Privacy Policy

EMEIA Travel Mart Ltd (Trading as CheapFlyShop)

UK GDPR & Data Protection Act 2018

1. Who We Are (Data Controller)

This Privacy Policy explains how EMEIA Travel Mart Ltd, trading as CheapFlyShop, collects, uses, stores, shares and protects your personal information when you use our website www.cheapflyshop.com or use our travel booking services.

We are the Data Controller responsible for your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Company Details

Company:
EMEIA Travel Mart Ltd

Trading Name:
CheapFlyShop

Company No:
11576383

VAT No:
319546778

Contact

5 South Charlotte Street
Edinburgh
EH2 4AN
United Kingdom

Email: support@cheapflyshop.com

Telephone: 020 7112 8747

2. What Personal Data We Collect

We collect personal information necessary to provide travel booking services efficiently and securely.

Information You Provide

  • Full name and title
  • Email address
  • Telephone number
  • Postal address
  • Date of birth
  • Passport number
  • Passport expiry date
  • Nationality
  • Booking details
  • Travel preferences
  • Frequent flyer numbers
  • Seat and meal preferences
  • Special assistance requests
  • Customer correspondence

Information Collected Automatically

  • IP Address
  • Browser Type
  • Device Information
  • Operating System
  • Website Usage Statistics
  • Pages Visited
  • Cookies and Tracking Technologies

Information Received From Third Parties

We may receive information from airlines, travel suppliers, payment processors, fraud prevention providers, or another person making a booking on your behalf.

4. How We Use Your Personal Data

Your personal information is used only for legitimate business purposes associated with providing travel services.

  • Process flight bookings
  • Issue airline tickets
  • Send booking confirmations
  • Manage booking changes
  • Handle cancellations
  • Process refunds
  • Provide customer support
  • Prevent fraud
  • Verify identity
  • Comply with legal obligations
  • Improve website performance
  • Analyse customer experience
  • Send marketing communications (where permitted)
  • Maintain website security
5. Who We Share Your Data With

We only share your personal information where it is necessary to provide our services, comply with legal obligations, or protect our legitimate business interests.

Airlines & Travel Suppliers

Passenger information is shared with airlines, consolidators, Global Distribution Systems (GDS), hotels and other suppliers to complete your booking and issue travel documents.

Payment Providers

Secure payment processors and banks receive payment information to process transactions and help prevent fraud.

Service Providers

IT providers, cloud hosting companies, email providers and customer support systems process information under strict contractual obligations.

Authorities

We may disclose information to regulators, immigration authorities, law enforcement, tax authorities or courts where legally required.

Important: We do not sell your personal data to any third party.
6. International Data Transfers

The travel industry is international by nature. Some airlines, suppliers and service providers operate outside the United Kingdom.

Whenever personal information is transferred outside the UK, we ensure appropriate safeguards are implemented in accordance with UK GDPR.

Safeguards We Use

  • UK Government Adequacy Regulations
  • International Data Transfer Agreement (IDTA)
  • UK Addendum to the EU Standard Contractual Clauses
  • Other UK GDPR approved transfer mechanisms
Airlines and Global Distribution Systems may process booking information in multiple countries as part of international travel operations.
7. How Long We Keep Your Data

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, accounting and regulatory obligations.

Data Category Retention Period
Booking Records Up to 7 Years
Accounting Records Up to 7 Years
Marketing Information Until Consent is Withdrawn
Customer Enquiries Up to 3 Years
Website Logs 12–24 Months

When information is no longer required, it is securely deleted or anonymised.

8. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have several rights regarding your personal information.

  • Right of Access
  • Right to Rectification
  • Right to Erasure
  • Right to Restrict Processing
  • Right to Data Portability
  • Right to Object
  • Right to Withdraw Consent
  • Right to Lodge a Complaint with the ICO
Exercising Your Rights

Please send your request to support@cheapflyshop.com with the subject line "Data Subject Request".

We may request proof of identity before processing your request. We normally respond within one month.

9. Cookies and Similar Technologies

CheapFlyShop uses cookies and similar technologies to improve website functionality, remember your preferences, analyse website traffic and enhance your browsing experience.

Cookies are small text files stored on your computer or mobile device when you visit our website.

Cookie Type Purpose
Essential Cookies Required for website functionality and secure bookings.
Analytics Cookies Help us understand website usage and improve services.
Functional Cookies Remember preferences and improve user experience.
You can control or disable cookies through your browser settings. Please note that disabling essential cookies may affect website functionality.
10. Marketing Communications

We may occasionally send promotional offers, travel deals, newsletters and service updates.

Marketing communications will only be sent where:

  • You have given your consent; or
  • The "soft opt-in" rules under the Privacy and Electronic Communications Regulations (PECR) apply.
You can unsubscribe from marketing emails at any time by clicking the Unsubscribe link contained within every marketing email or by contacting us directly.
11. Data Security

Protecting your personal information is important to us.

We implement appropriate technical and organisational measures designed to safeguard your information against unauthorised access, disclosure, alteration or destruction.

  • SSL encrypted website
  • Secure hosting infrastructure
  • Firewall protection
  • Access controls
  • PCI-DSS compliant payment gateways
  • Regular security monitoring
  • Staff confidentiality obligations
  • Secure backup procedures
While we take appropriate security measures, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
12. Children's Data

Our services are not directed towards children under the age of 18.

Where a booking includes child passengers, we collect only the information necessary to complete the travel booking, including passport details, age and travel documentation where required.

We do not knowingly collect personal information from children outside the normal travel booking process.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, regulatory guidance or our business operations.

Any updates will be published on this page together with the revised "Last Updated" date.

We encourage you to review this Privacy Policy periodically.
14. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your rights under UK GDPR, please contact us.

Contact Details

Email
support@cheapflyshop.com

Telephone
020 7112 8747

Registered Office

EMEIA Travel Mart Ltd
5 South Charlotte Street
Edinburgh
EH2 4AN
United Kingdom

Information Commissioner's Office (ICO)
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Website: https://ico.org.uk
Telephone: 0303 123 1113