Privacy notice

Who is responsible

mvfare runs mvfare.com and decides how your personal data is used. Contact us at hello@mvfare.com about anything in this notice.

What we collect

• Contact details: the booker's name, email address and mobile number.
• Traveller details: names, title, gender, date of birth, nationality, and passport or national ID number, issuing country and expiry date.
• Booking records: flights, prices, payment status, receipts, and a record that you accepted our terms and the dangerous goods restrictions (with the date, time, IP address and browser).
• Payment: payments are made on our bank's secure page. We receive the payment result, not your card number.
• Technical data: IP address and basic device information, used for security and to prevent fraud.

Why we use it

• To book your flights with the airline and issue your tickets.
• To meet legal requirements, such as passenger information that airlines must send to Maldives Customs, tax records, and dangerous goods rules.
• To send your confirmation, receipts and important updates about your trip.
• To prevent fraud and keep our service secure.

We don't sell your data, and we don't send marketing unless you ask to hear from us.

Who we share it with

• The airlines on your booking, and the flight booking platform we use to reach them (currently Duffel, for international flights).
• Bank of Maldives, which processes card payments.
• Our service providers: Vercel (website hosting), Supabase (database hosting, in the Mumbai region) and Resend (email delivery).
• Government authorities, where the law requires it.

Airlines and some of our providers are outside the Maldives, so your data may be processed in other countries to complete your booking.

How long we keep it

• Passport and ID card numbers are deleted automatically 30 days after your trip ends.
• Other booking and payment records are kept for as long as tax and accounting law requires, then deleted.

How we protect it

Passport and ID numbers are encrypted in our database. Only our server can reach the database, staff access is limited to what they need, and everything is sent over encrypted connections.

Cookies

We use only essential cookies: to remember your currency, to let you view your own bookings, and to keep staff signed in. We don't use advertising or tracking cookies.

Your choices

You can ask to see the data we hold about you, correct it, or delete it where we don't need to keep it by law. Email us and we'll reply within 30 days. The Maldives doesn't yet have a general data protection law; we follow recognised good practice and, for visitors from the EU and UK, the rights those laws give you.