01 Data and purpose
We process contact details, itinerary, travel preferences, confirmation that the privacy notice was read and technical data used to prevent abuse. These data are used to answer enquiries, prepare charter options, document communication and protect the service.
02 Usage measurement and enquiry source
Cloudflare Web Analytics is configured to measure aggregated page usage and performance without cookies or cross-site visitor profiles. Its browser measurement script is not injected for visitors from the EU. During the browser session, draft journey and contact entries, the first landing path, external referrer hostname, campaign parameters and a temporary journey reference are held in session storage. The draft is cleared after a successful submission or when a new journey is started. Attribution data are attached to an enquiry only when the form is sent. Entered itinerary, date, contact details and free text are not sent as analytics events.
03 Recipients and transfers
Data is accessible only to authorised staff and necessary service providers. Supabase is used for validated form processing and database storage. Microsoft 365 through Microsoft Graph is used for customer confirmations and internal notification emails. Where enabled, Cloudflare Turnstile protects forms against abuse. For this security check, technical connection data including the IP address and the verification token are sent to Cloudflare. hCaptcha may be used as a fallback and receives equivalent verification data when active. Journey details are shared with prospective licensed carriers only to the extent required to source the request. These providers may process data outside Switzerland. Their applicable data protection agreements and appropriate safeguards govern those transfers.
04 Ground transport requests
When ground transport is requested, the information needed to source and arrange the service may also be shared with prospective ground transport providers. This may include the flight schedule, airport or handling location, pickup point, destination address, passenger and baggage count, contact details and stated service preferences. Data is shared only to the extent required for the request.
05 Retention and rights
Enquiry records are scheduled for review 24 months after submission. We retain them only for as long as needed to handle and document the request, comply with applicable legal retention duties, or establish, exercise or defend legal claims. When no retention basis remains, the data are deleted or anonymised. You may request access, correction or deletion, subject to applicable law.
06 Security and contact
The public form uses a validated server function with restricted database access. Passport copies and payment information are requested later through the agreed secure channel. Privacy enquiries: charter@swissjetoffice.com.