Ocean Air Travel · Version 2.1 · Effective 15 October 2026
1. Definitions and interpretation
1.1In this Privacy Notice, unless the context otherwise requires:
(a)“Act” means the Data Protection Act 2023 of Seychelles, together with any regulations made under it, as amended or re-enacted from time to time;
(b)“Agency”, “we”, “us” and “our” mean Ocean Air Travel, of Ocean Gate House, Ground Floor, Mahé, Republic of Seychelles;
(c)“Commission” means the Information Commission of Seychelles, or such other authority as is for the time being responsible for the supervision of data protection in Seychelles;
(d)“Personal Data”, “processing”, “data controller” and “data processor” have the meanings given to them in the Act;
(e)“Services” means the preparation of travel quotations, the reservation and issue of air tickets and related travel products, and the management of resulting bookings;
(f)“Traveller” means any individual for whom a quotation or booking is requested; and
(g)“you” and “your” mean the individual submitting a request through our website, and, where the context requires, each Traveller whose Personal Data is supplied.
1.2Headings are for convenience only and do not affect the interpretation of this Privacy Notice.
2. Data controller
2.1For the purposes of the Act, the Agency is the data controller of the Personal Data described in this Privacy Notice.
2.2Our contact details are: Ocean Air Travel, Ocean Gate House, Ground Floor, Mahé, Seychelles; telephone +248 4 325 077; email oceanairtravel1@gmail.com. All enquiries, requests and complaints relating to Personal Data should be addressed to us at those details.
3. Personal Data we collect
3.1When you submit a request for a quotation we collect: your name; your email address; your telephone or WhatsApp number; the origin, destination(s), dates and type of travel requested; and the number of passengers.
3.2Where you proceed to a booking, we will ask you to provide the following in respect of each Traveller: full name; date of birth; sex or gender as shown in the passport; nationality; passport number, country of issue and date of expiry; an image of the passport identification page; visa details and, where required, an image of the visa; frequent-flyer membership number; a contact telephone number and email address; emergency-contact details; and any special requests.
3.3Meal preferences and requests for special assistance may reveal information concerning health or religious belief, which the Act treats as sensitive Personal Data. The provision of such information is entirely optional and is processed only on the basis of your explicit consent, solely so that it can be communicated to the relevant carrier or supplier.
3.4Our website does not record your internet protocol (IP) address or browser identifier itself. Our hosting provider may keep standard server logs, as described in clause 9.2.
3.5We keep a record of our correspondence with you, including emails sent by us in connection with your request, and of the status and history of your quotation or booking.
3.6You must ensure that all Personal Data you provide is accurate and complete. Where you provide Personal Data relating to any other person, you warrant that you are authorised to do so and that you have informed that person of this Privacy Notice.
4. Purposes and lawful bases of processing
4.1We process Personal Data only for the following purposes, and in each case on the lawful basis stated:
(a)to prepare and communicate quotations and to respond to your enquiries: your consent, and the taking of steps at your request prior to entering into a contract;
(b)to reserve, ticket, amend and administer bookings, and to communicate with you, carriers and suppliers for that purpose: your consent and the performance of the contract between you and us;
(c)to process sensitive Personal Data referred to in clause 3.3: your explicit consent;
(d)to maintain business and accounting records, to prevent fraud, abuse and unauthorised access, to secure our systems, and to establish, exercise or defend legal claims: our legitimate interests, which are not overridden by your rights and interests; and
(e)to comply with any obligation imposed on us by the laws of Seychelles or by a competent authority: compliance with a legal obligation.
4.2We do not sell, rent or otherwise trade Personal Data. We do not use Personal Data for direct marketing unless you have separately and expressly requested or consented to it, and any such consent may be withdrawn at any time.
4.3We do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.
5. Disclosure of Personal Data
5.1We disclose Personal Data only to the extent necessary for the purposes stated in clause 4, and only to the following categories of recipient:
(a)airlines, global distribution and other reservation systems, consolidators and travel suppliers through which a quotation or booking is made;
(b)an insurance provider or agent, but only where you ask us to introduce you;
(c)immigration, border, customs, transport-security and other public authorities, where required for your travel or by law;
(d)service providers acting on our behalf and under our instructions, including providers of hosting, data storage, email and messaging services, who are bound to protect Personal Data and to use it only for the purposes for which it is disclosed; and
(e)our professional advisers, law-enforcement bodies, courts and regulators, where disclosure is required or permitted by law.
5.2Communications that you choose to send to us by WhatsApp, email or telephone pass through the networks and platforms of third parties, whose own terms and privacy policies govern their handling of that communication. We are not responsible for those third-party platforms.
6. Transfers outside Seychelles
6.1Carriers, reservation systems, suppliers and certain of our service providers are located, or store data, outside Seychelles. By submitting Personal Data you acknowledge that it may be transferred to and processed in other countries, which may not provide a level of protection equivalent to that under the Act.
