FlyBest

隐私政策 · Privacy Policy

中文版在前，English version follows below. 生效日期 / Effective date: 2026-10-01

隐私政策

FlyBest（奢游公子）由 Jay Yan 运营。Jay 是常驻美国加利福尼亚州的独立旅行顾问，在本网站的头衔是「Virtuoso 旅行顾问」。FlyBest 与 Coastline Travel Advisors 联属，预订通过该机构完成。本隐私政策说明当您访问 flybest.org 及其子站点（包括首页嵌入的酒店搜索与预订引擎），或通过我们预订酒店时，我们会收集哪些信息、如何使用、与谁共享，以及您拥有的权利。我们尽量用平实的语言来写；如有任何疑问，欢迎随时来信。预订本身适用我们的使用条款 · Terms of Use。

我们收集哪些信息

我们收集您提供的信息、预订信息，以及下列聊天、技术与访问统计数据：

  • 身份与联系信息：姓名（与证件一致）、电子邮箱、电话号码。
  • 预订信息：酒店、入住与退房日期、入住人数与儿童年龄、房型与房价、特殊要求（如床型、到店时间、饮食或无障碍需求）。
  • 酒店会员号（可选）：如果您填写了酒店集团的会员号，我们会把它一并传给酒店，以便您累积积分或享受会员待遇。酒店引擎也会随房价搜索向预订系统发送会员号，以显示会员房价。在引擎酒店页面填写的会员号会在浏览器 Cookie 中保存 90 天，您可用该页面的按钮清除。
  • 支付卡信息：用于向酒店担保预订、或支付酒店要求的押金的信用卡号、有效期和持卡人姓名。详见下文「您的支付卡如何使用」。
  • 与我们的往来沟通：您通过邮件、微信或电话联系我们时留下的内容。
  • 基本技术数据：与任何网站一样，服务器会记录 IP 地址、浏览器类型和访问时间等标准日志信息，用于保障网站安全和正常运行。
  • 网站聊天：FlyBest 的服务器保存您与 Jay 的消息、时间、打开聊天的页面、语言，以及用于防止滥用的 IP 地址加盐哈希值。聊天记录不保存原始 IP 地址，除非您在消息中输入，否则不收集姓名或邮箱。聊天不设置 Cookie；浏览器使用 localStorage 中的 fb_chat_sid 和 fb_chat_seen 保存聊天标识，以便在下一页面继续对话。持有该标识的人可以读取该对话。
  • 访问统计：Google Analytics 收集浏览的页面、来源网站、设备和浏览器类型，以及从 IP 地址推算的大致位置（城市／国家），并记录页面浏览、带页面语言的首页浏览事件，以及前往酒店目录的点击。Google Analytics 4 不记录或存储 IP 地址。酒店引擎与报价链接页面在同一欧洲同意机制下，还向 Google Analytics 发送搜索事件（目的地、日期、晚数、成人人数、结果数量）、酒店浏览事件（酒店、城市、品牌、最低价及货币）、开始预订事件（酒店、房价计划、日期、晚数、货币、总价）和完成预订事件（相同信息及经过单向哈希处理的预订编号）。这些事件取自页面参数，不取自表单，绝不会发送客人姓名、联系方式（邮箱、电话）、会员号、特殊请求或银行卡资料。
  • 酒店引擎日志：ai.flybest.org 的服务器日志记录 IP 地址、请求地址与时间。

您的支付卡如何使用

支付卡信息只用于一个目的：按酒店的要求担保您的预订，或支付该房价所要求的押金/预付款。

  • 您在预订页面输入的卡号会通过一个全球分销系统直接传送到酒店的预订系统。flybest.org 网站本身不存储完整卡号；预订完成后，我们的记录里只保留卡号末四位等掩码信息，用于核对。
  • FlyBest 不会用您的卡收取任何费用。我们不收预订费或服务费；我们的报酬来自酒店支付的佣金。
  • 如果酒店按其政策收取押金、预付款、未入住（No-show）或逾期取消的费用，那是酒店直接向您的卡收取，适用的是您预订时看到的该房价的取消与付款条款。
  • 请不要通过邮件或聊天工具发送完整卡号。如需更换担保卡，请联系我们，我们会提供安全的填写方式。

