Privacy policies

The data controller is JOY Airline, which operates in the Argentine Republic (hereinafter, “JOY” or “the Airline”).

JOY may collect:

• Contact information: first and last name, email address, phone number.
• Passenger information: date of birth, gender, nationality, and type and number of identification document (ID card or passport), which are required to issue the ticket and comply with aviation and immigration regulations.
• Reservation details: itineraries, additional services, baggage, purchase history.
• Payment Information: JOY does not store your full card information; payments are processed through certified payment providers.
• Browsing data: IP address, device, browser, and cookies.
• Sensitive data (only if provided by the user): for example, requests for special assistance due to health reasons or dietary preferences. This data is processed only with express consent and for the purpose of providing the requested service.

The data is collected from contact forms, the purchase and reservation process, customer service channels, and newsletter subscriptions.

The data is used for:

• Manage reservations, ticket issuance, check-in, and related services.
• Process payments, refunds, and exchanges.
• Report changes, delays, or cancellations of flights.
• Provide customer service and answer inquiries.
• To comply with legal, tax, aviation, and immigration obligations.
• Prevent fraud and ensure the security of transactions.
• Send news and promotions only if the user gives consent (which can be revoked at any time).

The information marked as required during the purchase process is necessary to issue the ticket and comply with regulations. If this information is not provided, you will not be able to complete the reservation. The rest of the information is optional and does not affect your overall experience on the site.

Data is retained for as long as necessary to fulfill the purpose for which it was collected and to comply with applicable legal time limits (tax, commercial, and aviation), and is then deleted or anonymized.

JOY does not sell or rent personal data. Data may be shared with:

• Payment processors and financial institutions, for collecting payments and issuing refunds.
• Technology providers (hosting, reservation systems, email, analytics) under confidentiality agreements.
• Aviation, immigration, customs, and security authorities, when required by law (for example, passenger data on international flights).
• Airlines or operating partners, when the trip involves services provided by third parties.
• Judicial or administrative bodies, upon legal request.

If a supplier is located in another country, JOY ensures that it provides adequate levels of protection or has obtained the data subject’s consent, in accordance with Law 25,326.

JOY takes reasonable technical and organizational measures to protect personal data against:

• Unauthorized access

• Loss

• Misuse

• Alteration or disclosure

However, the user acknowledges that no data transmission or storage system is completely secure.

Payment transactions are processed through encrypted connections (SSL/TLS) and providers that comply with security standards such as PCI-DSS.

Users have the right to access, correct, update, and delete their data, as well as to revoke their consent, in accordance with Articles 14 through 16 of Law 25,326. They may exercise these rights by writing to [contact email].

The Agency for Access to Public Information, the oversight body for Law 25,326, handles complaints and claims regarding violations of personal data protection regulations.

The site uses technical cookies (necessary for booking and payment), analytics cookies, and, where applicable, advertising or personalization cookies. Users can configure these settings through their browser or the site’s consent panel; however, disabling technical cookies may affect the purchase process.

The website may contain links to external pages.
JOY is not responsible for the privacy policies or content of such sites.

JOY may modify this policy at any time. Changes take effect upon publication on the site, and the date at the top will be updated accordingly.

This policy is governed by the laws of the Argentine Republic, specifically Law 25,326 on the Protection of Personal Data and Law 24,240 on Consumer Protection.