Privacy Policy

Controller: Flight Delay Compensation ("we", "us", "our") operates this flight compensation claims service. We are the data controller responsible for your personal data.

Contact: For privacy-related enquiries, please contact us at:

• Email: privacy@flight-delay-claim.com
• Data Protection Officer: dpo@flight-delay-claim.com
• Address: London, United Kingdom

We process personal data in accordance with the UK GDPR and the EU General Data Protection Regulation.

Personal Information

• Identity: Name, date of birth
• Contact: Email address, phone number, postal address
• Financial: IBAN/bank details for compensation payments

Travel Data

• Flight number and date
• Departure and arrival airports
• Booking reference and ticket number
• Disruption details (delay duration, cancellation)

Supporting Documents

• Boarding passes
• Booking confirmations
• Airline correspondence
• Expense receipts (if applicable)

Technical Data

• IP address (for fraud prevention and audit)
• Browser type and device information
• Usage data and cookies (see Section 7)

Special Category Data: We do not intentionally collect special category data (health, religious beliefs, etc.). Please do not include such information in your submissions.

• Active claims: Data retained for the duration of claim processing plus the applicable limitation period (typically 6 years in the UK).
• Raw uploads: Supporting documents are automatically deleted 12–24 months after claim closure, unless subject to legal hold.
• Audit records: We retain minimal audit hashes and outcomes for the full limitation period to support legal compliance.
• Account data: Retained while your account is active. Deleted upon request, subject to legal retention requirements.
• Marketing: Consent records and preferences retained until withdrawn.

Service Providers (Processors)

• Flight data providers: To verify flight details and disruptions
• E-signature services: To collect legally binding authorizations
• Cloud storage: Secure document and data hosting
• Email services: For notifications and correspondence
• Payment processors: To process compensation payouts

All processors operate under Data Processing Agreements (DPAs) and are bound to process data only for specified purposes.

Other Recipients

• Airlines: As necessary to pursue your claim (under your authorization)
• Regulators & courts: Where required by law or to establish legal claims

International Transfers

Some processors may be located outside the UK/EEA. Where transfers occur, we ensure appropriate safeguards are in place:

• UK International Data Transfer Agreement (IDTA)
• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable

Under UK GDPR and EU GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention)
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@flight-delay-claim.com. We will respond within one month.

You will not be charged a fee unless your request is manifestly unfounded or excessive.

We use cookies and similar technologies for:

• Essential cookies: Required for the service to function (authentication, security)
• Analytics cookies: To understand how visitors use our site (with consent)
• Marketing cookies: To deliver relevant advertising (with consent)

You can manage your cookie preferences through our consent banner or your browser settings. For detailed information, see our Cookie Policy.

If you are unhappy with how we handle your data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with your supervisory authority:

• UK: Information Commissioner's Office (ICO) — ico.org.uk
• EU: Your national data protection authority

We protect your data through:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Column-level encryption for sensitive fields (IBAN, payment details)
• Role-based access controls and least-privilege principles
• Comprehensive audit logging
• Regular security assessments and penetration testing
• Secure development practices (OWASP ASVS)

We may update this policy from time to time. Material changes will be communicated via email or prominent notice on our website. We encourage you to review this page periodically.