Privacy Policy

This Policy applies to personal information we process about Members, visitors, Buyers, and Sellers through the Service. It does not apply to the practices of third parties we do not control, including our payment processor, airlines, and Loyalty Programs, each of which has its own privacy policy. Capitalized terms not defined here have the meaning given in our Terms of Service.

Information you provide:

• Account and profile data: name or display name, email address, password (stored in hashed form by our authentication provider), and seller status.
• Listing and order data: airline programs, prices, quantities, routes, travel dates, cabin, and other details you enter.
• Travel and passenger data: passenger names, travel dates, routes, frequent-flyer details, and booking references (PNRs) necessary to complete a booking. Some of this relates to people other than you, and you confirm you are authorized to provide it.
• Communications: messages you send to other Members through the Service, and messages you send to our support team.
• Dispute and verification information: details, evidence, and documents you submit in connection with a dispute or account verification.

Payment and identity information:

Payments and seller payouts are handled by our third-party payment processor. Your card, bank, and government-identification details are collected and processed directly by the processor; MileMarketplace does not receive or store full payment card numbers, bank credentials, or government-ID documents. We receive limited information such as payment and payout status, the result of identity or account verification, partial card details, and fraud signals.

Information collected automatically:

• Device and log data: IP address, browser type, device identifiers, operating system, referring pages, and timestamps.
• Usage data: pages viewed, features used, and interactions with the Service.
• Cookies and similar technologies: used for authentication, security, preferences, and analytics (see Section 6).

Information from third parties:

We may receive information from our payment processor (such as verification and fraud-prevention results), from service providers, and from publicly available sources, which we may combine with information we already hold.

• Operate, provide, maintain, and improve the Service and its features.
• Create and manage your account and authenticate you.
• Facilitate Listings, Orders, messaging, bookings, escrow, payments, and payouts.
• Communicate with you about transactions, security, support, and changes to the Service or our policies.
• Detect, investigate, and prevent fraud, abuse, security incidents, and other prohibited or unlawful activity, and to comply with anti-money-laundering and sanctions obligations.
• Comply with legal obligations, enforce our Terms, and establish, exercise, or defend legal claims.
• Analyze usage and trends to understand and improve the Service.
• Send marketing or promotional communications where permitted; you can opt out at any time.

Where data-protection laws such as the EU/UK GDPR apply, we process personal information on the following legal bases: performance of a contract with you; our legitimate interests in operating, securing, and improving the Service and preventing fraud; compliance with legal obligations; and your consent where required (for example, certain marketing or cookies). You may withdraw consent at any time without affecting prior processing.

We do not sell your personal information. We share it only as follows:

• With the other party to a transaction: to complete an Order, we share the information reasonably necessary between Buyer and Seller (for example, passenger details a Seller needs to book, or a booking reference the Buyer needs).
• With service providers: our payment processor, database and authentication provider, hosting provider, and analytics and email providers, who process information on our behalf under appropriate obligations.
• For legal and safety reasons: to comply with law, regulation, legal process, or governmental request; to enforce our Terms; to prevent fraud or harm; and to protect the rights, property, and safety of MileMarketplace, our Members, or others.
• In a business transfer: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this Policy.
• With your consent or at your direction.

We use cookies and similar technologies that are strictly necessary for authentication and security (such as session cookies set by our authentication provider), as well as functional and analytics technologies that help us understand usage. You can control cookies through your browser settings; disabling certain cookies may impair the Service, including the ability to stay signed in. We honor recognized opt-out signals where required by law.

We retain personal information for as long as your account is active and as needed to provide the Service. We also retain certain information longer where necessary to comply with legal, tax, accounting, or regulatory obligations, to resolve disputes, to prevent fraud, and to enforce our agreements. Transaction and financial records may be retained for up to seven (7) years or longer where required. When information is no longer needed, we delete or de-identify it.

We use reasonable technical and organizational measures designed to protect personal information, including encryption in transit and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for activity under your account. Notify us immediately at support@milemarketplace.com if you suspect unauthorized access.

We operate from, and our service providers may process data in, the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other jurisdictions that may have different data-protection laws than your own. Where required, we use appropriate safeguards for such transfers.

Depending on where you live, you may have rights to access, correct, update, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email admin@milemarketplace.com. We may need to verify your identity before acting, and some information may be retained as permitted or required by law.

California residents (CCPA/CPRA): you have the right to know the categories and specific pieces of personal information we collect, use, and disclose; to request deletion or correction; and to opt out of the sale or sharing of personal information. We do not sell or share your personal information as those terms are defined under California law. You also have the right not to receive discriminatory treatment for exercising your rights, and you may use an authorized agent to submit a request.

EEA and UK residents (GDPR): in addition to the rights above, you have the right to lodge a complaint with your local supervisory authority.

The Service is intended only for individuals who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at admin@milemarketplace.com and we will take appropriate steps to delete it.

The Service may link to or rely on third-party websites and services, including our payment processor, airlines, and Loyalty Programs. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

We may update this Policy from time to time. If we make material changes, we will update the Last updated date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

For privacy questions or requests, email admin@milemarketplace.com. For general support, contact support@milemarketplace.com.