· Law enforcement, government agencies, emergency services - If there are any incidents with disruptive passengers on board our flights, we may share personal data with law enforcement agencies. In the event of a medical emergency during a flight we may share personal data with third party service providers to call for advice for the purposes of managing and recording passenger medical issues. We also share personal information with law enforcement agencies and other organisations involved in fraud prevention and detection (such as third party fraud management solution providers, banks and financial institutions) in order to identify potentially fraudulent bookings. We may also share your information with law enforcement and government agencies where this is reasonable for the prevention and detection of crime or if we believe a claim is being made fraudulently or if we have a safeguarding concern about a child.
· Health authorities, government agencies – if there is an outbreak or public health concern, we may ask for or share information with these third parties about customers who are in, or who may have travelled through, impacted areas. We will do this solely as necessary to help manage your safety and the safety of others.
· Courts, legal advisers, claims handlers - in order to assess and defend any legal claims made against us, we may share your personal information with our legal advisors and claims handlers.
· Third party successors to our business - If we sell or buy any business or assets, we will disclose your personal data to the prospective seller or buyer of such business or assets, and if we or part of our business is acquired by a third party, personal data about our customers will be transferred to that third party.
· ABTA or the CAA - In the event of our insolvency we, or any appointed insolvency practitioner, may disclose your personal information to the CAA, and/or ABTA so that they can assess the status of your booking and advise you on the appropriate course of action under any scheme of financial protection. The CAA’s General Privacy Notice is at https://www.caa.co.uk/Our-work/About-us/General-privacy-notice/ ABTA’s Privacy Notice is at https://www.abta.com/privacy-notice.
Within the Jet2 group
We may routinely share data with Jet2 group companies based in the EU, for example with our representatives in local countries. To protect your personal data in these circumstances, we have put in place internal data protection arrangements, which include contractual protections approved by the EU for the transfer of your data.
If we transfer personal data to another country where the recipient is outside of the Jet2 group, we will only do this where we are required to do so by law, or where the country is recognised as providing an adequate level of legal protection, or where we are satisfied that alternative arrangements (such as direct contractual commitments and assurances from those third parties) are in place to protect your privacy rights.
back to the top
How long do we keep your personal data for?
Essential Information
We will store your personal information for as long as is reasonably necessary for the purposes for which it was collected, as explained in this Privacy Policy. In some cases we may store your personal information for longer periods of time where we need to maintain an accurate record of your dealings with us to help manage complaints or claims you or others may raise, or otherwise comply with legal or regulatory requirements. If you would like to know more about how long we retain information please contact us.
back to the top
What are your rights?
Essential Information
You have several rights in relation to your personal data. These include accessing your data, correcting any mistakes, having your data erased, restricting the processing of your data, objecting to the processing of your data, data portability, and rights relating to automated decision making and profiling. In most cases there are conditions attached to these rights. Please see the relevant sections below if you want to find out more.
To exercise your rights please contact us via our webform: https://www.jet2.com/flights/your-data-protection-rights/.
Detailed Information
Accessing your data
You can ask us to confirm whether we are processing your personal data and to give you a copy of that data along with further information about how we use your personal data.
You can request your data in writing, over the phone or by completing our online form which can be found here: https://www.jet2.com/flights/your-data-protection-rights/
Please include details of the personal data you require in your request (along with any further details which may help us to identify you, such as dates and times of flights, destination and booking reference number if you know this). To make a request over the phone, please call our contact centre, who will send your request onto us on your behalf.
Once we have received your request, we may seek to verify your identity through appropriate checks (which may include security questions or evidence of identification such as a copy of your passport).
If you are requesting a copy of personal data on behalf of a third party, please also submit to us written authority from the individual whose data is required and a copy of their passport or driving licence. If the third party is a child under the age of 16, the written authority should come from a person with parental responsibility (along with a copy of the child’s passport).
You do not have to pay a fee for a copy of your information unless your request is unfounded, repetitive or excessive, in which case we will charge a reasonable amount in the circumstances. We will let you know of any charges before completing your request.
We aim to respond to you within one calendar month of receiving your request unless it is particularly complicated or you have made several requests, in which case we aim to respond within 3 months. We will let you know if we are going to take longer than 1 month in dealing with your request. If we have a lot of information about you we might ask you if you can tell us what exactly you want to receive. This will help us action your request more quickly.
Correcting your data
You can ask us to correct any data which is inaccurate or incomplete. This is free of charge.
We aim to deal with requests for correction within 1 month, although it might take us up to 3 months if your request is particularly complicated.
If we can't action a request to correct your data, we will let you know and explain why this is.
Erasing your data
This right is sometimes referred to as "the right to be forgotten". This is not an absolute right but you have the right to request to delete your personal data in certain circumstances.
There are some exceptions to this right. If one of these applies, we will explain the reason and we do not have to delete the data.
You can request your data to be deleted in writing or over the phone. To make a request in writing, please send your request to: Privacy Team, Legal Services, Jet2.com Limited, PO Box 284, Leeds, LS11 1GE; or electronically to us via our online form which can be found here:https://www.jet2.com/flights/your-data-protection-rights/
Restricting the processing of your data
You can ask us to restrict the processing of your personal data in some circumstances, free of charge. This is not an absolute right. If processing is restricted we can store the data and retain enough information to make sure the restriction is respected, but we cannot further process your data.
We will tell you if we decide to lift a restriction on processing your data.
Objecting to the processing of your data
Objecting to the processing of your data is free of charge. It is not an absolute right but you can object to our processing of your data where it is:
- based on the legitimate interests ground; or
- for the purposes of scientific/historical research and statistics.
We will stop processing your personal data unless we have compelling legitimate grounds for the processing which override your interests and rights, or unless we are processing the data for the establishment, exercise or defence of legal claims.
You can require us to stop using your data for direct marketing purposes. We will process your request as soon as it is received but it may take up to 28 days for this to be effective. There are no exemptions or reasons for us to refuse.
Data Portability
This allows you to obtain and reuse your personal data for your own purposes across different services. It applies where the following conditions are met:
you provided the personal data to us yourself;
- we are processing the data either based on your consent or because it is necessary for the performance of a contract; and
- the processing is carried out by automated means.
We will provide your data free of charge in a structured, commonly used and machine-readable form. We aim to provide your data within 1 month of receiving your request unless it is particularly complicated or you have made several requests, in which case we aim to respond within 3 months. If we are going to take longer than 1 month, we will let you know and explain why we need more time. If we consider that we cannot provide you with your data, we will contact you and explain why this is.
Contact and complaints
Jet2.com and Jet2 holidays operate both within the UK and the EU.
If you are in the UK:
If you have any questions about this policy, would like further information, or wish to make a complaint about how we handle your personal data or any other privacy matters, please contact us via our webform at: https://www.jet2.com/privacy-complaint, email us at privacy@jet2.com, or write to Privacy Team, Legal Services, Jet2.com Limited, PO Box 284, Leeds, LS11 1GE.
If you are a resident in the EU:
The controller in relation to your personal data is Jet2.com Limited when you book a flight with us and Jet2Holidays when you book one of our holidays. Our representative is Jet2 Support Services (Spain) Limited and can be contacted at privacy@jet2.com.
If you're unhappy about how we are processing your data or how we have responded to request or complaint, you have the right to make a complaint to our regulator. This is the Information Commissioner's Office (ICO) unless you are an EU resident, in which case the relevant authority is the Agencia Española de Protección de Datos (“AEPD”). You can find more details about how to contact the ICO at https://ico.org.uk/ or AEPD at: https://www.aepd.es/es
back to the top
Last Updated 06 August 2026.