requests
• frequent flyer or loyalty program numbers
• known traveller numbers or redress numbers, where relevant
• booking references
• ticket numbers
• itinerary details
• travel history relevant to a request
• supplier correspondence
• refund, credit, change or cancellation information

Payment and transaction information

• payment method information
• billing details
• transaction records
• invoices
• receipts
• refund information
• chargeback or payment dispute information

We may use third-party payment processors. We do not intend to store full card numbers unless expressly stated and handled through appropriate payment security arrangements.

Communication and support information

• emails and messages you send to us
• chat transcripts
• call notes
• customer support records
• feedback
• complaints
• dispute records
• instructions you provide
• documents you upload or send to us

Technical and usage information

• IP address
• device information
• browser type
• operating system
• language settings
• time zone
• referral pages
• pages viewed
• session information
• cookies and similar technologies
• approximate location derived from IP address
• security logs
• fraud prevention signals
• analytics information

Sensitive information

Some travel requests may involve information that is sensitive or private, such as:

• health or medical information
• disability or accessibility information
• pregnancy-related information
• dietary requirements that may indicate religion or health status
• religious or cultural requirements
• biometric or identity document information
• immigration, visa or residency information
• information about children or dependants

We collect sensitive information only where reasonably necessary for the service you request, where you provide it to us, where you consent, or where permitted or required by law.

You should not provide sensitive information unless it is necessary for your travel request or support request.

We may collect personal information directly from you when you:

• use our website
• submit a booking request
• complete a form
• use our chat feature
• email, call or message us
• provide travel documents
• provide payment information
• ask us to assist with a booking, change, cancellation, refund or complaint
• participate in customer support
• provide feedback
• subscribe to updates or marketing communications

We may also collect personal information from:

• another person booking or communicating on your behalf
• airlines
• travel suppliers
• booking platforms
• global distribution systems
• payment processors
• fraud prevention providers
• identity verification providers
• loyalty programs
• customer support tools
• analytics providers
• publicly available sources
• government, immigration, law enforcement or regulatory bodies, where permitted or required by law

If you provide personal information about another person, you must ensure that you have authority to do so and that the person understands how we may handle their personal information.

We collect, use and disclose personal information for purposes including:

Booking and travel assistance

• responding to enquiries
• searching for flight options
• preparing itinerary options
• submitting booking requests
• arranging tickets
• assisting with changes, cancellations, refunds and credits
• handling schedule changes and disruptions
• communicating with airlines and suppliers
• assisting with baggage, seating, meal, accessibility or special requests
• assisting with loyalty program or frequent flyer requests
• providing customer support
• sending booking confirmations, itineraries and service updates

Customer service and business operations

• managing customer relationships
• responding to questions, complaints and disputes
• maintaining business records
• training and quality assurance
• improving our website and services
• managing internal administration
• accounting, invoicing and tax purposes
• enforcing our Terms and Conditions

Security, fraud prevention and compliance

• verifying identity or authority
• detecting and preventing fraud, misuse, chargeback abuse, account compromise and unauthorised activity
• protecting our website, systems, staff, customers, suppliers and partners
• complying with legal, regulatory, tax, accounting, sanctions, anti-money laundering, law enforcement and dispute resolution obligations
• investigating suspected breaches of our Terms and Conditions

Marketing and communications

• sending service-related communications
• sending newsletters, updates or offers, where permitted by law
• measuring the effectiveness of communications
• managing marketing preferences

You may opt out of marketing communications at any time by using the unsubscribe link in the communication or contacting us.

We may still send you important service-related communications even if you opt out of marketing.

We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy.

These third parties may include:

• airlines
• travel suppliers
• booking platforms
• global distribution systems
• payment processors
• banks and card issuers
• fraud prevention and identity verification providers
• customer support providers
• IT service providers
• cloud hosting providers
• data storage providers
• email and messaging providers
• analytics providers
• professional advisers
• insurers
• debt recovery providers
• loyalty programs
• airport service providers
• visa, immigration or travel document service providers
• regulators, courts, tribunals, law enforcement bodies, government agencies or dispute resolution bodies
• business partners, contractors and vendors who assist us in providing services

We may also disclose personal information if:

• you consent
• disclosure is necessary to provide the service you requested
• disclosure is required or authorised by law
• disclosure is necessary to protect our rights, safety, property, customers, staff, suppliers or systems
• disclosure is necessary in connection with suspected fraud, misuse, unlawful activity, security incidents or legal claims
• disclosure is part of a business sale, merger, restructuring, investment, transfer or due diligence process, subject to appropriate confidentiality protections

Needle Tailed Swift is incorporated in Hong Kong and serves customers globally.

Our IT infrastructure, service providers, suppliers, airlines, booking platforms, payment processors, support tools and data storage systems may be located in various jurisdictions. This means your personal information may be collected, stored, processed, accessed or disclosed in countries other than your country of residence.

These countries may include, depending on the service, Hong Kong, Australia, Singapore, the United States, the United Kingdom, countries in the European Economic Area, and other countries where airlines, suppliers, technology providers, cloud providers, payment processors, support providers or booking partners operate.

Where required by applicable law, we will take reasonable steps to protect personal information that is disclosed overseas.

However, privacy laws in other countries may differ from those in your country of residence.

By using our services and providing personal information to us, you acknowledge that your personal information may be handled internationally where reasonably necessary for travel booking, customer support, payment processing, IT operations, security, compliance and related purposes.

Flight bookings may involve creating or updating travel records, including Passenger Name Records, booking references, ticket records, itinerary records, payment records and supplier communications.

These records may be accessed or processed by airlines, airports, global distribution systems, booking platforms, travel technology providers, border authorities, security agencies, customs authorities, immigration authorities, payment providers and other travel-related organisations.