酒店引擎和报价链接的预订页面会显示酒店货币的总价、押金或预付款，以及该房价的取消条款，您须勾选确认已看到这些内容。押金或预付房价需要额外勾选。提交页面之前不会预订。

我们如何使用您的信息

  • 完成并管理您的酒店预订，包括修改、取消和入住前的沟通。
  • 向酒店传递您的要求，并在适用时为您申请 Virtuoso 或类似合作计划的礼遇（如早餐、酒店消费额度、视情况升级房型等）。
  • 向您发送与预订有关的邮件：我们发出的预订确认，以及酒店或预订系统生成的正式确认；有时还会有入住前提醒或酒店的重要通知。
  • 记录您的出行偏好，以便下次为您提供更合适的建议。
  • 遵守法律、会计与税务方面的记录要求。
  • 继续并跟进网站聊天，防止聊天滥用，并通过访问统计了解页面浏览及前往酒店目录的点击。

我们不会出售您的个人信息，也不会在未经您同意的情况下向您发送营销邮件。

谁会收到您的信息

  • 酒店：您预订的酒店会收到姓名、联系方式、入住信息、特殊要求、会员号和担保卡信息，以便为您安排入住。酒店对这些信息的处理适用酒店自己的隐私政策。
  • 全球分销系统 / 预订系统：您的预订通过一个旅游行业通用的全球分销系统传送到酒店的预订系统。该系统按行业安全标准处理预订与支付卡数据。
  • 我们的预订记录：预订会同步到 FlyBest 的订单与客户记录系统，供我们为您跟进服务。
  • Virtuoso：以 Virtuoso 房价预订时，酒店会知道这是一笔经由 Virtuoso 顾问的预订，以便提供相应礼遇。
  • 法律要求：在法律要求、或为保护合法权益所必需时，我们可能向有关机关披露信息。
  • Coastline Travel Advisors：每笔预订均通过其预订系统完成，并带有其后台会计所用的预订备注，该机构可以查看每笔预订。
  • Cloudflare：访问 flybest.org 网站的流量经过 Cloudflare，用于安全防护、机器人防护与缓存；它会看到 IP 地址和请求数据。酒店引擎、预订付款页和 AI 连接器所在的 ai.flybest.org 不经过 Cloudflare，直接连接我们在 Google Cloud 的服务器。
  • GoDaddy：托管 flybest.org 的 WordPress 网站，其服务器保留标准访问日志。
  • Google：提供 Google Analytics 访问统计；加载 Google Fonts 字体时，浏览器会联系 Google 的服务器；Gmail 用于 [email protected] 邮箱的预订邮件与聊天跟进；Google Cloud 在美国托管酒店引擎、数据库和备份。
  • 云端记录服务：保存 FlyBest 的订单与客户记录，供 Jay 跟进服务。
  • 消息传递服务：将网站聊天消息送到 Jay 的手机，并将他的回复送回同一个聊天框。

在 AI 助手中使用 FlyBest

在 Claude、ChatGPT 或其他助手中使用 FlyBest AI 连接器时，请参阅连接器自己的隐私声明和使用条款。我们不会通过连接器收到您的聊天记录；AI 服务提供商按其自己的政策处理对话。

国际传输

FlyBest 在美国运营。您的信息会在美国、酒店所在国家/地区以及预订系统所在地被处理。不同国家/地区的数据保护法律可能不同；我们与合作方之间的传输均通过加密连接进行。

Google Cloud 在美国处理酒店引擎、预订数据库及每晚备份的数据。flybest.org 网站（不含 ai.flybest.org）的流量也经过 Cloudflare，浏览器还会联系 Google 的统计与字体服务。

