Privacy policy | before you fly

Who we are

Before You Fly ("we", "us") operates beforeyoufly.com.au, an Australian travel essentials comparison website. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Our privacy officer can be reached at [email protected].

What we collect

Information you give us. Your email address if you create an account or subscribe to alerts. Your name and profile picture if you sign in with Google or Apple. The destination, dates and traveller count you enter into trip and checklist tools. Anything you type into a contact or advertising enquiry form.

Information collected automatically. Pages you view, links you click (including links to partner sites), the approximate location derived from your IP address at country and state level, your device and browser type, and referral source. We record clicks on partner links so we can be paid correctly and so we can see which comparisons are useful.

Information from third parties. If you sign in with Google or Apple, we receive your email address and basic profile information from them. We do not receive your password. Where you use Apple's Hide My Email, we only ever see the relay address.

We do not collect sensitive information as defined by the Privacy Act, and we ask that you don't send us health information through our forms.

How we use it

To provide the site, including saving your checklist and comparisons
To send you the alerts and emails you asked for, and to let you unsubscribe
To understand which destinations and comparisons are useful, so we can improve them
To attribute referrals to partners and receive commission
To detect fraud, abuse and security incidents
To meet our legal obligations

We do not sell your personal information, and we do not share your email address with advertisers or affiliate partners.

Cookies and analytics

We use a small number of cookies:

Essential cookies keep you signed in and remember your privacy choice. These are always on.
Analytics cookies measure how the site is used. These are only set if you consent, and you can change your mind at any time from the privacy banner or the link in the footer.

We use privacy-focused, first-party analytics that does not build cross-site advertising profiles. Where an advertiser's creative is displayed, it is served from our own domain wherever possible.

Who we disclose information to

Service providers who host and run the site — principally Cloudflare (hosting, database and edge network) and our email delivery provider. These providers may store data outside Australia, including in the United States and the European Union. We take reasonable steps to ensure they handle your information consistently with the APPs.
Partners, but only in aggregate or as a referral event. When you click a partner link we pass the fact of the referral, not your identity.
Authorities, where we are required by law.

Overseas disclosure

Cloudflare operates a global network and your data may be processed in data centres outside Australia. By using the site you consent to this transfer. We select providers with recognised security certifications and contractual data protection obligations.

Security and retention

We store data in Cloudflare's D1 database with access restricted to the operators of the site. Sessions use signed, HTTP-only, secure cookies.

We keep account data for as long as your account is open, and for 12 months afterwards in case you return. Analytics events are retained in identifiable form for 14 months, then aggregated. Marketing consent records are kept for 7 years as required.

Your rights

You can:

Access the personal information we hold about you — sign in and use "Download my data", or email us
Correct it, from your account page or by contacting us
Delete your account and associated data, from your account page or by emailing us
Withdraw consent to analytics cookies or marketing emails at any time
Complain to us at [email protected]. We will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au

Notifiable data breaches

If we become aware of a data breach likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

Children

The site is not directed at children under 15 and we do not knowingly collect their personal information.

Changes

We will post any changes to this policy on this page and update the date below. Material changes will be notified by email to account holders.

Last updated 2026-05-01.