6.2Where we transfer Personal Data outside Seychelles we do so only where the transfer is necessary for the performance of the contract with you or for steps taken at your request, where you have consented, or where appropriate safeguards required by the Act are in place, and we limit the data transferred to what is necessary.
7. Retention
7.1We retain Personal Data for no longer than is necessary for the purposes for which it was collected, and in any event as follows, unless a longer period is required by law:
(a)passport and visa data and images: erased 45 days after the booking is completed, closed or abandoned;
(b)quotation and booking records: erased 2 years after the matter is completed or closed; and
(c)email transmission logs: erased after 90 days.
7.2Where you exercise a right of erasure that is available to you under the Act, we will erase the relevant Personal Data without undue delay, save where we are required or permitted by law to retain it.
7.3For protection against loss, we keep back-up copies of our records on equipment that we control. Back-up copies are replaced on a rolling basis, so Personal Data that we have erased may remain in a back-up for up to 60 days before it is overwritten; it is not used for any other purpose and is not restored except to recover from a system failure.
8. Security
8.1We implement appropriate technical and organisational measures to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include: transmission of data over encrypted (HTTPS) connections; access to Traveller data by authorised staff only; and deletion in accordance with clause 7.
8.2No method of transmission over the internet or of electronic storage is wholly secure, and we cannot guarantee absolute security.
8.3In the event of a personal data breach, we will notify the Commission and the affected individuals to the extent and within the time required by the Act.
9. Cookies and similar technologies
9.1Our website does not set cookies and does not use advertising or other tracking technologies. We do not track your browsing across websites or build a profile of you. The only item it keeps is your cookie choice, saved in your browser’s local storage on your own device so that we do not ask you again; it is not sent to us. Optional analytics are off unless you allow them.
9.2When your browser loads our website it connects to servers operated by third parties that deliver content needed to display it, for example Fontshare, which supplies the typeface used on the website. In doing so those providers necessarily receive your IP address and certain technical information about your browser and device, and they process it in accordance with their own privacy policies. Our website hosting provider may likewise keep standard server logs for security and operational purposes.
9.3Our website does not currently use a third-party security verification or bot-detection service. Quotation requests are made by email, and the contents of your request are handled by your own email provider and ours.
9.4Links to third-party websites and services, such as WhatsApp and Google Search, are provided for your convenience. We do not control those services and are not responsible for their use of cookies or Personal Data.
9.5Our website does not set any cookie for visitors.
9.6If we introduce cookies or similar technologies that are not strictly necessary, we will update this Privacy Notice and obtain your consent before they are used.
10. Your rights
10.1Subject to the Act and to any exemptions it contains, you have the right:
(a)to be informed of the processing of your Personal Data and to request access to it;
(b)to request the rectification of Personal Data that is inaccurate or incomplete;
(c)to request the erasure of Personal Data where there is no continuing lawful ground for its retention;
(d)to request the restriction of processing, or to object to processing based on our legitimate interests; and
(e)to withdraw any consent given, at any time.
10.2Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Where Personal Data is necessary for a quotation or booking, withdrawal may prevent us from continuing to provide the Services, and the terms of any carrier or supplier in respect of a booking already made will continue to apply.
10.3To exercise any of these rights, contact us at oceanairtravel1@gmail.com or on +248 4 325 077. We may require reasonable proof of identity before acting on a request, and will respond within the period prescribed by the Act.
11. Provision of Personal Data
11.1The provision of Personal Data is voluntary. However, the data described in clauses 3.1 and 3.2 is necessary for us to prepare a quotation or to make and issue a booking, and carriers and border authorities may refuse carriage if it is incomplete or inaccurate. If you do not provide it, we may be unable to provide the Services.
12. Minors
12.1Our Services are directed to adults. If you provide Personal Data relating to a Traveller under the age of 18, you confirm that you are that Traveller’s parent or legal guardian, or that you hold that person’s parent’s or legal guardian’s authority to provide it and to give the consents set out in this Privacy Notice on the Traveller’s behalf.
13. Complaints
13.1If you consider that we have processed Personal Data in breach of the Act, we invite you to contact us first so that we may seek to resolve the matter.
13.2Without prejudice to any other remedy available to you, you have the right to lodge a complaint with the Commission.
14. Amendments
14.1We may amend this Privacy Notice from time to time. The current version will be published on our website and identified by its version number and effective date. Where an amendment materially changes the purposes for which we process Personal Data, we will seek your fresh consent where the Act so requires.
15. Governing law
15.1This Privacy Notice is governed by and shall be construed in accordance with the laws of the Republic of Seychelles.
Scroll to the end to enable.
Your cookie choices
We use only the cookies the site needs to work and stay secure. Optional cookies for analytics are off unless you allow them. Privacy notice
