Privacy Policy

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• Personal Data means any information relating to an identified or identifiable natural person (“data subject”).
• Processing means any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• Data Controller means FlyNaija Digital Services, which determines the purposes and means of processing personal data.
• Data Subject means a natural person whose personal data is processed by FlyNaija.
• NDPA means the Nigeria Data Protection Act 2023 (as amended or supplemented from time to time), and related regulations issued by the Nigeria Data Protection Commission (NDPC).
• Cookies means small text files placed on your device by a website to store information about your visit.
• Third Party means any person or entity other than you, FlyNaija, and FlyNaija's authorised data processors.
• Booking Assistance means the optional service by which FlyNaija facilitates a flight reservation on behalf of a user through a Nigerian airline.

FlyNaija is a Nigerian domestic flight comparison platform. We enable users to search for domestic flights, compare fares published by Nigerian airlines, and — where requested — receive booking assistance in completing a reservation with an airline.

FlyNaija is not an airline, an airport operator, or a transportation service provider. We do not issue airline tickets directly, and we are not a party to the contract of carriage between a passenger and any airline.

Data Controller contact details:
FlyNaija Digital Services
Ekumah Qtrs. Okpameri Grammar School, Ibillo, Akoko, North Akoko, Akoko-Edo, Edo State, Nigeria.
Email: hello@flynaija.ng
Phone: +234 906 469 1102

We collect personal data in the following ways:

3.1 Information You Provide Directly

When you use the Platform or contact us, you may provide:

• Full name — when submitting a booking assistance request.
• Email address — for communication and booking confirmation.
• Phone number — for support and booking coordination.
• Passenger details — including names, dates of birth, and travel document information required to complete a booking.
• Payment information — processed securely through our payment providers (we do not store card numbers).
• Communications — messages sent to us via WhatsApp, email, or any enquiry form.
• Preferences and feedback — including any additional information you choose to share with us.

3.2 Information Collected Automatically

When you visit the Platform, we automatically collect certain technical and usage data, including:

• IP address and approximate geographic location.
• Browser type, version, and operating system.
• Device type and screen resolution.
• Pages visited, time spent on each page, and navigation paths.
• Referring URLs — the website that directed you to FlyNaija.
• Search queries entered (e.g. origin, destination, travel date).
• Date and time of access.

This data is collected to operate and improve the Platform and is not used to personally identify you without your consent.

3.3 Cookies and Similar Technologies

FlyNaija uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and understand how visitors use the site. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled without affecting core functionality.
• Performance & Analytics Cookies: Help us understand how users interact with the Platform so we can improve it. Data collected is aggregated and anonymous where possible.
• Functional Cookies: Allow the Platform to remember choices you make (such as your preferred route or recent searches) to enhance your experience.

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the availability or functionality of parts of the Platform.

We use the personal data we collect for the following purposes:

• To operate and deliver the flight comparison and search services on the Platform.
• To process and manage booking assistance requests submitted by users.
• To communicate with you regarding your enquiry, booking, or support request.
• To transmit passenger details to airlines or payment providers solely to the extent necessary to complete a requested booking.
• To process payments securely through our payment providers.
• To monitor, analyse, and improve the performance and usability of the Platform.
• To detect and prevent fraud, abuse, or unauthorised access.
• To comply with applicable legal obligations and respond to lawful requests from regulatory or law enforcement authorities.
• To send you service-related communications (e.g. booking confirmations, updates).
• With your consent: to send you marketing communications about FlyNaija services, promotions, and travel-related information.

We do not sell, rent, or otherwise trade your personal data to third parties for their own marketing purposes.

Under the Nigeria Data Protection Act 2023, we process your personal data on the following legal grounds:

• Performance of a contract or pre-contractual steps: Where processing is necessary to fulfil a booking assistance request or to respond to an enquiry you have made.
• Legitimate interests: Where processing is necessary for our legitimate interests as a business, including improving our services, preventing fraud, and ensuring platform security, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have given us clear, informed consent to process your data for a specific purpose, such as receiving marketing communications. You may withdraw your consent at any time.
• Compliance with a legal obligation: Where processing is required to fulfil a legal or regulatory obligation applicable to FlyNaija.

We do not share your personal data with third parties except as described in this policy. We may share your information in the following circumstances:

6.1 Third-Party Websites and Airline Partners

The Platform displays fares and links to booking pages operated by Nigerian domestic airlines. Where you choose to book directly with an airline by following a link from our Platform, you will be subject to that airline's own terms of service and privacy policy. FlyNaija is not responsible for the data practices of any airline or third-party website.

