Data Protection Policy
1. Introduction
FLIGHTS SPOT LIMITED is committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Data Protection Policy outlines our commitments and procedures for handling personal data responsibly and in compliance with applicable data protection laws.
2. Data Controller
FLIGHTS SPOT LIMITED is the data controller for personal data processed in connection with our travel agency services.
Company Number: 16931942
Registered Address: 109-111 Fulham Palace Road, London, W6 8JA
Data Protection Contact: privacy@flightsspot.co.uk
3. Legal Basis for Processing
We process personal data under the following lawful bases:
Contract Performance (Article 6(1)(b))
Processing necessary to fulfil your travel booking, including:
- Collecting passenger details for airline bookings
- Processing payments
- Sending booking confirmations and travel documents
Legal Obligation (Article 6(1)(c))
Processing required by law, including:
- Maintaining financial records for tax purposes
- Complying with anti-money laundering regulations
- Responding to lawful requests from authorities
Legitimate Interests (Article 6(1)(f))
Processing based on our legitimate business interests, including:
- Fraud prevention and security
- Improving our services
- Handling enquiries and complaints
Consent (Article 6(1)(a))
Processing based on your explicit consent, including:
- Marketing communications
- Non-essential cookies
You may withdraw consent at any time by contacting us.
4. Data Subject Rights
Under UK GDPR, you have the following rights:
| Right | Description |
|---|---|
| Right of Access | Request a copy of your personal data (Subject Access Request) |
| Right to Rectification | Request correction of inaccurate or incomplete data |
| Right to Erasure | Request deletion of your data where no longer necessary |
| Right to Restriction | Request limitation of processing in certain circumstances |
| Right to Portability | Request transfer of data in machine-readable format |
| Right to Object | Object to processing based on legitimate interests |
| Rights re: Automated Decisions | Not be subject to solely automated decision-making |
To exercise your rights, email privacy@flightsspot.co.uk with your request. We will respond within 30 days.
5. Data Retention
We retain personal data only for as long as necessary:
- Booking and transaction records: 7 years (legal/tax requirements)
- Customer communication records: 3 years after last interaction
- Marketing preferences: Until consent is withdrawn
- Website analytics data: 26 months
- Job application data: 6 months (unsuccessful), duration of employment + 6 years (successful)
Data is securely deleted or anonymised after the retention period expires.
6. International Transfers
When you book international flights, we may need to transfer your data outside the UK/EEA to:
- Airlines based in other countries
- Global Distribution Systems (GDS) for flight bookings
- Travel suppliers at your destination
For such transfers, we ensure appropriate safeguards including:
- UK adequacy regulations for transfers to countries with adequate data protection
- Standard Contractual Clauses (SCCs) approved by the ICO
- Binding Corporate Rules where applicable
7. Data Breach Procedures
In the event of a personal data breach, we will:
- Assess the breach and its potential impact within 24 hours
- Notify the ICO within 72 hours if required (risk to individuals)
- Notify affected individuals without undue delay if there is a high risk
- Document the breach, its effects, and remedial actions taken
- Review and improve security measures to prevent recurrence
8. Contact Information
For data protection enquiries or to exercise your rights:
Email: privacy@flightsspot.co.uk
Post: Data Protection, FLIGHTS SPOT LIMITED, 109-111 Fulham Palace Road, London, W6 8JA
To lodge a complaint about our data handling:
Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113