Privacy Policy (UK GDPR Compliant)
Data Controller Information
This Privacy Policy is managed by **UK Flight Booker Ltd.**, who acts as the **Data Controller** for the information collected via this Service. We are committed to protecting Your data under the UK General Data Protection Regulation (GDPR).
Last updated: August 31, 2025
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You. It is designed to comply with the **UK General Data Protection Regulation (GDPR)** and related UK data protection legislation.
We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
1. Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Company (referred to as either "the Company", "We", "Us" or "Our") refers to **UK Flight Booker Ltd.**
- Cookies are small files placed on Your device containing browsing history details.
- Country refers to: **United Kingdom**
- Personal Data is any information that relates to an identified or identifiable individual (e.g., name, email, flight details).
- Service refers to the Website, including the flight booking engine, compensation claims service, and all published content.
- Service Provider means any natural or legal person who processes the data on behalf of the Company (e.g., analytics providers, payment processors).
- Usage Data refers to data collected automatically (e.g., IP address, page duration).
- You means the individual accessing or using the Service.
2. Collecting and Types of Data Collected
Personal Data Collected
We may collect personally identifiable information when you use our services (e.g., searching for **cheap flights UK** or filing a compensation claim). This includes, but is not limited to:
- Email address, First name and last name
- Phone number, Address, State, ZIP/Postal code, City
- **Sensitive Booking Data:** Flight details, booking references, and passenger names (required for contract performance).
Usage Data Collected Automatically
Usage Data is collected automatically to monitor and improve the Service:
- Device’s Internet Protocol address (IP address), browser type and version, pages visited, time of visit.
- Mobile device unique ID, mobile operating system, and unique device identifiers.
Tracking Technologies and Cookies (See dedicated Cookies Policy)
We use Cookies and similar tracking technologies to monitor activity and store information. These include:
- Necessary / Essential Cookies: Required for the basic operation of the Service (e.g., security, authentication).
- **Functionality Cookies:** Used to remember your preferences (e.g., language, login details).
- **Analytics Cookies:** Used by Service Providers (e.g., Google Analytics) to analyze usage patterns.
For detailed information on cookies, please visit our dedicated **Cookies Policy** page or the ICO website (UK Information Commissioner’s Office).
3. Legal Basis for Processing (UK GDPR)
Under the UK GDPR, we must have a lawful basis to process Your Personal Data. We rely on the following bases:
- Performance of a Contract: Necessary for the performance of a contract to which You are party (e.g., processing Your flight search, managing a booking, or executing a compensation claim).
-
Legitimate Interests: Necessary for Our legitimate interests (or those of a third party) where Your interests and fundamental rights do not override those interests. This includes:
- Monitoring and improving Service security and functionality.
- Conducting data analysis and identifying usage trends.
- Business transfers and reorganizations.
- Legal Obligation: Necessary for compliance with a legal obligation to which the Company is subject (e.g., tax, regulatory, or law enforcement requests).
- Consent: Where You have explicitly given Us consent for a specific purpose (e.g., opting into marketing communications). You have the right to withdraw consent at any time.
4. Use and Sharing of Your Personal Data
Use of Your Personal Data
The Company uses Personal Data primarily for the following purposes:
- To provide and maintain the Service and manage Your Account.
- To fulfill purchase contracts (flight booking, claim filing).
- To contact You (updates, security alerts, service-related communications).
- To offer You news, offers, and information (if You have consented).
Sharing Your Personal Data
We may share Your personal information in the following situations, always ensuring adequate data protection:
- **With Service Providers:** To monitor usage, perform analysis, and fulfill contracted services (e.g., sending booking data to airlines/hotels via third-party APIs).
- **With Business Partners:** To offer joint products or promotions, only with Your explicit consent or clear legal basis.
- **For Legal Compliance:** To comply with law enforcement or legal requirements (e.g., court order).
5. Retention and Transfer of Data
Retention of Your Personal Data
We retain Personal Data only for as long as is necessary to achieve the purposes set out in this Privacy Policy, including satisfying any legal, accounting, or reporting requirements (e.g., retaining records for historical compensation claims).
Transfer of Your Personal Data (GDPR Compliance)
As a global service, Your data may be transferred to — and maintained on — computers located outside of the UK/EEA (e.g., to third-party Service Providers or airlines located internationally).
We ensure that safeguards are in place for international transfers, such as the use of **Standard Contractual Clauses (SCCs)** or reliance on **UK Adequacy Decisions**, to guarantee Your data is treated securely and in accordance with UK GDPR requirements.
6. Your Data Protection Rights Under UK GDPR
Under the UK GDPR, You have the right to request the following from Us, the Data Controller:
- **The right to access:** Request copies of Your Personal Data.
- **The right to rectification:** Request correction of inaccurate or incomplete data.
- **The right to erasure (Right to be Forgotten):** Request Us to delete Your Personal Data, under certain conditions.
- **The right to restrict processing:** Request restriction of processing, under certain conditions.
- **The right to object to processing:** Object to processing based on legitimate interests.
- **The right to data portability:** Request transfer of collected data to another organization or directly to You.
- **The right to withdraw consent:** Withdraw Your previously given consent at any time.
To exercise any of these rights, please contact Us using the details below. We will respond to Your request within one month.
Right to Lodge a Complaint with the ICO
If You believe We have not handled Your Personal Data in accordance with the law, You have the right to lodge a complaint with the supervisory authority, which in the UK is the **Information Commissioner’s Office (ICO)**.
ICO Contact Details: https://ico.org.uk/make-a-complaint/
7. Security and Children’s Privacy
Security of Your Personal Data
We implement appropriate technical and organizational measures to protect Your Personal Data (e.g., encryption, access controls). However, no method of transmission over the Internet or electronic storage is 100% secure. While We strive to protect Your data, we cannot guarantee its absolute security.
Children’s Privacy
Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and believe Your child has provided Us with Personal Data, please contact Us immediately.
8. Changes and Contact Information
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any material changes via email and/or a prominent notice on Our Service, prior to the change becoming effective. You are advised to review this Privacy Policy periodically.
Contact Us
If you have any questions about this Privacy Policy, Your rights, or how we process Your data, You can contact us:
- By email: info@ukflightbooker.com
- By post (Data Controller): **UK Flight Booker Ltd., [Insert Company UK Address Here]**
