Privacy Policy

1. Information We Collect

We collect information you provide when creating an account (email address, password), making a booking (passenger names, contact details), and contacting us (name, email, message content). We also automatically collect technical data including your IP address, browser type, device information, and pages visited.

2. How We Use Your Data

We use your personal data to: process and manage your train ticket bookings; send booking confirmations and e-tickets; provide customer support; improve our website and services; comply with legal obligations. We do not sell your personal data to third parties.

3. Payment Data

All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. Your credit card numbers and payment details are never stored on our servers. Stripe processes your payment data in accordance with their own privacy policy. We also support Alipay and WeChat Pay, which process data per their respective privacy policies.

4. Data Sharing

We share your data only when necessary: with rail operators (Eurostar, etc.) to fulfill your booking; with payment processors (Stripe, Alipay, WeChat Pay) to process payments; with analytics services (Google Analytics) to improve our website; when required by law or legal proceedings. All third-party partners are bound by data protection agreements.

5. Cookies

We use essential cookies for website functionality (login sessions, language preferences) and analytics cookies (Google Analytics) to understand how visitors use our site. You can control cookie settings through your browser. Disabling essential cookies may affect website functionality.

6. Data Retention & Security

We retain your account data for as long as your account is active. Booking records are retained for 3 years for legal and accounting purposes. We implement industry-standard security measures including SSL/TLS encryption, secure server infrastructure, and access controls to protect your data.

7. Your Rights

Under applicable data protection laws (including GDPR for EU residents), you have the right to: access your personal data; correct inaccurate data; request deletion of your data; restrict processing of your data; data portability; object to processing. To exercise these rights, contact us at support@flipearth.com.

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact: FlipEarth Pte. Ltd., Email: support@flipearth.com. We will respond to your request within 30 days.