Bahamasair Holdings Ltd Privacy Policy

1. INTRODUCTION
At Bahamasair Holdings Ltd (“Bahamasair”), we recognize the importance of privacy, and we are
committed to protecting the personal data of our passengers as data subjects under the Data Protection
(Privacy of Personal Information) Act, 2007 of The Bahamas, as well as other relevant data protection
laws and regulations. This policy outlines how Bahamasair will collect, store, use, protect, and
disclose your personal data in the provision of its commercial flight services and other supplementary
products and services.

2. SCOPE & DEFINITIONS
This policy applies to all data processing activities involving your personal data carried out by
Bahamasair its employees, and third-party service providers.
“Personal data” is information that relates to an identifiable person who can be directly or indirectly
identified from that information, for example, a person’s name, identification number, location, online
identifier. It can also include pseudonymized data.
A “Data subject” is an individual who is the subject of personal data.
“Data processing” is any operation or set of operations which is performed on personal data or on sets
of personal data, whether or not by automated means, such as collection, recording, organization,
structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission,
dissemination or otherwise making available, alignment or combination, restriction, erasure or
destruction.

3. DATA PROTECTION PRINCIPLES
Bahamasair adheres to the following principles when processing personal data:
Lawfulness, Fairness, and Transparency: Data is processed lawfully, fairly, and transparently in
relation to the data subject.
Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and not further
processed in a manner incompatible with those purposes.
Data Minimization: Data is adequate, relevant, and limited to what is necessary in relation to the
purposes for which they are processed.
Accuracy: Data is accurate and kept up to date, with every reasonable step taken to ensure that
inaccurate data is erased or rectified without delay.
Storage Limitation: Data is kept in a form that permits identification of data subjects for no longer
than is necessary for the purposes for which the personal data is processed.
Integrity and Confidentiality: Data is processed in a manner that ensures appropriate security,
including protection against unauthorized or unlawful processing and accidental loss, destruction, or
damage.

4. DATA SUBJECT RIGHTS
Data subjects have the right to:
Access: Request access to their personal data processed by Bahamasair.
Rectification: Request correction of inaccurate or incomplete personal data.
Erasure: Request erasure of personal data where there is no good reason for continued processing.
Restriction: Request restriction of processing of their personal data.
Data Portability: Request the transfer of personal data to a third party.
Object: Object to processing of personal data where Bahamasair is relying on a legitimate interest.

5. DATA COLLECTED
Bahamasair may collect the following types of personal data:
Identification Data: Name, gender, date of birth, place of birth, nationality.
Contact Details: Email address, telephone number, residential address.
Travel Information: Passport details, travel itineraries, bookings, special assistance needs, meal
preferences.
Health Information: Where applicable and with explicit consent, information about health for the
purpose of assessing fitness to fly or for providing special assistance.
Payment Information: Credit/debit card details, billing address.
Emergency Contact: Details of next of kin.

6. USE OF DATA
Personal data is used for the following purposes:
Products and Services: The offering of commercial flight services and other products and services.
Communication: Sending notifications to confirm bookings, flight details, schedule changes, flight
cancellations and gate changes.
Flight Operations: All processes related to the conduct of flying and training operations including
but not limited to crew scheduling and redeployment, flight documents preparation, duty travel,
reporting requirements of regulatory agencies e.g. TSA, CBP, CAA-B, etc.
Customer Service: Addressing inquiries, complaints, and providing assistance.
Safety and Security: Ensuring the safety and security of our flights and passengers.
Legal Compliance: Meeting legal and regulatory obligations.
Marketing: With the consent of the data subject, for sending promotional materials and offers.

7. DATA SHARING AND TRANSFER
The information we collect from you may be transferred to, stored at, and processed in destinations
outside of The Bahamas, or your home country and may be accessible to the governments and law
enforcement agencies of such countries. You acknowledge that these other countries may not provide
the same level of protection of your personal data as given in The Bahamas or your home country.
This includes processing by us, our affiliates, third-party payment processing companies, and other
third party service providers. By providing your personal data in connection with the products and
services offered by Bahamasair, you agree to such transfer, storing, and/or processing outside the
country in which you are located. It is our objective to take steps reasonably necessary to help secure
your information and to treat the information that we have collected under this Privacy Policy.
Bahamasair may share personal data with third parties in the following circumstances:
Service Providers: Sharing with companies that provide services on our behalf, such as ground
services, aircraft wet-lease companies, catering, and IT support.
Professional Services: Sharing information with our professional service providers including,
auditors, and lawyers.
Legal Requirements: Sharing information with government and law enforcement agencies as
required by law or in response to legal processes.
International Transfers: Transferring data outside The Bahamas in compliance with data protection
laws.

8. DATA SECURITY
Bahamasair implements appropriate technical and organizational measures to secure your personal
data against unauthorized access, alteration, disclosure, or destruction. These measures include
privacy policies and procedures, data encryption in transit and at rest, and other industry-standard
measures.

9. RETENTION PERIOD
Bahamasair will store your personal data for as long as is legally required.

10. DATA BREACH NOTIFICATION
In the event of a data breach, Bahamasair will, as soon as reasonably practicable, notify affected
individuals and relevant authorities as required.

11. POLICY REVIEW AND UPDATES
This policy may be amended and updated from time to time to reflect changes in our business
practices regarding the processing of personal data, best practices generally and legal requirements.

12. CONTACT INFORMATION
For any inquiries or requests regarding data protection, please contact our Data Protection Officer at:
Bahamasair
c/o Data Protection Officer
N4881
Nassau, The Bahamas