1. Who we are

Starlings is a technology company for travel agencies. We build and operate the Wings, Feathers, Wings+ and Pagos platforms, which agencies use to search, book and manage travel services. Starlings is part of Volans Group.

Starlings is responsible for the personal data described in this policy. For any privacy question, you can write to us at help@starlings.travel.

Hereinafter, “Starlings”, “we”, “us” or “the Company”.

2. Scope of this policy

This policy explains how we handle the personal information we receive through the starlings.travel website: that of people who browse it, fill in any of its forms or write to us by any means.

What this document does NOT cover. Travel agencies that use our platforms load data about their own customers and travelers into them. Starlings does not decide how that information is used: we act on behalf of, and following the instructions of, the agency, which holds the relationship with the traveler and is accountable to them.

That data is governed by the contract between Starlings and each agency, not by this policy. If you are a traveler and want to know how your data is used, please contact the agency you booked your trip with.

Nor does it cover access to the app.starlings.travel platform, which is governed by the terms agreed with each client agency.

3. Information we collect

3.1 Information you give us

When you fill in the contact form on the site, we collect the data you enter: first and last name, company, email address, phone number, type of company, solution of interest and the content of your message. If you leave your email in the updates form on the products page, we collect only that address. The same applies if you email us directly, send us your résumé or contact us through our LinkedIn page.

3.2 Information generated when you browse

Like any website, our hosting provider logs technical data about the requests it receives: IP address, browser and device type, operating system, pages visited and date and time of access. These logs are used to run the site, plan its capacity and detect security incidents.

We also use a web analytics tool (Rybbit) to understand, in aggregate, how the site is used: pages visited, referring site, device and browser type, language and approximate country or region. We use this information statistically to improve the site, not to identify you. See section 11 for details.

3.3 What we do NOT do

The site does not use tracking pixels or third-party advertising, and does not build advertising profiles from your browsing. We do not sell personal data or share it with third parties for cross-context behavioral advertising or for their own purposes.

4. How we use it

We use personal information to:

  • answer your inquiries and put you in touch with our sales team;
  • prepare and send you demos, proposals and quotes for our solutions;
  • manage the commercial and contractual relationship with client agencies;
  • send you communications about Starlings products, news and events, where you have asked for them or we have an existing business relationship, with the option to unsubscribe at any time;
  • review the résumés we receive;
  • measure use of the site and improve its content and performance;
  • operate, maintain and protect the site, and prevent fraud or misuse;
  • comply with the legal, accounting and regulatory obligations that apply to us.

We will not use the information for purposes other than those listed without telling you first.

5. Legal basis for processing

We process your personal data when one of the following applies:

  • Your consent, which you give by filling in and submitting a form or subscribing to our communications, and which you can withdraw at any time.
  • Performance of a contract, or steps taken before entering into one, when you request information about our solutions or your agency contracts our services.
  • Compliance with a legal obligation to which Starlings is subject.
  • Our legitimate interest in running the site securely, measuring its use, presenting our solutions to industry professionals and defending our rights, provided that interest does not override your rights and freedoms.

6. Who we share it with

We do not sell your personal information. We share it only in these cases:

  • Service providers who access the data only to provide their services and following our instructions: site hosting and infrastructure (Vercel), email delivery (Resend), web analytics (Rybbit), sales management tools and technical support.
  • Volans Group companies, where needed for internal management, administration of the business relationship or joint provision of services.
  • Public, judicial or administrative authorities, where there is a legal obligation or a valid request.
  • Professional advisers (legal, accounting or audit) bound by confidentiality.
  • Acquirers, in the event of a corporate reorganization, merger or sale of assets, with notice where appropriate.

We require providers that process data on our behalf to protect it with an appropriate level of security and not to use it for their own purposes.

7. International transfers

Starlings serves travel agencies in several countries. Our main infrastructure and email providers are located in the United States of America, so the information you send us may be stored and processed in that country or in others where those providers operate, whose data protection laws may differ from those of your country of residence.

Where the law of your country requires it, we put appropriate safeguards in place, such as contractual clauses with our providers, so that your data keeps an adequate level of protection.

8. How long we keep it

We keep personal information for as long as it is needed for the purpose for which it was collected and, after that, for as long as legal or contractual liabilities may arise. As a general rule:

  • Sales inquiries that do not lead to a contract: up to 24 months from the last contact.
  • Subscriptions to updates: until you unsubscribe.
  • Client data and contract documentation: for the duration of the relationship and then for the applicable statute of limitations.
  • Résumés: up to 12 months from receipt, unless you ask us to delete them sooner.
  • Technical server logs: for the period set by the hosting provider, generally no more than 90 days.

After those periods, the information is deleted or irreversibly anonymized. Analytics data is kept in aggregate form.

9. How we protect it

We apply reasonable technical and organizational measures to protect personal information against loss, misuse, unauthorized access, alteration and disclosure: HTTPS encryption of site traffic, role-based access control, activity logging, regular backups and confidentiality commitments from our staff and providers.

No system is completely infallible. If a security incident affecting your personal data occurs, we will act in accordance with applicable law and notify you where required.

10. Your rights

Depending on the law where you live, you may have the following rights regarding your personal data:

  • Access: to know what information about you we process and obtain a copy.
  • Correction: to correct inaccurate or incomplete data.
  • Deletion: to ask us to delete your data when it is no longer needed or when you withdraw your consent.
  • Objection: to object to certain processing, including marketing communications.
  • Restriction: to ask us to suspend processing while a dispute about your data is resolved.
  • Portability: to receive your data in a structured, commonly used format, where applicable.
  • Withdraw consent at any time, without affecting the lawfulness of prior processing.

We honor these requests regardless of your country of residence, and we will not discriminate against you for exercising them.

To exercise them, write to us at help@starlings.travel stating the right you wish to exercise. We may ask for additional information to verify your identity before responding. We will respond within 30 days, or within any shorter period required by applicable law.

If you believe we have not handled your request properly, you may file a complaint with the data protection or consumer protection authority of your country or state.

11. Cookies, analytics and local storage

This site does not use advertising cookies or third-party tracking cookies.

Analytics. We measure use of the site with Rybbit, a privacy-focused analytics tool that does not use advertising cookies or share data with ad networks. It records technical information about each visit (pages viewed, referring site, device and browser type, language and approximate country or region), which we use only in aggregate, statistical form. If your browser uses a content blocker, measurement may not take place.

Language preference. The site stores the language you choose (Spanish or English) in your browser’s local storage, so it can show you the site in that language on your next visit. That data stays on your device, is not sent to our servers or to third parties, and does not identify you.

You can delete this data at any time by clearing your browser’s browsing data.

12. Children

This site is aimed at travel industry professionals and businesses. It is not intended for anyone under 18, and we do not knowingly collect their personal information. If we learn that we have received data from a minor, we will delete it.

13. Changes to this policy

We may update this policy to reflect changes in our practices, in the tools we use or in applicable law. The current version is always the one published on this page, with its last-updated date shown at the top. If the changes are material, we will announce them in a visible way before they take effect.

14. How to contact us

For any question about this policy or about how we handle your personal data:

Use of this site is also governed by our Terms and conditions.