Privacy Policy
What we collect when you ask for a charter quote, who we pass it to, how long we keep it, and how to get it deleted.
What we collect
When you request a quote: your name, email, optional phone and company, and the trip details you give us — origin, destination, date, passenger count, type of flight and any notes. We also record which page the request came from, the referring URL, your IP address and browser user-agent, which we use for fraud prevention and to understand which parts of the site are useful.
When you contact us: whatever you put in the message.
When you browse: aggregate usage events. We do not sell this or share it with advertising networks.
When you pay for a trip: we take payment for bookings, but card details are entered directly with our payment processor and are never stored on our servers. We hold the billing name, the amount, the last four digits and the transaction reference so we can reconcile, invoice and refund.
The important disclosure: we pass your enquiry to operators
The whole point of a quote request is that we show it to charter operators who might fly it. When you submit one, we share your trip details and contact details with a small number of operators selected for that request. They then hold your details as an independent data controller and their own privacy policy applies to what they do next.
We only send an enquiry to operators we think can actually fulfil it. We do not sell contact lists, and we do not pass your details to anyone who is not a prospective operator for your specific trip.
Once a trip is confirmed, the operator flying you also needs passenger names and, for performance planning, passenger weights — that is a safety requirement, not marketing. We pass only what the flight requires.
Why we are allowed to do this
Where GDPR or similar law applies: we process quote requests to take steps at your request prior to entering a contract, and to pursue our legitimate interest in arranging charter flights, balanced against your interest in not being contacted by people you did not ask to hear from — which is why we limit distribution to operators relevant to your trip. Analytics and security processing rest on legitimate interest.
How long we keep it
- Quote requests: 24 months from your last contact with us, then deleted or anonymised. We keep them this long because charter enquiries frequently recur seasonally and people ask us to look up what they booked before.
- Contact messages: 24 months.
- Booking and payment records: as long as tax and accounting law requires, typically six to seven years. These we cannot delete on request.
- Analytics events: 14 months, without contact details attached.
- Records we must keep for legal or accounting reasons: as long as the relevant law requires.
Your rights
You can ask us for a copy of what we hold, correct it, delete it, restrict or object to processing, or receive it in a portable format. Ask us and we will action it within 30 days. Deleting your data with us does not delete it from operators we already passed it to — ask them directly, and we will tell you who they were.
If you are in the UK or EU you may also complain to your national data protection authority.
Cookies
We use a session cookie to keep the site working, a CSRF cookie to protect forms from cross-site abuse, and a preference cookie remembering your language. These are necessary for the site to function. We do not run third-party advertising or cross-site tracking cookies.
Third parties
All CSS, JavaScript and fonts are served from our own domain — nothing is loaded from a third-party CDN, so browsing this site does not leak your IP address to anyone else. Our servers and email infrastructure are operated by us or by our hosting provider under contract. Card payments are processed by a third-party payment processor under contract, which handles the card data we deliberately never touch.
Security
The site is served over HTTPS. Access to enquiry data is restricted to people who need it. No system is perfectly secure, and we would tell you promptly if that assumption failed in a way that affected you.
Children
This service is not directed at children under 16 and we do not knowingly collect their data.
Changes
Material changes will be noted here with the date they take effect.
Contact
Privacy questions and data requests: contact us.