Consumer Health Data Privacy Notice

What We Collect and Why

The Consumer Health Data we collect depends on the services you ask for. It may include:

• Dietary needs, meal restrictions and food preferences that you give us for your travel arrangements.
• Requests relating to mobility, accessibility or assistance, such as wheelchair services and other special travel accommodations.
• Health-related details you choose to share because they are needed for a refund request, a travel insurance claim, an accessibility request, a cancellation or another travel service.
• Information from which health-related circumstances relevant to your requested services could reasonably be identified or inferred.

Where it is necessary to deliver the services you request and to run our business, SkySparrows may collect, organize, access, store, use, secure, transmit, disclose or delete Consumer Health Data. Where appropriate, we may combine it with other personal information you have given us or that we receive from travel suppliers and service providers.

The purposes for which we may use Consumer Health Data include:

• Setting up the accessibility, mobility, dietary or other special travel services you have requested.
• Handling eligible cancellation, refund, insurance and service-related requests.
• Delivering, administering and improving the travel services you obtain from SkySparrows.
• Producing aggregated, anonymous or de-identified information for permitted business, security, analytics or service-improvement purposes.

Where the Data Comes From

In most cases you give us Consumer Health Data yourself, for example when you search for, book, change or manage a reservation, get in touch with our support team or ask for special assistance.

We may also be given relevant information by someone acting for you, such as a travel companion, an authorized representative or a booking coordinator, and by airlines, hotels, insurers and other travel suppliers where this is needed to carry out the services you have requested.

Information may be collected and used across the SkySparrows websites, applications, booking platforms and other services that fall under our Privacy Policy.

When We Disclose It

SkySparrows may disclose relevant categories of Consumer Health Data to the recipients below where this is needed to provide the services you request, or for another purpose the law allows:

• Travel suppliers: Airlines, hotels, car rental companies, travel insurers, airports and other suppliers may be given the information they need to arrange or deliver your travel services.
• Service providers: We use technology companies, customer support providers, payment-related providers, booking platforms and other vendors that help operate our services or process information for us.
• Corporate affiliates: Where relevant, we may share information with affiliated entities or companies under common ownership or control for legitimate business purposes consistent with this notice.
• Business transactions: Consumer Health Data may be disclosed where reasonably necessary for a merger, acquisition, financing, restructuring, sale, transfer of assets or comparable transaction.
• Legal and safety reasons: We may disclose information to comply with the law, answer lawful requests, protect our legal rights, investigate suspected fraud or misuse, enforce our agreements or protect the safety and security of our customers, staff or services.
• At your direction or with your consent: We may disclose Consumer Health Data to another party when you agree to it or expressly instruct us to do so.

Exercising Your Privacy Rights

Your state of residence and the law that applies there may give you rights over your Consumer Health Data. These can include the right to ask for access to it, to have it deleted or to have other action taken in relation to the information we hold. Where our processing relies on your consent, you may also be entitled to withdraw that consent.

• To make a privacy request, email contact@skysparrows.com and follow the verification or request instructions we send you.
• So that personal information stays protected, we may have to confirm your identity before acting on a request.
• We may keep records of privacy requests where the law permits or requires us to.
• If a request is excessive, repetitive or unfounded, we may refuse it or charge a reasonable fee, where the law allows.

If You Disagree With Our Decision

Should SkySparrows refuse a privacy request to which an appeal process applies, you can ask us to reconsider by emailing contact@skysparrows.com and following the instructions set out in our reply.

Eligible appeals are reviewed in accordance with the law, and we respond within the period that the relevant privacy requirements prescribe.

If your appeal does not succeed, you may be entitled to raise the matter with your state authority:

• Washington: The Washington State Attorney General’s Office handles consumer privacy concerns for Washington residents.
• Nevada: The Nevada Attorney General’s Office handles consumer privacy concerns for Nevada residents.

Updates to This Notice

From time to time SkySparrows may amend this Consumer Health Data Privacy Notice to take account of changes to our services, our privacy practices, the law or regulatory requirements.

The amended notice will be published on the relevant SkySparrows websites, apps or services and takes effect on posting, unless a different effective date is given. Please look at this notice from time to time to stay informed about how we handle Consumer Health Data.