保存期限

  • 预订记录（姓名、联系方式、酒店、日期、确认号等）会在行程结束后继续保存，以处理售后事宜并满足会计和税务的记录要求，一般不超过 7 年，之后删除或匿名化。
  • 完整的支付卡号不会保存在本网站。预订系统与酒店会按各自的政策保留担保卡信息，通常在入住结束或取消期限过后清除。
  • 邮件、微信或电话的通信记录，在相关事项处理完毕后保留一段合理期限。
  • Google Analytics 的事件与用户数据保留 14 个月。
  • 酒店引擎的网络服务器日志每天轮换，保留 14 天。
  • 预订数据库每晚备份到美国的 Google Cloud，每份备份在 60 天后删除。
  • 网站聊天消息用于继续对话和跟进服务，并在您提出请求时删除；目前没有自动删除时间表。

Cookie 与嵌入内容

本网站及酒店引擎使用 Google Analytics 4，在 flybest.org、www.flybest.org 与 ai.flybest.org 之间进行跨域统计，记录页面浏览、带页面语言的首页浏览事件，以及前往酒店目录的点击。已登录的网站编辑不会加载统计。广告功能与 Google signals 均已关闭，不设置广告 Cookie。Google Analytics 的事件与用户数据保留 14 个月。酒店引擎与报价链接页面在同一欧洲同意机制下，还向 Google Analytics 发送搜索事件（目的地、日期、晚数、成人人数、结果数量）、酒店浏览事件（酒店、城市、品牌、最低价及货币）、开始预订事件（酒店、房价计划、日期、晚数、货币、总价）和完成预订事件（相同信息及经过单向哈希处理的预订编号）。这些事件取自页面参数，不取自表单，绝不会发送客人姓名、联系方式（邮箱、电话）、会员号、特殊请求或银行卡资料。

浏览器时区位于欧洲（包括雷克雅未克、加那利群岛、马德拉和亚速尔群岛）的访客会先看到同意横幅，接受前不会加载 Google Analytics 或设置其 Cookie。选择通过 fb_consent 保存 180 天。其他访客的访问会在没有横幅的情况下被统计。Cookie 设置链接可清除选择，使横幅再次显示。Google 也提供退出统计的浏览器插件。您可以在浏览器设置中管理或删除 Cookie。

  • Google Analytics 的 _ga 与 _ga_30195GE1FX Cookie 用于区分访问，最长保存 2 年。
  • fb_consent 保存欧洲横幅中的统计选择，保留 180 天。
  • Cloudflare 的 cf_clearance（也可能包括 __cf_bm）记录浏览器已通过安全检查，期限由 Cloudflare 设置。
  • 酒店引擎的 fb_lang 保存页面语言，fb_cur 保存显示货币，均保留 180 天；fb_h 用于确认真实浏览器，防止价格页面被爬取，保留 2 天。
  • 酒店引擎按会员计划分别保存会员号 Cookie，限于 /hotels 路径，设为 HttpOnly，保留 90 天，可用酒店页面的按钮清除。
  • 连接器登录页面的 fb_invite_grace 用于在 /authorize 重复连接步骤，保留 15 分钟。
  • 聊天的 localStorage 项目 fb_chat_sid 和 fb_chat_seen 用于继续对话，直到被清除。

安全

网站全程使用 HTTPS 加密传输。支付卡信息在加密页面上填写，并直接传送到预订系统。我们只保留服务所需的最少信息，并限制内部访问权限。不过，没有任何互联网传输方式是绝对安全的，我们无法保证绝对的安全性。

您的权利

无论您身在何处，您都可以：

  • 要求查看我们持有的关于您的信息；
  • 要求更正不准确的信息；
  • 要求删除您的信息（法律要求我们保留的记录除外，例如已完成预订的会计凭证）；
  • 撤回您对营销邮件的同意。

