Privacy Policy
How we protect and handle your personal information
Last Updated: October 16, 2025
Introduction
2lun.com ("we", "us", or "our") is dedicated to safeguarding your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, share, and protect your data when you access our website, submit booking requests, or utilize our private aviation services.
By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our services.
1. Information We Collect
Types of data we gather to provide our services
Personal Identification Information
When you book flights or interact with our services, we may collect:
- Full name, email address, and telephone number
- Residential or billing address
- Government-issued identification and passport details (as required for international flights)
- Date of birth and travel preferences
Financial Information
Payment card details, billing information, and transaction history necessary to process your bookings. We use secure, encrypted payment processors and do not store complete credit card numbers on our servers.
Technical and Usage Data
Automatically collected information includes:
- IP address, browser type, and operating system
- Pages visited, time spent on our site, and referral sources
- Device identifiers and mobile network information
- Cookies and similar tracking technologies
Communications
Correspondence you send to us, including emails, chat messages, customer support inquiries, and feedback.
2. How We Use Your Information
The purposes for which we process your data
Service Delivery
Process flight bookings, coordinate with aircraft operators, manage your account, and provide customer support.
Payment Processing
Charge for services, process refunds, prevent fraudulent transactions, and maintain billing records.
Communications
Send booking confirmations, flight updates, service announcements, and respond to your inquiries.
Marketing
Deliver promotional materials, newsletters, and special offers (you may opt out at any time).
Service Improvement
Analyze usage patterns, conduct research, enhance user experience, and develop new features.
Legal Compliance
Comply with aviation regulations, tax requirements, and respond to lawful requests from authorities.
3. Legal Basis for Processing (GDPR)
For users in the European Economic Area
If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:
Contractual Necessity
Processing necessary to fulfill our booking and service agreements with you.
Consent
Where you have explicitly consented to specific processing activities.
Legal Obligations
Compliance with applicable laws, regulations, and legal processes.
Legitimate Interests
Our legitimate business interests, such as fraud prevention and service optimization.
4. Sharing Your Information
When and with whom we share your data
We do not sell your personal information. We may share your data with the following parties:
Aircraft Operators and Charter Partners
Information necessary to arrange and execute your flights, including passenger manifests and travel documentation.
Payment Processors
Secure third-party services that handle payment transactions on our behalf.
Service Providers
Vendors who assist with website hosting, data analysis, email delivery, customer service, and marketing.
Legal Authorities
When required by law, court order, or to protect our rights, safety, or property.
Business Transfers
In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5. Your Privacy Rights
How to access, modify, or delete your information
GDPR Rights (EU/EEA Residents)
You have the right to:
- Access your personal data and request a copy
- Correct inaccurate or incomplete information
- Request deletion of your data (right to be forgotten)
- Object to or restrict certain processing activities
- Data portability - receive your data in a structured format
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with your local data protection authority
CCPA/CPRA Rights (California Residents)
California consumers have the right to:
- Know what personal information we collect, use, and share
- Request deletion of your personal information
- Opt out of the "sale" or "sharing" of personal information
- Correct inaccurate personal information
- Non-discrimination for exercising your privacy rights
- Limit the use of sensitive personal information
How to Exercise Your Rights
To submit a privacy request, please contact us at [email protected] or call +82 10 4684 7660 . We will verify your identity and respond within the timeframes required by applicable law.
6. Children's Privacy
Protection of minors' information
Our services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at [email protected], and we will take steps to remove such information from our systems.
7. Email Communications
Marketing emails and opt-out options
We comply with the CAN-SPAM Act and other applicable email marketing laws. If you receive promotional emails from us:
- You may unsubscribe at any time using the "unsubscribe" link included in every marketing email
- We only send marketing communications to users who have opted in or have an existing business relationship with us
- Our emails clearly identify 2lun.com as the sender
- We honor opt-out requests promptly, typically within 10 business days
- Unsubscribing from marketing emails will not affect transactional messages (booking confirmations, flight updates, etc.)
8. Data Security
How we protect your information
We implement industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
• Encryption of data in transit and at rest
• Secure server infrastructure and firewalls
• Regular security audits and vulnerability assessments
• Access controls and employee training
However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. International Data Transfers
Cross-border data processing
Your information may be transferred to, stored, and processed in countries outside of your jurisdiction, including the United States, where data protection laws may differ from those in your country. When we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions to ensure your data receives adequate protection.
10. Data Retention
How long we keep your information
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on:
- The nature of the information and the purposes for which it was collected
- Legal, regulatory, tax, and accounting obligations
- Our legitimate business interests (e.g., fraud prevention, dispute resolution)
- Your consent (where applicable)
When personal data is no longer needed, we securely delete or anonymize it.
11. Cookies and Tracking Technologies
How we use cookies on our site
We use cookies, web beacons, and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content. You can control cookie preferences through your browser settings.
Essential Cookies
Required for basic site functionality and cannot be disabled.
Analytics Cookies
Help us understand how visitors use our site and improve performance.
Marketing Cookies
Used to deliver relevant advertisements and track campaign effectiveness.
Preference Cookies
Remember your settings and preferences for a personalized experience.
12. Third-Party Websites
Links to external sites
Our website may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Changes to This Privacy Policy
How we notify you of updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy and may notify you through email or a prominent notice on our website. Your continued use of our services after any modifications indicates your acceptance of the updated Privacy Policy.
14. Contact Us
Questions about this Privacy Policy
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We will respond to your inquiry as promptly as possible, typically within 30 days.
