Privacy Policy

Last updated: 1 August 2026

This Privacy Policy explains how Fly With Us (“we”, “us”, “our”) collects, uses, shares, and protects personal information when you visit www.flywithus.aero, contact us, or book a flight, day tour, or Bed & Fly stay.

1. Who we are (data controller)

The data controller for this website is Fly With Us trading as Fly With Us, a gyrocopter tour operator based in Guanacaste, Costa Rica.

• Sámara base — Playa Sámara, Guanacaste, Costa Rica
• Tamarindo base — Tamarindo, Guanacaste, Costa Rica

Website: https://www.flywithus.aero
Privacy requests: info@flywithus.aero

We do not currently appoint an EU Article 27 representative. If that becomes required for our operations, we will update this policy.

2. Scope

This policy covers personal data we process when you browse our site, contact us (including WhatsApp), or book flights, day tours, or Bed & Fly accommodation — online or in person at our bases.

It does not replace the privacy policies of third parties that process data under their own terms — including Tab Travel (checkout and payments), Google (Analytics), Meta (WhatsApp, Instagram), and our hosting/CDN providers. When you leave our site or use those services, their policies apply.

3. Information we collect

3.1 Information you provide

• Identity & contact — name, email address, phone / WhatsApp number
• Booking details — preferred base (Sámara or Tamarindo), preferred date/time, party size, flight duration or tour, and special requests
• Passenger weights — collected for aircraft balance and flight safety. This is operational safety data, not medical diagnosis data. We use it only to confirm seating configuration and whether a flight can proceed safely
• Messages — content you send by WhatsApp, email, or other channels
• Bed & Fly — stay dates, guest count, and preferred partner lodging when you enquire or book

3.2 Information collected automatically

• Device and usage data — IP address, browser/device type, pages viewed, referring URL, approximate location derived from IP, and timestamps
• Cookies and similar technologies — see Section 8

3.3 Payment information

Card payments for flights, day tours, and Bed & Fly are processed by Tab Travel. Tab processes card payments for bookings made through the site and in person at our bases. We do not receive or store full card numbers, CVV, or full payment credentials on our servers. Tab processes payment data under its own privacy and security practices. We may receive booking confirmation details (name, product, amount, status) needed to operate your experience.

3.4 Categories of personal information (US state privacy)

For visitors in California and other US states with similar laws, the categories of personal information we may collect in the prior 12 months include:

We do not knowingly collect Social Security numbers, drivers’ licence numbers, precise GPS tracking, or biometric identifiers through this website.

4. How we use information

• Arrange, confirm, and operate your flight or stay
• Respond to enquiries and provide customer support
• Meet safety and operational needs (including weight limits and weather holds)
• Comply with legal and aviation-related obligations
• Secure the site and prevent abuse or fraud
• Understand site traffic and improve the experience — only with analytics consent where required

We do not sell your personal information for money. We do not use advertising pixels or share data for cross-context behavioural advertising on this site. We do not use your data for automated decisions that produce legal or similarly significant effects without human involvement.

Newsletter and marketing email

We do not currently operate an email newsletter or mailing list, and this website does not collect email addresses for marketing. If we introduce a newsletter or similar marketing email programme, signup will require a separate unticked consent checkbox, and we will name the email service provider in this policy before that feature launches.

5. Legal bases (EEA / UK and similar)

Where GDPR, UK GDPR, or similar laws apply, we rely on:

• Contract — to take steps at your request before a booking and to perform the booking
• Consent — for non-essential cookies and Google Analytics 4. Consent is collected via our cookie banner before GA4 loads; the analytics script is never injected until you Accept
• Legitimate interests — site security, fraud prevention, and basic operations that do not override your rights
• Legal obligation — where the law requires us to keep or disclose records

You may withdraw analytics consent at any time by clearing site data for flywithus.aero in your browser (removes the stored choice and GA cookies) or by emailing us. After clearing, the banner appears again so you can choose Reject. Withdrawal does not affect the lawfulness of processing before withdrawal.

