GDPR Privacy Policy

Introduction

This GDPR Privacy Notice (“Notice”) is part of Traveloflights.co.uk’s Privacy Policy and applies to the handling of ‘personal data,’ as defined by the General Data Protection Regulation (“GDPR”), for individuals in the European Economic Area (“EEA”) or United Kingdom (“UK”) (referred here as “you” or “your”). Undefined terms take their meaning from our Privacy Policy or the GDPR. If this Notice conflicts with other parts of our Privacy Policy, it shall take precedence for EEA and UK individuals. If you’re outside these regions, see our general Privacy Policy.

Data Controller

Traveloflights.co.uk, operated by The Flight Trotters Limited, manages personal data collected through our websites, customer support centers, and travel services (collectively, the “Services”).

Data Storage Location

We store your personal data on secure servers in the United Kingdom.

International Data Transfers

We comply with:

• The EU-U.S. Data Privacy Framework (EU-U.S. DPF),
• The UK Extension to the EU-U.S. DPF,
• The Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

If these frameworks are invalidated, we’ll use the European Commission’s Standard Contractual Clauses (SCCs) to ensure safe data transfers to the U.K. For bookings with non-EEA/UK travel providers (e.g., airlines, hotels), we may rely on GDPR Article 49(1)(b) or 49(1)(c) derogations to fulfill contracts or at your request.

Data Retention Period

We keep your personal data only as long as needed for:

• Managing your bookings, account activity, and loyalty program participation;
• Studying travel trends to enhance our services;
• Handling your marketing preferences;
• Preventing fraud, ensuring security, and meeting legal obligations;
• Resolving disputes and supporting customers;
• Complying with legal retention rules and claim periods.

Data Protection Measures

Data Protection Measures

Government Data Requests

We may share your data with authorities if required by law for national security, law enforcement, or regulatory purposes.

Business Transitions

If we undergo a merger, acquisition, or asset sale, your personal data may transfer to the new entity, but we’ll honor our privacy commitments.

Your GDPR Rights

As an EEA or UK individual, you can:

1. View, correct, or delete your personal data;
2. Limit or object to how we use it;
3. Request data portability;
4. Revoke consent (if applicable).

To exercise these rights, email sales@Traveloflights.co.uk. with “GDPR Notice” in the subject line.

Objecting to Data Processing

You can object to the use of your data based on our legitimate interests, and we’ll stop unless there’s a compelling legal reason to continue. To stop marketing emails, use unsubscribe links or email sales@Traveloflights.co.uk. Essential messages, like booking confirmations, cannot be opted out of.

Filing Complaints

You can raise concerns with your local EEA or UK data protection authority (list at: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

You may also use rights under any Standard Contractual Clauses we’ve signed.

Minors

Our Services aren’t for those under 18, and we don’t knowingly collect their data.

Notice Updates

If we use your data in new ways, we’ll notify you and update this Notice, with the “Effective Date” reflecting the change.

Data Privacy Framework Compliance

We follow the DPF Principles

We have certified adherence to the:

• EU-U.S. DPF Principles for EU personal data;
• UK Extension to the EU-U.S. DPF for UK personal data;
• Swiss-U.S. DPF Principles for Swiss personal data.

In case of conflicts, DPF Principles take precedence

for EU, UK, and Swiss personal data, as set by the U.S. Department of Commerce. See our certification at: https://www.dataprivacyframework.gov/.

DPF Complaints

For unresolved DPF issues, we work with BBB National Programs Data Privacy Framework Services (https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers). Some disputes may qualify for binding arbitration.

Sharing Data with Third Parties

We may share data with service providers (e.g., for hosting, analytics, and marketing) who must meet our privacy standards and report any issues. We also share with affiliates to support our operations.

Opting Out of Data Sharing

To stop sharing with non-agent third parties, email sales@traveloflights.co.uk. Sensitive data requires your explicit consent before sharing

Your DPF Rights

To access, correct, or delete DPF-covered data, contact sales@Traveloflights.co.uk. We’ll respond within a reasonable timeframe.

DPF Data Retention

We keep DPF-related data only as long as needed for business or legal purposes, then anonymize or delete it.

Data Security

We take steps to protect DPF-related data from loss, misuse, or unauthorized access.

Contact Information

For questions or to exercise GDPR rights, contact:

• Email: sales@traveloflights.co.uk (Subject: “GDPR Notice”)
• Mail: Profile West 950 Great West Road Brentford, Middlesex, TW8 9ES

Do not include sensitive data such as payment details in emails.