Where you request booking assistance through FlyNaija, we will share the passenger and contact information you provide — strictly to the extent necessary — with the relevant airline to facilitate your reservation. We do not share this information with airlines for any other purpose.

6.2 Payment Providers

Payments for booking assistance services are processed by third-party payment providers, which may include Flutterwave and Paystack. These providers receive the transactional information necessary to process your payment securely. FlyNaija does not store full card details on its own systems. Payment providers operate under their own privacy policies and are bound by applicable financial data regulations.

6.3 Service Providers and Technology Partners

We engage trusted third-party service providers to help operate the Platform. These may include hosting and infrastructure providers, analytics platforms, and customer communication tools. Such providers are permitted to use your data only as instructed by us and are bound by data processing agreements that require them to protect your information.

6.4 Legal and Regulatory Disclosure

We may disclose personal data where required to do so by applicable law, court order, or at the lawful request of a competent government or regulatory authority. We will, where permissible, notify you of any such disclosure.

We retain personal data only for as long as is necessary for the purposes set out in this policy, or as required by applicable law. Our standard retention periods are as follows:

• Booking assistance records (passenger details, communications, payment records): retained for up to five (5) years from the date of the transaction, in line with applicable financial and consumer protection requirements.
• Customer support communications: retained for up to two (2) years from the date of the last interaction.
• Analytics and usage data: retained in aggregated or anonymised form indefinitely; identifiable usage logs are retained for a maximum of twelve (12) months.
• Marketing consent records: retained until you withdraw your consent, plus a reasonable period thereafter for compliance documentation purposes.

When personal data is no longer required, we take reasonable steps to securely delete or anonymise it.

FlyNaija takes the security of your personal data seriously. We implement appropriate technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/HTTPS on all Platform pages.
• Access controls limiting personal data to authorised personnel who require it in the course of their duties.
• Use of reputable, security-audited infrastructure and hosting providers.
• Regular review of our data handling practices and security posture.

While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and you provide your personal data at your own risk. If you believe your data has been compromised, please contact us immediately at hello@flynaija.ng.

The FlyNaija Platform is hosted on infrastructure that may be located outside Nigeria, including servers operated by our hosting provider in the United States and other jurisdictions. By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Nigeria.

Where we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place to protect your data in a manner consistent with the requirements of the NDPA and applicable data protection principles, including where relevant relying on standard contractual clauses or ensuring the recipient country provides an adequate level of data protection.

The FlyNaija Platform is not directed at or intended for use by persons under the age of 18 years. We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided personal data to us without your consent, please contact us at hello@flynaija.ng and we will take prompt steps to delete such information.

Under the Nigeria Data Protection Act 2023, you have the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you and information about how we use it.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of our legitimate interests, including for direct marketing purposes.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng if you believe we have handled your personal data in a manner that violates the NDPA.

To exercise any of the above rights, please contact us using the details in Section 15. We will respond to your request within the timeframes required by applicable law, and in any event within thirty (30) days. We may request proof of identity before processing certain requests.

We may, with your consent, send you emails, WhatsApp messages, or other communications about FlyNaija services, fare alerts, promotions, and travel-related information.

You may opt out of marketing communications at any time by:

• Following the unsubscribe link included in any marketing email.
• Replying “STOP” to any WhatsApp marketing message.
• Contacting us directly at hello@flynaija.ng with the subject line “Marketing Opt-Out”.

Opting out of marketing communications will not affect transactional or service communications related to a booking or support request.

The Platform contains links to airline websites, partner pages, and other third-party resources. These links are provided for your convenience and do not constitute an endorsement of those websites or their privacy practices. FlyNaija has no control over, and accepts no responsibility for, the content or data practices of any third-party website. We encourage you to read the privacy policy of every website you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered users or display a prominent notice on the Platform.

We encourage you to review this policy periodically. Your continued use of the Platform following the publication of any updated policy constitutes your acceptance of the changes.

This Privacy Policy shall be governed by and construed in accordance with the laws of the Federal Republic of Nigeria. Any dispute arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Nigeria.

FlyNaija operates in compliance with the Nigeria Data Protection Act 2023 and the regulations issued thereunder by the Nigeria Data Protection Commission (NDPC). Where applicable, we also observe internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the handling of your personal data, please contact us:

We aim to acknowledge all privacy-related enquiries within five (5) working days and to resolve them within thirty (30) calendar days, unless the complexity of the request requires additional time, in which case we will keep you informed of the progress.