Privacy Policy

This Privacy Policy explains how S. Lavie Media LTD (“we”, “us”) collects, uses, shares and protects personal data when you use CheapFlightsFrom.com and our deal alerts (the “Service”), and the rights you have under the privacy laws that apply to you. We keep data collection to the minimum needed to run the Service. We do not sell your personal data, and we do not share it for targeted advertising.

1. Who we are (data controller)

The controller of your personal data (the “database owner” under Israeli law, and the “business” under US state laws) is S. Lavie Media LTD, a company registered in Israel, Hataysim, Ashkelon, Israel. For any privacy matter contact us at privacy@cheapflightsfrom.com.

2. Personal data we collect

Data you give us

Deal alert sign-up: your email address, the departure city you choose, and an optional maximum price. Only if you subscribe.
Contact form and emails: your name, email address, the topic and content of your message, and the IP address it was sent from (used only to prevent spam and abuse).

Data collected automatically

Technical and log data: IP address, browser and device type, pages requested, referring URL, date and time. This is collected by our hosting provider for security, abuse prevention and operation of the Service.
Approximate location: the country associated with your IP address, used only to suggest a nearby departure city. We do not collect precise location.
Referral codes in links: when you click an affiliate link, the link includes an anonymous code identifying our website, the page and the sharing channel (for example “tlv-deal-wa”). It does not contain your name, email or any identifier of you.

We do not collect payment card details, passport data, or any special-category / sensitive personal data. Bookings are made on third-party sites, which collect their own data under their own policies.

3. How and why we use personal data

Sending the deal alerts you requested — legal basis (GDPR): your consent, which you may withdraw at any time.
Operating, securing and improving the Service (preventing abuse, debugging, understanding aggregate usage) — legal basis: our legitimate interests in running a secure, reliable service.
Responding to your messages and requests — legal basis: legitimate interests, or steps at your request.
Complying with legal obligations and establishing or defending legal claims — legal basis: legal obligation and legitimate interests.

We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not build advertising profiles.

4. Cookies and similar technologies

The Service currently uses only strictly necessary cookies and storage required for it to function and remain secure. We do not use advertising or cross-site tracking cookies, so no consent banner is required under the EU ePrivacy Directive or the UK PECR. If we introduce analytics or other non-essential cookies in the future, we will update this policy and, where required by law, ask for your consent first.

When you click through to a booking partner, that partner (and the affiliate network) may set its own cookies on its own website to attribute your booking to us. Those cookies are governed by the partner's cookie and privacy policies. See our Affiliate Disclosure.

We share personal data only as follows:

Service providers (processors) acting on our instructions under data processing agreements: website hosting (Vercel Inc., USA), database hosting (Supabase Inc., servers in the USA), and an email delivery provider (Resend, USA) for alerts and contact form notifications.
Legal reasons: where required by law, court order or a competent authority, or to protect the rights, safety and security of users, the public or S. Lavie Media LTD.
Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.

We do not sell personal data, rent email lists, or “share” personal data for cross-context behavioural advertising (as those terms are defined under the California Consumer Privacy Act).

6. International data transfers

We are based in Israel and our hosting providers store data in the United States. Israel is recognised by the European Commission as providing an adequate level of data protection. Transfers of personal data from the EU/EEA or UK to the United States are protected by the European Commission's Standard Contractual Clauses (and the UK Addendum) incorporated in our providers' data processing agreements, and/or the EU-U.S. Data Privacy Framework where the provider is certified. Transfers out of Israel are made in accordance with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

7. How long we keep data

Alert subscriptions: until you unsubscribe, then deleted within 30 days (we may keep a suppression record of the email address so we never email you again).
Contact form messages and emails you send us: up to 24 months, unless needed longer for a legal claim.
Server logs: according to our hosting provider's retention period, typically no longer than 90 days.

8. Security

We protect personal data with appropriate technical and organisational measures, including encryption in transit (HTTPS/TLS), encryption at rest by our database provider, restricted and password-protected administrative access, least-privilege credentials kept outside our source code, and database row-level security. In line with the Israeli Privacy Protection (Data Security) Regulations, 5777-2017, we maintain access controls and review security regularly. No system is completely secure; if a security incident affecting your personal data occurs, we will notify you and the competent authorities where the law requires.

9. Your rights — summary

Depending on where you live, you may have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; withdraw consent at any time; and complain to a data protection authority. We extend these core rights to all users worldwide, regardless of whether a specific law requires it.

To exercise any right, email privacy@cheapflightsfrom.com from the address concerned (or tell us how to verify your identity). We respond within 30 days (or the shorter or longer period your local law sets, such as 45 days under US state laws or one month under the GDPR). We will not discriminate against you for exercising your rights. You may unsubscribe from alerts at any time with the link in every email.