请发送邮件至 [email protected] 提出请求，我们会在合理时间内（通常 30 天内）回复。加州居民依加州法律享有的权利，我们同样尊重并遵守。

欧洲访客可以通过页面底部的「Cookie 设置」链接更改访问统计选择。任何人都可以使用 Google 的退出统计的浏览器插件。我们不出售个人信息，也不为跨情境行为广告共享个人信息。

未成年人

本网站不面向 18 岁以下人士。预订必须由成年人完成；随行儿童的信息（如年龄）仅用于酒店安排入住。

政策更新

我们可能会不时更新本政策。最新版本会在本页发布并注明生效日期。

联系我们

FlyBest · Jay Yan，Virtuoso 旅行顾问
邮箱：[email protected]

预订通过 Coastline Travel Advisors 完成（加州旅游销售商登记 CST 2040360-40，ARC 05582905），12373 Lewis St., Ste. 201, Garden Grove, CA 92840 · 714-621-1040

Privacy Policy

FlyBest (“FlyBest”, “we”, “us”) is operated by Jay Yan, an independent travel advisor based in California, USA, whose title on this site is Virtuoso Travel Advisor. FlyBest is affiliated with Coastline Travel Advisors, through which bookings are made. This policy explains what information we collect when you visit flybest.org and its sub-sites (including the hotel search and booking engine embedded on our homepage) or book a hotel through us, how we use it, who receives it, and the choices you have. We have tried to write it in plain language; if anything is unclear, please email us. Bookings themselves are subject to our 使用条款 · Terms of Use.

What we collect

We collect information you provide, booking information, and the chat, technical and analytics data described below:

  • Identity and contact details: your name (as it appears on your ID), email address and phone number.
  • Booking details: the hotel, check-in and check-out dates, number of guests and children’s ages, room type and rate, and any special requests (bed type, arrival time, dietary or accessibility needs).
  • Hotel loyalty number (optional): if you enter a hotel programme membership number, we pass it to the hotel so that you can earn points or receive member benefits. The hotel engine also sends it to the reservation system with rate searches so that member rates can be shown. A number entered on an engine hotel page is kept in a browser cookie for 90 days; you can clear it with the button on that page.
  • Payment card details: the card number, expiry date and cardholder name used to guarantee your reservation or to pay a deposit required by the hotel. See “How your card is used” below.
  • Correspondence: what you send us by email, messaging apps or phone.
  • Basic technical data: like any website, our server keeps standard logs (IP address, browser type, time of visit) to keep the site secure and running.
  • Live chat: FlyBest’s server stores your messages and Jay’s replies, the time, the page where you opened the chat, the language, and a salted hash of your IP address to limit abuse. Chat records do not store the raw IP address or collect a name or email unless you type one in a message. Chat sets no cookies; the browser keeps a chat identifier in localStorage (fb_chat_sid and fb_chat_seen) to continue the conversation on the next page. Anyone holding that identifier can read that conversation.
  • Analytics: Google Analytics collects pages viewed, the referring site, device and browser type, and an approximate location (city/country) derived from the IP address, and records page views, a home-page view event with the page language, and clicks toward the hotel directory. Google Analytics 4 does not log or store IP addresses. The hotel engine and offer pages also send Google Analytics search events (destination, dates, nights, adults, number of results), hotel views (hotel, city, chain, lowest price and currency), booking starts (hotel, rate programme, dates, nights, currency, total) and completed bookings (the same details plus a one-way hashed booking reference), under the same Europe consent gate. These events come from page parameters, not the form; guest names, contact details (email and phone), loyalty numbers, requests and card details are never sent.
  • Hotel engine logs: the ai.flybest.org server logs record IP addresses, requested addresses and times.

How your card is used

Your card details are used for one purpose only: to guarantee your reservation, or to pay a deposit or prepayment where the rate requires it, as the hotel requests.

