Privacy Policy

1. Introduction & Overview

Welcome to Maestro Aero ("we," "our," or "us"). This Privacy Policy describes how we collect, store, utilize, share, and protect your personal data when you visit our website (maestroaero.maestrogroup.world), download or use our mobile applications (Android and iOS), participate in the Maestro & Miles loyalty program, or use our smart seat bidding services.

By creating an account, booking a flight ticket, submitting a bid, or using any of our digital services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

To provide seamless airline ticketing, flight tracking, and loyalty rewards, we collect the following categories of information:

A. Passenger & Identification Data

• Personal Details: Full name (matching official government passport/ID), title, date of birth, gender, and nationality.
• Travel Documents: Passport number, issuing country, expiry date, and visa information required for international travel.
• Contact Information: Valid email address, mobile telephone number, and residential/billing address.

B. Flight Booking & Bidding Data

• Flight Reservations: Departure/arrival airports, dates of travel, airline carrier, cabin class, seat selection, and special meal requests.
• Smart Bidding Records: Offered bid amounts, target flight numbers, bidding timestamps, and bid status updates.
• Frequent Flyer Data: Maestro & Miles membership number, tier status (Bronze, Silver, Gold, Platinum), accumulated miles, and transaction history.

C. Financial & Payment Information

• Payment card details (credit/debit card numbers, expiration dates, billing zip codes). Note: Payment cards are processed directly through PCI-DSS Level 1 certified payment gateways. We do not store full raw CVV codes on our servers.
• Mobile financial service accounts (e.g. bKash, Nagad) transaction IDs and payment confirmations.

D. Device, Log & Location Information

• Device model, operating system version (Android / iOS), unique device identifiers, IP address, and browser user-agent.
• Airport location data (with explicit permission) to deliver real-time gate notifications, check-in reminders, and baggage carousel alerts.

3. How We Use Your Information

We process your data strictly for legitimate travel business purposes, including:

• Ticketing & Flight Fulfillment: Issuing electronic airline tickets (e-tickets), communicating with Global Distribution Systems (GDS) and partner airlines (e.g. Mahan Air, Emirates, Biman, etc.).
• Seat Bidding Processing: Relaying your price offers to airlines for vacant seat auctions and confirming seats upon acceptance.
• Maestro & Miles Loyalty Management: Tracking points earned per flight, managing digital QR membership passes, and processing reward redemptions.
• Operational Notifications: Sending real-time flight status alerts, schedule changes, gate updates, and digital boarding pass retrieval.
• Security & Fraud Prevention: Verifying identities, detecting fraudulent transactions, and ensuring safe booking environments.
• Customer Support: Assisting you 24/7 with inquiries, rescheduling, cancellations, and refunds.

4. Data Security & Storage

We implement rigorous technical, organizational, and administrative measures to secure your personal data against unauthorized access, loss, destruction, or alteration:

• Encryption: All data transmissions are encrypted using industry-standard TLS 1.3 encryption (HTTPS). Sensitive passport and stored credentials are cryptographically encrypted at rest.
• PCI-DSS Compliance: All credit card transactions are handled according to Payment Card Industry Data Security Standards.
• Access Controls: Access to user travel data is strictly restricted on a least-privilege, need-to-know basis among authorized personnel.

5. Information Sharing & Third Parties

We will never sell or rent your personal information. We disclose data solely to:

• Airline Partners & Ground Handlers: Airlines operating your booked flight segments to fulfill your transport contract.
• Airport & Immigration Authorities: Government customs, border control, and aviation security agencies as mandated by applicable national and international law (e.g., APIS requirements).
• Payment Processors & Fraud Systems: Regulated banking partners and payment gateways to process transactions securely.
• Service Providers: Cloud infrastructure, SMS/email gateway providers, and customer support CRM software bound by strict non-disclosure obligations.

6. Your Rights & Choices

Depending on your jurisdiction (such as GDPR, applicable local data protection acts), you have rights regarding your personal information:

• Right of Access: You can view your profile, booking history, and Maestro & Miles points in the app anytime.
• Right to Rectification: You can update personal details or correct inaccurate data by visiting your profile or contacting support.
• Right to Erasure: You may request the deletion of your account and personal records, subject to regulatory retention obligations. You can submit an erasure request directly via our Account Deletion Page.
• Marketing Opt-out: You can unsubscribe from promotional flight deal emails or push notifications anytime via app settings.

7. Cookies & Tracking Technologies

Our web portal uses functional cookies to remember your airport preferences, recent flight searches, and active login sessions. You can configure your browser to decline cookies, though certain features of our interactive booking system may become limited.

8. Contact Our Privacy Office

If you have any questions, requests, or concerns regarding this Privacy Policy or how your travel data is handled, please contact our Data Protection Officer:

Maestro Aero - Privacy Team
Parent Entity: Maestro Group
Website: maestroaero.maestrogroup.world
Email: privacy@maestrogroup.world / support@maestrogroup.world