10. Israel

We process personal data in accordance with the Protection of Privacy Law, 5741-1981 (including Amendment No. 13), the Privacy Protection (Data Security) Regulations, 5777-2017, and the regulations on transfer of data abroad. Under sections 13–14 of the Protection of Privacy Law you may review the information about you held in our database and request its correction or deletion. Commercial emails are sent only with your consent, in accordance with section 30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982, and identify us as the sender with a simple way to refuse further messages. You may also contact the Privacy Protection Authority at the Israeli Ministry of Justice.

11. European Union, EEA and United Kingdom (GDPR)

If you are in the EU/EEA, the General Data Protection Regulation (EU) 2016/679 applies; if you are in the UK, the UK GDPR and the Data Protection Act 2018 apply, together with the Privacy and Electronic Communications Regulations (PECR). The legal bases we rely on are listed in section 3. You have the rights in Articles 15–22 GDPR: access, rectification, erasure (“right to be forgotten”), restriction, data portability, objection (including an absolute right to object to direct marketing), and the right to withdraw consent without affecting prior processing. You have the right to lodge a complaint with the supervisory authority in your country of residence or work (in the UK, the Information Commissioner's Office). We do not carry out automated decision-making or profiling with legal effects.

12. United States

California (CCPA / CPRA)

This section is our notice at collection and privacy policy for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. In the last 12 months we collected these categories of personal information: identifiers (email address, IP address), internet or network activity (pages viewed, log data), approximate geolocation (country), and preferences (departure city, price limit). Sources: you, and automatically from your device. Purposes: as described in section 3. We disclose these categories only to the service providers in section 5, for business purposes. We have not sold or shared personal information, have no actual knowledge of selling or sharing data of consumers under 16, and do not use or disclose sensitive personal information. You have the right to know, access, correct and delete your personal information, to opt out of sale/sharing (although we do not sell or share), to limit use of sensitive personal information (which we do not collect), and not to be discriminated against for exercising these rights. You may use an authorised agent, and we will verify requests by confirming control of the email address on file. We honour Global Privacy Control (GPC) signals as an opt-out of sale/sharing.

Other US states

Residents of states with comprehensive privacy laws — including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island — have rights to confirm processing, access, correct, delete and obtain a copy of their data, and to opt out of targeted advertising, sale and profiling. We do not engage in targeted advertising, sale or profiling. If we decline your request, you may appeal by replying to our decision at privacy@cheapflightsfrom.com; if the appeal is denied, you may contact your state Attorney General.

Federal laws

Our emails comply with the CAN-SPAM Act: they identify us as the sender, include our postal address and a working unsubscribe link, have accurate subject lines, and opt-outs are honoured within 10 business days. We comply with the Children's Online Privacy Protection Act (COPPA) as described in section 15. We do not respond differently to browser “Do Not Track” signals because we do not track you across sites.

13. Canada, Australia and Brazil

Canada: we handle personal information in line with the PIPEDA fair information principles, and send commercial electronic messages only with express consent, sender identification and an unsubscribe mechanism as required by CASL. You may complain to the Office of the Privacy Commissioner of Canada.
Australia: we handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988, and our emails comply with the Spam Act 2003. You may complain to the Office of the Australian Information Commissioner.
Brazil: if the LGPD (Law No. 13,709/2018) applies, you have the rights in its Article 18, including confirmation, access, correction, anonymisation or deletion, portability, information about sharing, and withdrawal of consent. You may complain to the ANPD.

14. Emails and anti-spam laws (summary)

We only send deal alerts to people who have actively subscribed. Every alert identifies S. Lavie Media LTD, includes our address (Hataysim, Ashkelon, Israel) and a one-click unsubscribe link. Unsubscribing takes effect promptly and in any event within the time required by applicable law (for example, 10 business days under CAN-SPAM).

15. Children

The Service is intended for adults and is not directed to children. We do not knowingly collect personal data from children under 13 (US/COPPA) or under 16 (EU/GDPR and other laws), and you must be at least 16 to subscribe to alerts. If you believe a child has provided us with personal data, contact privacy@cheapflightsfrom.com and we will delete it.

16. Changes to this policy

We may update this policy from time to time. The “Effective date” at the top shows the latest version. If changes are material, we will provide notice on the Service or by email before they take effect.

17. Contact

S. Lavie Media LTD
Hataysim, Ashkelon, Israel
Privacy requests: privacy@cheapflightsfrom.com
General: contact@cheapflightsfrom.com or our contact form