Privacy Policy

Last updated: May 05, 2026

Only Flights ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

To provide our flight booking services, we collect several types of information:

  • Identity Data: Full name, date of birth, gender, and passport details (for international travel).
  • Contact Data: Email address, telephone number, and billing address.
  • Financial Data: Encrypted payment card details and transaction history.
  • Technical Data: IP address, browser type, and location data when you visit our website.
  • Call Recordings: We record phone calls for training, quality assurance, and to maintain a record of your booking instructions.

2. How We Use Your Information

We process your data based on the following legal grounds:

  • Performance of Contract: To process your booking, issue tickets, and manage your travel itinerary.
  • Legal Obligation: To comply with financial regulations and ATOL reporting requirements.
  • Legitimate Interests: To improve our services, handle customer inquiries, and prevent fraud.

3. Data Sharing & Third Parties

We must share your data with third parties to fulfill your travel arrangements:

  • Service Providers: Airlines, hotels, and Global Distribution Systems (GDS) like Amadeus or Sabre.
  • Regulatory Bodies: The Civil Aviation Authority (CAA) for ATOL compliance.
  • Security Partners: Fraud prevention agencies and credit reference agencies.

Please note that travel providers may be located outside the UK/EEA. By booking with us, you acknowledge this international transfer of data.

4. Your Legal Rights

Under UK GDPR, you have the right to:

  • Request access to your personal data.
  • Request correction or erasure of your data.
  • Object to or restrict the processing of your data.
  • Request the transfer of your data (data portability).

To exercise these rights, please contact our Data Protection Officer at info@onlyflights.com.

5. Data Security

We have implemented robust security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees and partners who have a business need to know.