Privacy Policy

FlyBeep Travel UK ("we", "us", "our") is dedicated to protecting your privacy and upholding the highest standards of data security. This Privacy Policy details our practices concerning the collection, storage, processing, and disclosure of personal data collected through our website, phone booking desk, email correspondence, and instant messaging services.

1. Privacy Policy Statement & Data Controller

1.1. Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the designated Data Controller responsible for your personal information is:

1.2. We ensure that all personal data is collected fairly, processed lawfully, stored securely, and retained only for as long as required for commercial travel delivery and statutory compliance.

2. Personal Data We Collect

To provide tailored flight quotations, manage reservations, and fulfill international ticketing obligations, we collect the following categories of personal information:

• Identity & Contact Details: Full name (first, middle, surname as shown on passport), title, gender, date of birth, telephone numbers, and email address.
• Travel Document Details: Passport number, nationality, country of issuance, passport expiration date, and Advance Passenger Information (APIS) required by international immigration authorities.
• Itinerary Preferences & Booking Details: Destination choices, preferred travel dates, cabin class, airline preferences, flight records, and special requests (including seat allocations or dietary preferences).
• Payment Information: Billing address, cardholder name, partial card digits, and transaction authentication logs. (Full card details are transmitted directly to PCI DSS compliant merchant processors and are never stored on our web servers).
• Communication Records: Transcripts of emails, WhatsApp chats, quotation requests, and telephone inquiries.
• Technical & Usage Data: IP address, browser type, device identifiers, and pages visited on our website to ensure system security and site usability.

3. How We Use Your Data

We process your personal information on legitimate lawful grounds, including contract performance, legal obligations, and legitimate commercial interests:

1. Quotation & Reservation Fulfilment: Checking real-time airline seat availability, generating bespoke flight options, locking fares, and completing ticket issuance via Global Distribution Systems (GDS).
2. Booking Administration & Customer Support: Issuing e-tickets, notifying you of airline schedule retimings or gate adjustments, managing date changes, and answering pre-departure queries.
3. Regulatory & Legal Compliance: Complying with Civil Aviation Authority (CAA) rules, reporting eligible bookings for ATOL financial protection schemes, and satisfying HM Revenue & Customs (HMRC) audit requirements.
4. Border & Security Compliance: Submitting mandatory Advance Passenger Information (APIS) to destination government border forces as required by international aviation treaties.
5. Fraud Prevention & Security: Verifying cardholder authorization on third-party payments, mitigating chargeback risk, and maintaining secure login environments.

4. Who We Share Your Data With

In order to complete international air travel arrangements, we must share specific passenger details with trusted industry counterparties. We do not sell, rent, or trade your personal data to marketing third parties. Data is shared strictly with:

• Operating Airlines: Carriers responsible for your flight transportation (e.g. British Airways, Virgin Atlantic, Emirates, Qatar Airways, Ethiopian Airlines, etc.) to issue tickets and manage flights.
• Global Distribution Systems (GDS): Certified reservation systems (such as Amadeus, Sabre, and Travelport) and wholesale ticketing consolidators that route airline seat inventory.
• Aviation & Regulatory Authorities: The UK Civil Aviation Authority (CAA) for ATOL protection audits, and border control agencies enforcing mandatory entry/transit APIS regulations.
• Secure Payment Gateways: Regulated PCI DSS merchant service providers handling secure tokenized credit/debit card transactions and 3D Secure verification.
• Technology Infrastructure Partners: Cloud hosting providers and transactional email services operating under strict UK GDPR Data Processing Agreements.

5. Data Retention & Security

5.1. Technical Security: We employ robust technical safeguards including SSL/TLS encrypted web transmissions, firewall defenses, access controls, and multi-factor authentication to prevent unauthorized data access, loss, or alteration.

5.2. Retention Periods: We retain booking records and financial transaction data for six (6) years following the conclusion of your travel in order to comply with UK statutory accounting, tax, and contractual liability laws. General sales enquiries that do not result in a confirmed reservation are automatically pruned after 12 months.

6. Cookies & Analytics

6.1. Our website uses essential functional cookies necessary for page navigation, session management, CSRF security verification, and form submissions.

6.2. We may use anonymized aggregate analytics to evaluate website performance and optimize user journeys. You can control or disable cookies via your browser settings, though certain website interactive features may not function properly without essential cookies.

7. Your UK GDPR Rights & Contact Information

Under UK data protection law, you possess defined statutory rights regarding your personal information:

• Right of Access: You may request a copy of the personal data we hold about you (Subject Access Request).
• Right to Rectification: You may request the correction of inaccurate or incomplete personal information.
• Right to Erasure: You may request the deletion of your personal data where it is no longer required for statutory or contractual purposes.
• Right to Restriction & Objection: You may object to or request restrictions on certain processing operations.

To exercise any of your data protection rights, or if you have questions concerning our privacy practices, please contact our Data Protection Officer:

If you are unsatisfied with our response, you have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO) at ico.org.uk.