  • The card number you enter on the booking page travels straight to the hotel’s reservation system through a global distribution system. The flybest.org website does not store the full card number; after the booking is placed, our records keep only masked details (such as the last four digits) for reference.
  • FlyBest never charges your card. We do not charge a booking fee or a service fee; we are paid by commission from the hotel.
  • If the hotel charges a deposit, prepayment, no-show or late-cancellation fee under its policy, it charges your card directly, under the cancellation and payment terms shown for that rate when you booked.
  • Please never send a full card number by email or chat. If you need to change the guarantee card, contact us and we will provide a secure way to do so.

The booking page used by the hotel engine and offer links shows the total in the hotel’s currency, any deposit or prepayment, and the rate’s cancellation terms; you tick to confirm you have seen them. Deposit or prepaid rates require an extra tick. Nothing is booked until the page is submitted.

How we use your information

  • To place and manage your hotel booking, including changes, cancellations and pre-arrival communication.
  • To pass on your requests to the hotel and, where applicable, to arrange Virtuoso or similar partner-programme benefits (such as breakfast, a hotel credit or an upgrade subject to availability).
  • To send you emails about your booking: our own booking confirmation and the official confirmation generated by the hotel or the reservation system, and occasionally a pre-arrival note or an important notice from the hotel.
  • To remember your travel preferences so that we can advise you better next time.
  • To meet legal, accounting and tax record-keeping requirements.
  • To continue and follow up on live chats, limit chat abuse, and measure page views and clicks toward the hotel directory.

We do not sell your personal information, and we do not send marketing email without your consent.

Who receives your information

  • The hotel: the property you book receives your name, contact details, stay details, special requests, loyalty number and guarantee-card details so that it can host you. The hotel’s own privacy policy applies to how it handles them.
  • The global distribution system / reservation system: your booking is transmitted to the hotel’s reservation system through a global distribution system that is standard in the travel industry and handles bookings and card data under industry security standards.
  • Our booking records: bookings are recorded in FlyBest’s order and client records so that we can look after your trip.
  • Virtuoso: when you book a Virtuoso rate, the hotel knows the booking comes through a Virtuoso advisor so that it can extend the programme benefits.
  • Legal requirements: we may disclose information where the law requires it or where necessary to protect legal rights.
  • Coastline Travel Advisors: every reservation is made in its reservation system and carries its booking remarks for back-office accounting, so the agency can see each reservation.
  • Cloudflare: traffic to the flybest.org website passes through Cloudflare for security, bot protection and caching; it sees IP addresses and request data. ai.flybest.org, where the hotel engine, the booking and payment pages and the AI connector run, does not pass through Cloudflare; it connects directly to our server on Google Cloud.
  • GoDaddy: hosts the flybest.org WordPress site, and its server keeps standard access logs.
  • Google: provides Google Analytics; your browser contacts Google’s servers to load Google Fonts; Gmail handles booking emails and chat follow-up through [email protected]; Google Cloud hosts the hotel engine, database and backups in the United States.
  • A cloud records service: stores FlyBest’s order and client records so Jay can follow up.
  • A messaging service: delivers live-chat messages to Jay’s phone and brings his replies back to the same chat box.

Using FlyBest inside an AI assistant

When you use the FlyBest AI connector inside Claude, ChatGPT or another assistant, see the connector’s own privacy notice and terms. We do not receive your chat transcript through the connector; the AI provider handles the conversation under its own policy.

International transfers

FlyBest operates from the United States. Your information is processed in the United States, in the country where your hotel is located, and wherever the reservation system operates. Data-protection laws differ between countries; all transfers between us and our partners use encrypted connections.

Google Cloud processes hotel-engine, booking-database and nightly-backup data in the United States. Traffic to the flybest.org website (not ai.flybest.org) also passes through Cloudflare, and browsers contact Google’s analytics and font services.

