Your privacy.

1. Who we are

The UK Flights Ltd is registered in England and Wales, company number 06995514. We are the data controller for the personal data described here. You can reach us about anything in this policy on 020 7993 8474 or at sales@theukflights.com.

2. What we collect

Booking details. Traveller names, titles, dates of birth, and the lead traveller’s email address and phone number. Some airlines also require passport details before ticketing, and we collect those only when the airline asks. For a hotel, the names of the guests, the ages of any children and any requests you add for the hotel.

Account details, if you create an account. Your email address, a securely hashed password, and any traveller details you choose to save for faster booking.

Payment. Card payments are processed by our payment partner using bank grade security. Your full card number never touches our servers and we do not store it.

Technical basics. Like nearly every website we keep simple server logs. We also count page views and actions such as searches, fares chosen and enquiries sent, along with the website or link that brought each visit, so our team can see what helps people book. We do this without cookies and without keeping anything in your browser. Your IP address and browser are used only to make a code that changes every day, and are never stored. The counts never hold your name, email address, phone number or anything you type.

3. Why we use it

To make and manage your booking, which is the contract between us. Traveller details go to the airline to issue your tickets, and guest details go to the hotel to hold your room, which is what they are for.

To look after you, for example contacting you about a schedule change, a fare issue or a question on your booking.

To meet legal duties that apply to travel agents, including keeping proper booking and accounting records.

We do not sell your data and we do not send marketing unless you have asked for it.

4. Who we share it with

The airline operating your flights, to issue and manage your tickets. Where your journey involves airlines outside the UK, your booking details travel with it, as they must for any international journey.

Duffel, the accredited travel technology platform we book and pay airlines through, which processes booking data on our behalf.

For a hotel booking, Hotelbeds, the accommodation supplier we book rooms through, and the hotel you are staying at. They receive the lead guest’s name, the names of the other guests, the ages of any children and any requests you add for the hotel, which is what they need to hold your room.

Google, for our website analytics, and only if you accept analytics cookies, as the analytics cookies section below explains.

Vercel, which hosts this website, and Upstash, which stores the accounts, bookings and messages the site keeps.

Nobody else, unless the law requires it, for example border authorities where airlines must share passenger data.

5. Cookies

We use one essential cookie, which keeps you signed in to your account, and your browser remembers your light or dark theme choice and your answer about analytics cookies.

We do not use advertising cookies, and our own visitor counting works without cookies. The only other cookies are Google Analytics ones, set only if you accept them, as the next section explains.

6. Analytics cookies

If you accept analytics cookies, we use Google Analytics, a service from Google Ireland Limited, to see how people use our site. It receives the pages you visit, the site or link that brought you, your device and browser, your rough location to the nearest town, and the same actions we count ourselves, such as searches and enquiries sent. Google uses your IP address to work out that location and does not store it. It never receives your name, email address, phone number, date of birth or passport details, and we have switched off Google’s advertising features, so none of it is used for adverts.

Nothing is sent to Google until you choose Accept analytics cookies. The cookies are _ga, which tells one browser from another, and one named _ga_ followed by our Google Analytics code, which keeps track of a visit. Each lasts up to 12 months from your last visit.

Google Analytics keeps what it collects for 14 months, then deletes it. Google processes it on our behalf and may do so in the United States, under the safeguards UK law requires.

You can change your mind at any time with Cookie settings at the foot of every page. If you reject analytics cookies, we stop Google Analytics straight away and delete its cookies from your browser. We ask again after 12 months.

Our own counting, described under what we collect, uses no cookies and keeps nothing in your browser, so it runs whatever you choose.

7. Keeping it safe, and for how long

Bookings travel over encrypted connections and passwords are stored hashed, never in plain text.

We keep booking records for as long as travel and accounting law requires, generally six years, then delete them. Account details are kept while your account is open and removed when you ask us to close it.

8. Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct it, delete it, restrict how we use it, object to our use of it, or move it elsewhere. Email sales@theukflights.com and we will handle it, normally within a month, always for free.

9. If you are not happy

Tell us first and we will do our best to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.