Legal

Privacy Policy

Policy terms last updated: October 2026

Catchaflight is operated by DRYMS Pty Ltd (ABN 81 678 371 107, ACN 678 371 107) ("we", "us", "our"). This policy explains how we collect, use, store, and disclose your personal information when you use our website and services. We handle personal information in line with the Australian Privacy Act 1988 and, where applicable, other privacy laws in the regions we serve.

Information we collect

We collect information you provide directly, such as your name, contact details (email and phone), passenger details for each traveller (names, date of birth, gender, and passport or travel-document details where a booking requires them), travel preferences, and the details needed to make a booking request. When you request a callback or contact us, we collect the details you submit. When you make a booking request, your payment card details are collected directly by our payment provider (Stripe) — we do not store your card number, expiry, or security code on our own systems; we hold only payment authorization metadata such as the authorization reference, amount, currency, and billing country. We also collect limited technical information automatically, such as your IP address, approximate location, device and browser type, server logs, and analytics data about how the site is used — with your consent, or by default for visitors in the United States as described under "Cookies and analytics".

How we use your information

We use your information to search for and arrange travel, communicate with you about your booking, process authorizations and payments, provide customer support before, during, and after your trip, comply with legal obligations, and improve our services. A travel expert uses your details to find and confirm the right fare for you.

Third parties we work with

To provide our services we share information, only as needed, with trusted providers: our booking and content partner (Duffel) and the airlines, hotels, and suppliers required to fulfil your booking; our payment processor (Stripe), which collects and handles your card details directly for authorization and payment capture; our email delivery provider (Resend), used to send booking summaries and notifications; our live chat provider (Crisp), which may set cookies and process messages and limited visitor data when you use the chat; our hosting provider (Vercel) and our database provider (Upstash), which store booking records and operational data on our behalf; and Google measurement services: Google Analytics, which processes limited usage data if you accept optional measurement or, for visitors in the United States, by default unless you opt out; and Google Ads conversion measurement, which processes conversion data only if you accept optional measurement (see "Cookies and analytics" for a consent-denied signal our Google tag may send when Google Analytics runs). For website-call measurement, Google may temporarily replace the displayed US phone number with a Google forwarding number for visitors who arrived from an ad. We require these providers to protect your information and use it only for the services they provide to us. Some providers may process data outside Australia, including in the United States.

Cookies and analytics

Our website uses cookies and similar technologies in two ways. Essential cookies and browser storage keep the site working — for example remembering your search, your currency preference, and your cookie choice. Optional measurement (Google Analytics and Google Ads conversion measurement) is used only if you choose "Accept measurement" in our cookie banner, except for Google Analytics for visitors in the United States as described below: until you accept, the Google measurement script does not load, and if you reject, it stays off. For visitors who arrive from a Google ad, website-call measurement may temporarily replace our displayed US phone number with a Google forwarding number so we can measure whether the ad led to a qualifying call. You can change your choice at any time using the "Cookie settings" link in the footer, and you can also control cookies through your browser settings. If you accept measurement, Google Ads measurement storage and related consent signals may be enabled so qualifying ad-driven calls can be attributed. Ad personalization remains disabled. When you reject or withdraw, we stop sending measurement data straight away, tell Google's tags that consent is denied, and delete the Google measurement cookies set on our site.

Visitors in the United States. To understand how our site is used, we use Google Analytics by default for visitors in the 50 US states. Advertising cookies and Google Ads conversion measurement stay off unless you accept, and ad personalization is always disabled. Because our Google Analytics tag is linked to our Google Ads account, when the tag loads it may send Google one consent-denied signal for that account; this signal does not use advertising cookies, ad personalization or ad-click identifiers. You can turn Google Analytics off at any time by choosing "Reject" in our cookie banner or via "Cookie settings", or by enabling Global Privacy Control in your browser. We determine your state from your approximate location, which we derive from your IP address (we do not store it for this purpose); if we cannot determine it, Google Analytics stays off until you accept.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of personal information: we do not use Google Analytics by default, and we do not enable advertising cookies or Google Ads conversion measurement, even if you choose "Accept measurement". Google Analytics then runs only if you accept it; if it does, the consent-denied signal described above may also be sent.

How we store and protect information

We take reasonable steps to protect your information from misuse, loss, and unauthorized access, including secure handling of payment data through our payment provider. We keep personal information only as long as needed for the purposes described here or as required by law.

Your rights

You may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it, subject to legal limits. Depending on where you live, you may have additional rights under local law. To make a request, contact us using the details below.

Contact us

For any privacy question or request, email support@catchaflight.com.au or call us. Our registered office is 30 Auburn Parade, Cringila, NSW 2502, Australia.