6. Costa Rica (Law 8968 / PRODHAB)

As a Costa Rica–based operator, we process personal data in line with Costa Rica’s Law 8968 on the Protection of the Person against the Processing of their Personal Data and related PRODHAB guidance: we collect what we need for stated purposes, keep it secure, and honour lawful access and correction requests. Contact info@flywithus.aero for local privacy requests.

7. Sharing with third parties

We share personal data only as needed to run the business:

We do not share personal data with unaffiliated third parties for their own independent marketing.

8. Cookies and similar technologies

We use cookies and similar technologies (including local storage) in these categories:

• Necessary — required for the site to function (for example, storing your cookie choice). Always on.
• Analytics — Google Analytics 4. The GA4 script is injected only after you Accept in our cookie banner. If you Reject, GA4 is not loaded and no analytics cookies are set by us.

We do not currently use marketing / advertising pixels (including the Meta Pixel). The banner offers Accept or Reject. You can also block or delete cookies in your browser. See Section 5 for how to withdraw analytics consent after Accepting.

8.1 Cookie inventory (typical)

Exact names and lifetimes can change when Google updates its tags. Typical cookies include:

9. Google Analytics 4

When analytics consent is given, we use Google Analytics 4 (GA4) to understand how visitors use flywithus.aero — for example pages viewed, traffic sources, and interactions such as Book or WhatsApp clicks. GA4 uses cookies and similar identifiers.

Google processes this data as described in Google Analytics privacy documentation and How Google uses information from sites or apps that use our services. Under Google Analytics Terms of Service, we disclose that use here and provide those links.

IP addresses are handled under Google’s current GA4 practices (Google-managed IP handling). We do not intentionally send names, email addresses, phone numbers, or other clear personal identifiers into GA4. Default event-level retention in GA4 is commonly up to 14 months unless we configure a shorter period in the property.

You can limit Analytics collection by:

• Rejecting analytics cookies in our banner
• Installing the Google Analytics Opt-out Browser Add-on
• Adjusting Google Ads Settings where relevant

10. WhatsApp

If you contact us on WhatsApp, Meta Platforms processes your messages and account data under WhatsApp’s terms. We use the conversation content to answer you and arrange your booking. Do not send sensitive data we do not need — especially full payment card numbers — over chat.

11. International transfers

We are based in Costa Rica. Providers such as Google, Meta (WhatsApp / Instagram), Vercel, and Tab Travel may process data in the United States and other countries. Where required, we rely on appropriate safeguards offered by those providers (for example, standard contractual clauses or equivalent mechanisms) and on your consent for optional analytics (GA4).

12. Retention

13. Your rights

Depending on where you live (Costa Rica Law 8968 / PRODHAB, GDPR / UK GDPR, CCPA/CPRA and similar US state laws), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion
• Object to or restrict certain processing
• Data portability (where applicable)
• Withdraw consent for analytics cookies at any time
• Lodge a complaint with a supervisory authority in your country
• For California residents: know, delete, and correct personal information, and opt out of “sale” or “sharing” for cross-context behavioural advertising

Sale / sharing: We do not sell personal information for money. We do not currently use advertising pixels or otherwise share personal information for cross-context behavioural advertising on this site.

How to exercise rights: email info@flywithus.aero with “Privacy request” in the subject. We may need to verify your identity. We aim to respond within 30 days (or sooner if local law requires). Authorised agents may submit requests where the law allows; we may still verify the consumer directly.

14. Children

Our online services are aimed at adults arranging tourism experiences. Minors may fly only with appropriate parental / guardian involvement in the booking. We do not knowingly collect personal data from children online for marketing. Contact us if you believe we have collected a child’s data in error and we will delete it where required.

15. Security

We use HTTPS on the website and rely on reputable processors (Tab, Vercel, Google, Meta for WhatsApp) for their security controls. We take reasonable organisational measures to limit access to booking and enquiry data. No method of transmission or storage is completely secure. Please use strong unique passwords on your own accounts and avoid sending unnecessary sensitive information.

16. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be highlighted on the site or via a renewed cookie prompt.

17. Contact

Privacy questions and requests: info@flywithus.aero.

This page is a privacy policy, not full booking terms. Cancellation, weather, and liability rules are confirmed at checkout (Tab Travel) and/or in writing when you book. Ask us if you need a written commercial terms copy.