Privacy Policy

1. Overview & Data Fiduciary Identity

KC Air (“KC Air”, “we”, “us”, or “our”) operates as an air charter broker in India. In compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of the Republic of India, this policy explains how we collect, process, store, and protect digital personal data obtained from clients, corporate representatives, passengers, and website visitors.

KC Air acts as a Data Fiduciary regarding the personal information you submit via our quote forms, messaging channels, and charter contracts.

2. Personal Data We Collect

To procure on-demand charter flights and fulfill mandatory Directorate General of Civil Aviation (DGCA) and Bureau of Civil Aviation Security (BCAS) requirements, we collect:

• Contact Identifiers: Full legal name, official email address, and mobile phone number.
• Charter Flight Itinerary: Origin airport, destination, flight dates, passenger count, luggage dimensions, and catering/medical needs.
• Passenger Manifest Information: When a flight is confirmed, we collect passenger legal names, nationality, gender, date of birth, and government-issued photo identification details (Aadhaar number, Passport number, or PAN card) as strictly mandated by DGCA CAR Section 3 regulations.
• Technical & Analytics Data: IP address, browser type, and anonymous aggregate usage metrics gathered only after explicit cookie consent.

3. Lawful Purpose & Usage of Personal Data

We process personal data solely for specific, specified lawful purposes:

• To source, compare, and present competitive charter quotations from DGCA-approved NSOP air carriers.
• To submit mandatory passenger manifests to the operating carrier, Central Industrial Security Force (CISF), and Airport Authority of India (AAI) for airport entry and ramp security passes.
• To coordinate airside tarmac transfers, medical stretcher arrangements, and bespoke catering preferences.
• To communicate real-time flight status, slot clearances, and weather advisories via email or SMS.

4. Consent & Withdrawal of Consent

By ticking our consent checkbox on our enquiry forms, you provide informed, clear, and unambiguous consent for KC Air to process your data for the specified flight enquiry.

You have the right under Section 6 of the DPDP Act 2023 to withdraw your consent at any time by emailing us at charter@kcair.in or by replying “STOP” to any email flight dispatch update. Upon receiving withdrawal of consent, we will cease processing your personal data, subject to statutory retention required under civil aviation security and tax laws.

5. Data Sharing & Disclosures

We never sell, rent, or trade your personal data. We disclose personal data strictly on a need-to-know basis to:

• The contracted DGCA-approved NSOP aircraft operator executing the flight.
• Government and law enforcement authorities (DGCA, CISF, BCAS, Customs, and Immigration) as mandated by Indian aviation security laws.
• Authorized cloud infrastructure and CRM processors bound by stringent confidentiality and security covenants.

6. Data Retention & Security Measures

We retain passenger manifest data for the statutory period mandated by the DGCA and Ministry of Civil Aviation (typically 12 months for domestic flight logs and as required by tax statutes). Non-booking enquiry records are erased after 180 days unless you opt into empty-leg deal alerts.

All data transmissions are encrypted using Transport Layer Security (TLS 1.3), with role-based access control protecting operational databases.

7. Rights of the Data Principal

Under the DPDP Act 2023, you have the right to:

• Request a summary of personal data held and processing activities undertaken.
• Request correction, completion, or erasure of outdated personal data.
• Nominate an individual to exercise data rights in the event of death or incapacity.
• File a grievance with our designated Grievance Redressal Officer.