The information required for travel may vary depending on the route, airline, destination, transit points, nationality, passport, visa status, payment method and legal requirements.

We may use cookies, pixels, logs, analytics tools and similar technologies to:

• operate our website
• remember preferences
• maintain sessions
• improve performance
• understand website usage
• detect security issues
• prevent fraud or misuse
• improve our services
• support marketing or measurement activities

You may be able to disable cookies through your browser settings. However, some website features may not function properly if cookies are disabled.

Where required by law, we will obtain consent for certain cookies or tracking technologies.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

These steps may include:

• access controls
• authentication measures
• encryption where appropriate
• secure cloud service providers
• staff and contractor confidentiality obligations
• system monitoring
• security logging
• data minimisation
• fraud prevention measures
• internal policies and procedures

No method of transmission or storage is completely secure. You are responsible for keeping your own devices, email accounts, passwords and communication channels secure.

If you believe your information or a communication with us has been compromised, please contact us immediately.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including:

• providing booking assistance
• supporting travel, changes, cancellations, refunds, complaints and disputes
• maintaining business, tax, accounting and legal records
• fraud prevention and security
• legal and regulatory compliance
• enforcing our Terms and Conditions
• resolving disputes

Retention periods may vary depending on the type of information, the nature of the booking, supplier requirements, legal requirements, limitation periods, accounting obligations, dispute risks and operational needs.

When personal information is no longer needed, we will take reasonable steps to delete, destroy, de-identify or archive it, subject to legal, regulatory, accounting, dispute resolution and legitimate business requirements.

We rely on you to provide accurate, complete and current personal information.

You should tell us promptly if your personal information changes or if you believe information we hold is inaccurate.

You may request correction of your personal information by contacting us.

We may need to verify your identity before actioning a correction request.

Some travel records may be controlled by airlines, suppliers, booking platforms, government agencies or other third parties. Where we cannot directly correct information held by a third party, we may assist you where reasonable and possible, but the third party’s own processes and rules may apply.

You may request access to personal information we hold about you.

We may need to verify your identity before responding.

We may refuse or limit access where permitted by law, including where access would:

• compromise another person’s privacy
• reveal commercially sensitive information
• prejudice fraud prevention, security, legal or dispute processes
• breach legal obligations
• be frivolous, vexatious or disproportionate
• otherwise fall within a lawful exception

If we refuse access, we will explain the reason where required by law and where it is reasonable to do so.

We may handle children’s personal information where necessary for family travel, bookings involving minors, unaccompanied minor requests, passport details, visa requirements, special assistance, or related travel support.

A parent, guardian or authorised adult must provide or approve the information.

We do not knowingly invite children to use our services independently.

We may send marketing communications where permitted by law.

You can opt out of marketing communications at any time by:

• clicking the unsubscribe link in an email
• following the instructions in the communication; or
• contacting us

Opting out of marketing does not prevent us from sending service-related messages, booking updates, payment notices, itinerary information, security alerts, legal notices or other non-marketing communications.

We may use software tools, automation, analytics, fraud prevention tools, customer support tools, or artificial intelligence-assisted systems to help operate our services.

These tools may assist with tasks such as:

• organising customer requests
• drafting or summarising support communications
• detecting fraud or misuse
• improving website performance
• analysing service trends
• assisting with booking workflow management

We do not intend to make important travel decisions solely by automated means without human involvement where human review is reasonably necessary.

You should not submit unnecessary sensitive information through chat or support tools.

If we become aware of a data breach or security incident affecting personal information, we will assess the incident and take appropriate steps.

Where required by applicable law, we will notify affected individuals, regulators, or other relevant parties.

Depending on the laws that apply to you, you may have rights to:

• request access to personal information we hold about you
• request correction of inaccurate personal information
• withdraw consent where processing is based on consent
• object to certain processing
• request deletion or restriction in certain circumstances
• complain to us
• complain to a privacy regulator

These rights may be subject to legal exceptions, identity verification, supplier requirements, retention obligations and practical limitations.

For Hong Kong privacy matters, you may have rights under the Personal Data (Privacy) Ordinance.

For Australian privacy matters, you may have rights under the Privacy Act 1988 and the Australian Privacy Principles where they apply.

For customers in other jurisdictions, additional privacy rights may apply depending on your location and the nature of our relationship with you.

If you have a privacy complaint, please contact us first.

Please include:

• your name
• contact details
• a clear description of your concern
• any relevant booking reference or communication
• the outcome you are seeking

We will review your complaint and respond within a reasonable time.

If you are not satisfied with our response, you may have the right to contact a privacy regulator in your jurisdiction.

Relevant regulators may include:

• the Office of the Privacy Commissioner for Personal Data in Hong Kong
• the Office of the Australian Information Commissioner in Australia, where Australian privacy law applies
• another privacy or data protection authority in your country of residence

Our website and communications may link to third-party websites or services, including airlines, payment processors, booking platforms, travel information sources, government websites, visa services and other resources.

We are not responsible for the privacy practices, content, security or data handling of third-party websites or services.

You should review the privacy policies of third parties before providing information to them.

We may update this Privacy Policy from time to time.

The updated version will be posted on our website with the updated date.

If we make material changes, we may take additional steps to notify you where required by law or where we consider it appropriate.

Your continued use of our website or services after the updated Privacy Policy is posted means you acknowledge the updated Privacy Policy, unless prohibited by applicable law.

Needle Tailed Swift Ltd

Hong Kong business registration number: 70760066

Website: https://www.needletailedswift.com/

Address: NEEDLE TAILED SWIFT LTD, UNIT 1603, 16/F THE L. PLAZA, 367-375 QUEEN'S RD CENTRAL, SHEUNG WAN, HONG KONG, CHINA

For privacy requests, please include “Privacy Request” in the subject line.