Carreh legal
Privacy Policy
Flight Board is a product of Carreh. This document is Carreh's and applies across every Carreh product, including Flight Board. The canonical copy lives at carreh.com.
Introduction
Carreh respects and protects the privacy of its users. This Privacy Policy explains how personal information is collected, used, stored, and protected when clients interact with the Carreh website and services. By using Carreh services, you agree to the practices described in this policy.
Information We Collect
Personal Information
Full name, date of birth, gender, nationality, and passport details.
Contact Information
Email address, phone number, and residential address.
Travel Information
Travel dates, destinations, travel history, and travel documentation details.
Financial Information
Payment details and billing information. Payment transactions are processed securely through third-party payment providers (Stripe). Carreh does not store credit card numbers.
How We Use Information
Personal information is used to:
- Provide document assistance services
- Process travel-related services
- Manage client accounts
- Process payments
- Communicate with clients regarding their orders
- Comply with legal requirements
Data Sharing
Information may be shared with:
- Embassies or immigration authorities (for travel documentation)
- Airlines and our flight-booking partner Duffel (to create and manage flight bookings)
- Technology service providers supporting the platform
Carreh does not sell personal data to third parties.
Data Security
Carreh implements technical and organizational measures to protect personal information from unauthorized access, alteration, or disclosure. Data is encrypted in transit and at rest using industry-standard protocols.
User Rights (GDPR)
Under the General Data Protection Regulation, users have the right to:
- Access their personal data
- Correct inaccurate data
- Request deletion of personal data
- Object to certain data processing
- Request data portability
Requests may be made via support@carreh.com.
Data Retention
Personal data is retained for as long as necessary to provide the service and to comply with our legal obligations. Most account data is deleted when you close your account or ask us to remove it. Identity and travel-document records collected for anti-money-laundering and sanctions checks are an exception: we are required to keep these for 8 years from the date they were submitted, and a deletion request cannot shorten that period. You may ask us to delete your data at any time, and we will delete everything we are not legally required to retain.