Privacy Policy

How we protect and handle your personal information

Last Updated: October 16, 2025

Introduction

2lun.com ("we", "us", or "our") is dedicated to safeguarding your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, share, and protect your data when you access our website, submit booking requests, or utilize our private aviation services.

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our services.

1. Information We Collect

Types of data we gather to provide our services

Personal Identification Information

When you book flights or interact with our services, we may collect:

  • Full name, email address, and telephone number
  • Residential or billing address
  • Government-issued identification and passport details (as required for international flights)
  • Date of birth and travel preferences

Financial Information

Payment card details, billing information, and transaction history necessary to process your bookings. We use secure, encrypted payment processors and do not store complete credit card numbers on our servers.

Technical and Usage Data

Automatically collected information includes:

  • IP address, browser type, and operating system
  • Pages visited, time spent on our site, and referral sources
  • Device identifiers and mobile network information
  • Cookies and similar tracking technologies

Communications

Correspondence you send to us, including emails, chat messages, customer support inquiries, and feedback.

2. How We Use Your Information

The purposes for which we process your data

Service Delivery

Process flight bookings, coordinate with aircraft operators, manage your account, and provide customer support.

Payment Processing

Charge for services, process refunds, prevent fraudulent transactions, and maintain billing records.

Communications

Send booking confirmations, flight updates, service announcements, and respond to your inquiries.

Marketing

Deliver promotional materials, newsletters, and special offers (you may opt out at any time).

Service Improvement

Analyze usage patterns, conduct research, enhance user experience, and develop new features.

Legal Compliance

Comply with aviation regulations, tax requirements, and respond to lawful requests from authorities.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

Contractual Necessity

Processing necessary to fulfill our booking and service agreements with you.

Consent

Where you have explicitly consented to specific processing activities.

Legal Obligations

Compliance with applicable laws, regulations, and legal processes.

Legitimate Interests

Our legitimate business interests, such as fraud prevention and service optimization.

4. Sharing Your Information

When and with whom we share your data

We do not sell your personal information. We may share your data with the following parties:

Aircraft Operators and Charter Partners

Information necessary to arrange and execute your flights, including passenger manifests and travel documentation.

Payment Processors

Secure third-party services that handle payment transactions on our behalf.

Service Providers

Vendors who assist with website hosting, data analysis, email delivery, customer service, and marketing.

Legal Authorities

When required by law, court order, or to protect our rights, safety, or property.

Business Transfers

In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Your Privacy Rights

How to access, modify, or delete your information

GDPR Rights (EU/EEA Residents)

You have the right to:

  • Access your personal data and request a copy
  • Correct inaccurate or incomplete information
  • Request deletion of your data (right to be forgotten)
  • Object to or restrict certain processing activities
  • Data portability - receive your data in a structured format
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with your local data protection authority

CCPA/CPRA Rights (California Residents)

California consumers have the right to:

  • Know what personal information we collect, use, and share
  • Request deletion of your personal information
  • Opt out of the "sale" or "sharing" of personal information
  • Correct inaccurate personal information
  • Non-discrimination for exercising your privacy rights
  • Limit the use of sensitive personal information

How to Exercise Your Rights

To submit a privacy request, please contact us at [email protected] or call +971 55 420 8822. We will verify your identity and respond within the timeframes required by applicable law.

6. Children's Privacy

Protection of minors' information

Our services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at [email protected], and we will take steps to remove such information from our systems.

7. Email Communications

Marketing emails and opt-out options

We comply with the CAN-SPAM Act and other applicable email marketing laws. If you receive promotional emails from us:

  • You may unsubscribe at any time using the "unsubscribe" link included in every marketing email
  • We only send marketing communications to users who have opted in or have an existing business relationship with us
  • Our emails clearly identify 2lun.com as the sender
  • We honor opt-out requests promptly, typically within 10 business days
  • Unsubscribing from marketing emails will not affect transactional messages (booking confirmations, flight updates, etc.)

8. Data Security

How we protect your information

We implement industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest

• Secure server infrastructure and firewalls

• Regular security audits and vulnerability assessments

• Access controls and employee training

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Data Transfers

Cross-border data processing

Your information may be transferred to, stored, and processed in countries outside of your jurisdiction, including the United States, where data protection laws may differ from those in your country. When we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions to ensure your data receives adequate protection.

10. Data Retention

How long we keep your information

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on:

  • The nature of the information and the purposes for which it was collected
  • Legal, regulatory, tax, and accounting obligations
  • Our legitimate business interests (e.g., fraud prevention, dispute resolution)
  • Your consent (where applicable)

When personal data is no longer needed, we securely delete or anonymize it.

11. Cookies and Tracking Technologies

How we use cookies on our site

We use cookies, web beacons, and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content. You can control cookie preferences through your browser settings.

Essential Cookies

Required for basic site functionality and cannot be disabled.

Analytics Cookies

Help us understand how visitors use our site and improve performance.

Marketing Cookies

Used to deliver relevant advertisements and track campaign effectiveness.

Preference Cookies

Remember your settings and preferences for a personalized experience.

12. Third-Party Websites

Links to external sites

Our website may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

How we notify you of updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy and may notify you through email or a prominent notice on our website. Your continued use of our services after any modifications indicates your acceptance of the updated Privacy Policy.

14. Contact Us

Questions about this Privacy Policy

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry as promptly as possible, typically within 30 days.

Mila Chase

Mila Chase

Aviation Specialist

Privacy Policy - How We Protect Your Information | 2Lun