Privacy Policy

1. Who we are

FlightsAway ("we", "us", "our") is the data controller responsible for personal data collected through flightsaway.co.uk.

Contact us about data protection matters at: office@flightsaway.co.uk

2. Data we collect

We collect the following categories of personal data:

• Search data: origin, destination, travel dates and passenger numbers entered when using our flight search tool.
• Quote data: flight details, pricing and your unique booking reference, stored when you initiate a booking enquiry.
• Contact data: name, telephone number and email address, collected when you call us or contact us by email.
• Payment data: card details collected over the telephone by our advisors. We do not store full card numbers; payment is processed by our secure payment provider.
• Technical data: IP address, browser type, pages visited and time of visit, collected automatically via server logs.

3. How we use your data

We use your personal data to:

• Provide our flight search and booking quotation service;
• Process and confirm flight bookings;
• Respond to your enquiries and provide customer support;
• Comply with our legal and regulatory obligations;
• Maintain the security and performance of our website.

4. Legal basis for processing

We process your personal data on the following legal bases:

• Contract: processing necessary to take steps at your request before entering into, or performing, a contract (e.g. processing a booking).
• Legitimate interests: operating and improving our website, preventing fraud, and maintaining security.
• Legal obligation: where we are required to process data to comply with the law.

5. Sharing your data

We do not sell your personal data. We may share it with:

• Airlines and travel suppliers: to complete your booking;
• Payment processors: to handle secure payment transactions;
• IT service providers: who host or support our systems, under data processing agreements;
• Law enforcement or regulatory authorities: where required by law.

6. Data retention

We retain quote and booking data for up to 7 years to comply with financial record-keeping requirements. Server log data is retained for up to 90 days. Data that is no longer required is securely deleted.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate data;
• Erase your data in certain circumstances;
• Restrict processing in certain circumstances;
• Object to processing based on legitimate interests;
• Data portability where processing is based on consent or contract and carried out by automated means.

To exercise any of these rights, contact us at office@flightsaway.co.uk. We will respond within one month.

8. Cookies

Our website uses a session cookie for the advisor portal (internal use only) and may set technical cookies necessary for the site to function. We do not use tracking, advertising or analytics cookies.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. However, no internet transmission is completely secure and we cannot guarantee the security of data transmitted to our website.

10. Complaints

If you have concerns about how we handle your data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

11. Changes to this policy

We may update this privacy policy from time to time. The current version will always be published on this page. We encourage you to review it periodically.