How long we keep it

  • Booking records (name, contact details, hotel, dates, confirmation number) are kept after your trip to handle any follow-up and to meet accounting and tax record-keeping requirements, generally for no more than seven years, and are then deleted or anonymised.
  • Full payment-card numbers are not stored on this website. The reservation system and the hotel retain guarantee-card details under their own policies, typically until after your stay or after the cancellation window has passed.
  • Email, messaging-app and phone correspondence is kept for a reasonable period after the matter it relates to is closed.
  • Google Analytics event and user data is retained for 14 months.
  • The hotel engine’s web-server logs are rotated daily and kept for 14 days.
  • The booking database is backed up nightly in Google Cloud in the United States; each backup is deleted after 60 days.
  • Live-chat messages are kept to continue the conversation and follow up, and are deleted on request; there is currently no automatic deletion schedule.

Cookies and embedded content

This site and the hotel engine use Google Analytics 4, with cross-domain measurement between flybest.org, www.flybest.org and ai.flybest.org, to record page views, a home-page view event with the page language, and clicks toward the hotel directory. Analytics is not loaded for logged-in site editors. Advertising features and Google signals are off, and no advertising cookies are set. Google Analytics event and user data is retained for 14 months. The hotel engine and offer pages also send Google Analytics search events (destination, dates, nights, adults, number of results), hotel views (hotel, city, chain, lowest price and currency), booking starts (hotel, rate programme, dates, nights, currency, total) and completed bookings (the same details plus a one-way hashed booking reference), under the same Europe consent gate. These events come from page parameters, not the form; guest names, contact details (email and phone), loyalty numbers, requests and card details are never sent.

Visitors whose browser time zone is in Europe (including Reykjavik, the Canary Islands, Madeira and the Azores) see a consent banner first; Google Analytics is not loaded and its cookies are not set until they accept. The choice is stored in fb_consent for 180 days. Other visitors are measured without a banner. The Cookie settings link clears the choice so the banner shows again. Google also provides an opt-out browser add-on. You can manage or delete cookies in your browser settings.

  • Google Analytics cookies _ga and _ga_30195GE1FX distinguish visits and last up to two years.
  • fb_consent keeps the analytics choice from the Europe banner for 180 days.
  • Cloudflare’s cf_clearance (and possibly __cf_bm) records that the browser passed a security check; Cloudflare sets its lifetime.
  • The hotel engine’s fb_lang keeps the page language and fb_cur the display currency, both for 180 days; fb_h identifies a real browser to prevent crawling of priced pages and lasts two days.
  • The hotel engine keeps a loyalty-number cookie for each hotel programme, limited to /hotels and marked HttpOnly, for 90 days; the hotel page has a button to clear it.
  • The connector sign-in cookie fb_invite_grace lets the browser repeat the connection step at /authorize for 15 minutes.
  • Chat localStorage entries fb_chat_sid and fb_chat_seen continue the conversation and remain until cleared.

Security

The site is served over HTTPS. Card details are entered on an encrypted page and passed directly to the reservation system. We keep only the minimum information needed and restrict access to it internally. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

Your rights

Wherever you live, you can:

  • ask to see the information we hold about you;
  • ask us to correct inaccurate information;
  • ask us to delete your information (except records we are legally required to keep, such as accounting records of completed bookings);
  • withdraw your consent to marketing email.

Email your request to [email protected] and we will respond within a reasonable time, normally within 30 days. California residents have specific rights under California law, which we respect and honour.

Visitors in Europe can change their analytics choice with the Cookie settings link at the bottom of the page. Anyone can use Google’s opt-out browser add-on. We do not sell personal information or share it for cross-context behavioural advertising.

Children

This site is not directed at anyone under 18. Bookings must be made by an adult; information about accompanying children (such as ages) is used only for the hotel to arrange the stay.

Changes to this policy

We may update this policy from time to time. The current version is always published on this page with its effective date.

Contact

FlyBest · Jay Yan, Virtuoso travel advisor
Email: [email protected]

Bookings are made through Coastline Travel Advisors (California Seller of Travel CST 2040360-40, ARC 05582905), 12373 Lewis St., Ste. 201, Garden Grove, CA 92840 · 714-621-1040