GDPR Privacy Notice

This GDPR Privacy Notice explains how Bcfares.com, managed by JK SANDHU INC, handles personal data where the General Data Protection Regulation (GDPR) applies.

The GDPR establishes principles governing lawful and transparent processing, purpose limitation, data minimization, accuracy, storage limitation, security, and accountability.

1. Who We Are

Bcfares.com
Managed by JK SANDHU INC
1064 VILLA AVE APT 105D
CLOVIS, CA 93612
United States

For privacy-related requests, please use the contact information provided on the Bcfares.com website.

2. Personal Data We May Process

Depending on your interaction with us, personal data may include:

  • Name
  • Email address
  • Telephone number
  • Address
  • Travel preferences
  • Flight and itinerary information
  • Passenger information
  • Booking and ticket information
  • Payment-related information
  • Communications with customer support
  • IP address and technical information
  • Cookie and online-identification information

We seek to collect only information reasonably necessary for the applicable purpose.

3. Purposes of Processing

We may process personal data to:

  • Respond to inquiries
  • Provide travel and booking services
  • Process reservations
  • Communicate with customers
  • Provide customer support
  • Process payments
  • Handle changes and cancellations
  • Prevent fraud
  • Maintain security
  • Improve our services
  • Send marketing communications where legally permitted
  • Comply with legal obligations
  • Establish, exercise, or defend legal claims

4. Legal Bases

Where GDPR applies, personal data may be processed on one or more applicable legal bases, including:

  • Performance of a contract
  • Taking steps at your request before entering into a contract
  • Compliance with a legal obligation
  • Legitimate interests, where those interests are not overridden by your rights
  • Consent, where consent is required or relied upon

The appropriate legal basis depends on the specific processing activity.

5. Data Sharing

We may disclose personal data to service providers and other parties where reasonably necessary for providing requested services.

Recipients may include:

  • Airlines and travel providers
  • Payment processors
  • Technology providers
  • Hosting providers
  • Customer-support providers
  • Fraud-prevention providers
  • Professional advisers
  • Government or regulatory authorities where legally required

Where required, appropriate contractual or other safeguards may be used.

6. International Transfers

As a U.S.-based business, personal data may be processed in the United States or other countries outside the European Economic Area.

Where GDPR requires safeguards for international transfers, we will seek to use an appropriate lawful transfer mechanism.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the relevant purposes, including fulfilling contractual obligations, maintaining business records, complying with legal requirements, resolving disputes, and protecting our legitimate interests.

Retention periods may vary depending on the type of information.

8. Your GDPR Rights

Where GDPR applies, individuals may have rights including:

  • Right to be informed
  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Rights relating to certain automated decision-making and profiling

These rights are subject to conditions and exceptions under the GDPR.

9. Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

10. Direct Marketing

Where permitted, we may send information about services or offers that may be relevant to you.

You may object to direct marketing at any time. GDPR guidance recognizes a specific right to object to processing for direct marketing purposes.

11. Exercising Your Rights

To exercise an applicable GDPR right, contact Bcfares.com through the privacy contact information provided on our website.

We may request reasonable information to verify your identity before fulfilling a request.

Under GDPR guidance, organizations generally respond to data-subject requests without undue delay and, in principle, within one month.

12. Complaints

If you believe your data-protection rights have not been respected, you may have the right to lodge a complaint with the relevant data-protection supervisory authority in the country where you live, work, or where an alleged infringement occurred.

13. Automated Decision-Making

We do not intend to make decisions producing legal or similarly significant effects based solely on automated processing unless permitted by applicable law and subject to required safeguards.

14. Changes to This Notice

We may update this GDPR Privacy Notice periodically to reflect changes in our practices, services, or applicable law.

The latest version will be posted on this page.

15. Contact

JK SANDHU INC
1064 VILLA AVE APT 105D
CLOVIS, CA 93612
United States.

For GDPR or privacy-related inquiries, please contact Bcfares.com using the current contact method published on the website.