Privacy policy

Who is responsible for your information

Cheap Flights Corner is a trading name of Bright Travel Services Limited, company number 10884635, registered in England and Wales at 38 Applegarth, New Addington, Croydon, England, CR0 9DB. Bright Travel Services Limited is the controller of the personal information we use to operate this website and our agency service.

Email info@cheapflightscorner.com, call 020 7096 0386, or write to Bright Travel Services Limited, 38 Applegarth, New Addington, Croydon, England, CR0 9DB. Please quote your booking or enquiry reference and the lead passenger’s name.

Please mark privacy correspondence “Privacy request”. Airlines, hotels, payment providers and other travel suppliers may act as separate controllers for their own services and will have their own privacy notices.

Information we collect

Enquiries can include your name, email, telephone number, route, departure airport, dates, passenger counts and ages, preferred airline, cabin, package, room preference, budget and additional requests. A booking request may contain passenger and itinerary details needed to discuss or arrange the service.

We also hold correspondence, quotations, booking references, payment or refund records and complaint information where relevant to the service. Our website does not request full card numbers or card security codes in its enquiry forms. Use the secure payment method provided for a confirmed transaction.

Technical information can include IP addresses, request times, browser details, session identifiers and security events. Optional analytics and advertising technologies are described in our cookie policy and remain off until you choose them.

Why we use information and our lawful bases

• Enquiries and bookings: to respond to a request, prepare an offer, arrange agreed travel and administer changes, relying on steps requested before a contract and performance of a contract where applicable.
• Administration and security: to protect forms, prevent misuse, manage correspondence, maintain service records and deal with complaints, relying on legitimate interests balanced against your rights.
• Legal responsibilities: to maintain required accounting records, respond to lawful requests and meet applicable travel, tax or other obligations.
• Optional tracking and marketing: where consent is required, only with that consent. Sending an enquiry does not automatically subscribe you to promotional messages.
• Legal claims: to establish, exercise or defend rights when a dispute arises, on the appropriate lawful basis.

Where we rely on legitimate interests, you can object on grounds relating to your circumstances. You can object to direct marketing at any time, and we will stop using your information for that purpose.

Assistance requests, children and information about others

Travel may require information about health, mobility or other sensitive circumstances. Please avoid adding unnecessary sensitive information, passport scans or payment details to a general form. We will explain a suitable way to provide information that is needed for a specific request.

Where special-category information is necessary, we identify an appropriate additional legal condition, such as your explicit consent for a requested assistance arrangement where applicable. You can withdraw that consent, although the particular assistance may then be unavailable.

Adults may provide information about children or other travellers where authorised. We use children’s information for the requested travel service, not to market directly to children. The website is intended for adult customers making travel enquiries.

Who receives information

We disclose information proportionately to the people who need it for the requested service: relevant airlines, hotels, transfer providers, organisers, consolidators, reservation-system providers, visa-service providers where requested, payment processors, hosting and email providers, authorised support personnel and professional advisers.

Suppliers may need passenger details to perform their service or satisfy legal travel requirements. We may also disclose information where the law requires it, to protect legitimate legal rights, or in connection with a properly safeguarded business transfer. We do not sell enquiry lists.

Our authorised service and back-office teams may support operations from outside the UK, including Pakistan. Access must be limited to the task, covered by appropriate confidentiality and data-protection arrangements and subject to the transfer safeguards described below.

International transfers

Travel frequently involves sending information to a destination or supplier outside the UK. Email, support and technology services may also involve overseas processing. When a restricted transfer requires safeguards, we use a valid mechanism such as UK adequacy regulations or appropriate contractual safeguards, with the required assessment and supplementary measures where needed.

Some disclosures may be necessary to perform your travel contract or take requested pre-contract steps under an applicable legal exception. These exceptions are not a substitute for safeguards for routine support transfers. Contact us for information about safeguards relevant to your data, subject to protection of confidential material.

How long information is kept

We keep information only for as long as it is needed for the purpose, an applicable legal requirement or a justified dispute. Our normal retention schedule is:

• Unconverted enquiries: review for deletion or anonymisation within 12 months of the last meaningful contact.
• Completed booking and transaction records: normally up to six years after completion or the end of the relevant accounting period, where needed for legal, accounting or claims purposes.
• Rate-limit records: short-lived operational records; expired records are reviewed and removed through our maintenance process.
• Security logs: retained for a proportionate investigation and security period, normally no longer than 90 days unless an incident requires more.
• Cookie choices: normally 180 days on your browser, after which we ask again.

A legal hold, live complaint, fraud investigation or other documented requirement may justify longer retention. Backups expire through their normal rotation. We restrict access to retained records; deleting a website record does not automatically delete copies legitimately held by a travel supplier.

Your rights and choices

Depending on the circumstances and lawful basis, you can ask for access, correction, deletion, restriction, portability or object to processing. You can withdraw consent at any time without affecting processing that was lawful before withdrawal. Some rights have exceptions, for example where we must retain a transaction record by law.

You have an absolute right to object to the use of your information for direct marketing. Use an unsubscribe option or contact us. You can separately change optional tracking choices using Cookie settings in the footer.

We may request proportionate information to verify your identity or authority before disclosing records. We normally respond within one month, subject to lawful extensions and applicable rules, and explain any refusal or limit. You can complain to the Information Commissioner’s Office. We welcome the opportunity to address your concern first, but you do not have to contact us before the ICO.

Security, automated decisions and external services

We use access controls, protected form sessions, validation, submission limits and restricted storage to reduce unauthorised access and misuse. No online service can promise absolute security. Keep your booking communications private and contact us if you suspect an account or payment message is fraudulent.

Our form checks may reject invalid or excessive submissions. We do not use the website to make a solely automated decision with legal or similarly significant effects about whether you can obtain a travel booking. Contact the team if a security control prevents a genuine enquiry.

WhatsApp and social links open external services only when you choose them. Their providers handle information under their own terms and privacy notices. Our WhatsApp button is a link, not an embedded tracking chat widget.

Changes and further information

We update this notice when our processing or applicable requirements change. The date on this page identifies the current notice. Material changes may require additional notification or renewed consent. Read this together with our Cookie policy and Booking terms.

OpenAI advertising measurement

With your marketing-cookie permission, we load the OpenAI measurement pixel to understand advertising visits and successful flight enquiries. OpenAI may process browser, device, page and advertising attribution information, including outside the UK. You can change your choice using Cookie settings. Refusing marketing cookies does not prevent an enquiry.

We use protected, keyed hashes of the email address and phone number supplied with a successful enquiry to suppress repeat conversion events. We retain this suppression record until it is reset or a relevant deletion request is actioned; it is not a payment or booking record. The custom event contains a random event ID, not your email address or phone number. Attribution cookies may include __oppref (30 days) and __obref (365 days), subject to the provider’s implementation and your browser settings.