We are committed to protecting your personal information. This policy explains how we collect, use, and safeguard your data.
This Privacy Policy describes how FlightsWide UK Ltd. collects, uses, processes, and discloses your information, including personal information, in conjunction with your access to and use of our website, services, and communications.
By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this policy, please do not access our website or use our services.
We collect different types of information to provide and improve our services to you. This includes:
We use your personal information for the following purposes, each grounded in a lawful basis under UK GDPR:
| Purpose | Description |
|---|---|
| Flight Bookings | To process, manage, and confirm your flight reservations with airlines and travel partners |
| Rescheduling & Refunds | To handle flight changes, cancellations, and refund requests as per airline policies |
| Payment Processing | To process payments securely and prevent fraudulent transactions |
| Communication | To send booking confirmations, itineraries, updates, reminders, and respond to your inquiries |
| Customer Support | To provide assistance, resolve issues, and improve our service quality |
| Legal Compliance | To comply with ATOL, IATA, aviation regulations, anti-money laundering laws, and tax obligations |
| Marketing | With your consent, to send promotional offers, newsletters, and travel deals (you can opt out at any time) |
| Analytics & Improvement | To analyse website usage, improve user experience, and optimise our services |
We process your personal data under the following lawful bases as defined by UK GDPR:
We may share your personal data with the following categories of third parties:
| Third Party | Purpose | Security Measures |
|---|---|---|
| Airlines & Travel Partners | To issue tickets, manage bookings, process changes | Encrypted data transfer, contractual agreements |
| Payment Processors | To process card payments securely | PCI DSS compliant, tokenised payments |
| ATOL / CAA | Regulatory reporting and consumer protection | Secure government portals |
| IATA | BSP settlement and industry compliance | Encrypted channels, IATA security standards |
| IT Service Providers | Website hosting, email services, CRM systems | GDPR-compliant contracts, data processing agreements |
| Legal Advisors | For legal disputes, compliance, and regulatory matters | Legal professional privilege, confidential agreements |
| Law Enforcement | When required by law, court order, or for fraud prevention | Only minimum necessary data disclosed |
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
| Data Type | Retention Period |
|---|---|
| Booking & Ticket Data | 7 years (for tax and ATOL compliance) |
| Payment Records | 7 years (for financial and tax compliance) |
| Customer Communications | 3 years after last interaction |
| Marketing Consent Records | 6 years (to demonstrate lawful consent) |
| Website Analytics Data | 26 months (Google Analytics default) |
| CV / Employment Applications | 12 months after decision, unless consent given for longer |
After the retention period expires, your data is securely deleted or anonymised. We conduct regular data audits to ensure compliance with retention schedules.
Our website uses cookies and similar tracking technologies to enhance your browsing experience. Below is a breakdown of the cookies we use:
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.
Under UK GDPR, you have the following rights regarding your personal data. We are committed to responding to all legitimate requests within 30 days.
Request a copy of all personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your data where no legal obligation to retain it exists.
Request limitation of processing your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
Withdraw consent at any time where processing is based on consent.
Not to be subject to decisions based solely on automated processing.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.
We implement robust technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:
Our services are not directed at individuals under the age of 16 years. We do not knowingly collect personal data from children without verified parental or guardian consent.
If we discover that we have collected personal data from a child under 16 without proper consent, we will take immediate steps to delete that information. If you believe a child has provided us with personal data, please contact us at privacy@flightswideuk.co.uk.
Please note that for flight bookings, all passengers (including minors) require valid travel documentation as per the airline and destination country requirements.
As a flight booking agency, your data may be transferred to countries outside the United Kingdom for the following reasons:
Where data is transferred to countries not recognised by the UK as having adequate data protection, we ensure appropriate safeguards are in place, including:
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:
Email: privacy@flightswideuk.co.uk
Phone: +44 20 1234 5678
Address: 128 High Street, London, NW1 2DB, United Kingdom
ICO Registration: ZAXXXXXX
We aim to acknowledge all data protection inquiries within 3 working days and provide a substantive response within 30 calendar days.
Multiple layers of protection ensure your information stays safe at every step.
256-bit SSL encryption protects all data transmitted between your browser and our servers.
Payment card data is processed through PCI DSS Level 1 compliant payment gateways only.
All bookings are ATOL protected, ensuring your data and money are fully safeguarded.
Strict internal access controls with two-factor authentication and role-based permissions.
Our Data Protection Officer is here to help with any questions about your data rights, privacy concerns, or data-related requests.
Designed & Developed with for flightswideuk.co.uk | All flights are ATOL protected.