LEGAL

Privacy Policy

Effective Date: January 1, 2026 · Last Updated: January 1, 2026

Bluestar Airlines, Inc. ("Bluestar," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, mobile application, or any Bluestar service. By using our Services, you agree to the practices described herein.

1. Information We Collect

When you use our Services, we may collect the following categories of personal information: • Identity & Contact Information: Full name, email address, phone number, mailing address, and date of birth. • Travel Information: Passport details, travel itineraries, seat preferences, special service requests, and meal preferences. • Payment Information: Credit/debit card numbers, billing address, and transaction history. Payment data is processed by our secure payment providers and is not stored on our servers. • Account & Loyalty Data: Constellation membership number, tier status, miles balance, and flight history. • Device & Usage Data: IP address, browser type, operating system, pages visited, and cookies when you interact with our website or app. • Communications: Records of your communications with our customer service team.

2. How We Use Your Information

We use the personal information we collect to: • Process and manage your flight reservations, check-ins, and travel documents. • Administer your Constellation loyalty account and calculate miles earned or redeemed. • Communicate with you regarding your bookings, flight status updates, and service changes. • Send promotional offers, newsletters, and personalized recommendations — only where you have opted in. • Comply with legal obligations, including identity verification and government-mandated security screening. • Improve our website, mobile app, and overall service quality through analytics and user feedback. • Detect, prevent, and investigate fraud, security breaches, or other unauthorized activities.

3. Sharing of Your Information

We do not sell your personal information. We may share your data with trusted third parties only as necessary: • Travel Partners: Codeshare partners, ground handling agents, and hotels associated with vacation packages — solely to fulfill your booking. • Government & Regulatory Bodies: As required by TSA, Customs and Border Protection, or other applicable authorities for security screening and international travel. • Payment Processors: To securely handle your transactions. • Service Providers: IT infrastructure, email delivery, analytics, and customer support vendors who process data on our behalf under strict confidentiality agreements. • Legal Proceedings: When required by law, court order, or to protect the rights and safety of Bluestar, its employees, or the public.

4. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and analyze site traffic. You can control cookie settings through your browser. Disabling certain cookies may affect site functionality. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted or expired). We do not use cookies to track you across unaffiliated third-party websites.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Booking records are typically retained for seven (7) years for accounting and legal compliance. Constellation program data is retained for the duration of your membership plus three (3) years after account closure. You may request deletion of your data subject to legal retention requirements.

6. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you. • Correction: Request correction of inaccurate or incomplete data. • Deletion: Request erasure of your personal data, subject to legal obligations. • Portability: Request that we provide your data in a machine-readable format. • Opt-Out: Unsubscribe from marketing communications at any time via the link in any email or by contacting us directly. • Restriction: Request that we restrict processing of your data in certain circumstances. To exercise any of these rights, contact us at privacy@bluestarair.com.

7. Data Security

We implement industry-standard security measures to protect your personal information, including SSL/TLS encryption for data in transit, encryption of stored payment data, multi-factor authentication for internal systems, and regular security audits. However, no method of transmission over the internet is 100% secure. If you suspect unauthorized access to your account, please contact us immediately at support@bluestarair.com.

8. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it. For unaccompanied minors traveling on Bluestar flights, we collect only the information necessary to ensure their safety and meet legal requirements.

9. International Data Transfers

Bluestar Airlines operates routes and maintains systems that may involve transferring your data across international borders. We take appropriate measures to ensure that such transfers comply with applicable data protection laws. Where required, we rely on standard contractual clauses or other approved transfer mechanisms to protect your data when it is processed in countries outside your own.

10. Third-Party Links

Our website may contain links to third-party websites, including hotel booking partners, car rental services, and travel insurance providers. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy policies before submitting any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website with a revised effective date. Where required by law, we will seek your consent before applying changes to how we use your existing data.

12. Contact & Data Controller

Bluestar Airlines, Inc. is the data controller responsible for your personal information. Privacy inquiries: privacy@bluestarair.com 1-800-BLUESTAR flybluestarair.com For complaints unresolved through our channels, you may contact your local data protection authority.