Privacy Policy

About this policy
Who is the controller of your data?
What personal data do we process?
Where does your personal data come from?
Do you have to provide your personal data?

What do we use your personal data for?
What are the legal grounds for processing your personal data?
How long do we keep your personal data?
What are your rights?

About this policy

At Jet2.com and Jet2holidays, we are committed to only collecting, using and disclosing your personal data in ways that you expect and have consented to or as we are required or permitted to by law. This policy explains how we use your information and applies to all Jet2.com and Jet2holidays customers and visitors to our apps and our websites (together our “websites”).

We understand that not everybody needs or wants to know how we use their information in the same level of detail, so we have created two levels of information for you.  If you just want to know the basics, please read the 'essential information' section for each topic.  If you want to know more, please read the ‘detailed information’ section so that you can learn more about a particular issue. 

Who is the controller of your data?

Where you book a flight with us, Jet2.com Limited is the controller of your personal data and where you book one of our holidays, Jet2holidays Limited is the relevant controller. If you have any questions about this policy please contact our Data Protection Officer here: privacy@jet2.com.

If you are using our websites, please note that some of the products and services advertised are provided by third parties.  These partners will be the controllers of any information about you that they process in connection with the products and services they provide, and you should read the privacy policy which is available on each of their websites to find out how they will use your data.

What personal data do we process?

Essential Information

We process information about you that you give us when you make a flight or holiday booking with us or purchase any other product or service from us, such as your name, date of birth, billing and home addresses, booking reference, email address, telephone number and payment card details.  You may also create a user name and password if you choose to create a myJet2 profile.  Where necessary we will also collect your passport and other travel authorisation documents such as visas.  When you visit our websites we also automatically receive your IP address which is a unique identifier for your computer or other device you are using to access our site.

You may provide us with limited details about other people (e.g. where you make a travel or holiday booking on behalf of a group). Where you provide the details of other individuals you should ensure you are have their permission to do so. Please tell these people to read this policy if they want to find out more about our data protection practices.

Detailed information

A more detailed description of the information we process about you can be found below.

• User name and password - you have the option to create these when you create a myJet2 Travelclub profile;
• Contact details - your name, home and billing addresses, postcode, email address and telephone numbers and social media details;
• Age / date of birth - you will need to provide this information as part of the booking process;
• Payment card details - card number, security code, expiry date, issue number and name of card holder;
• Booking history - details of bookings you have previously made via our websites, our contact centre or via travel agents;
• Booking Reference - to allow us to identify your booking in order to manage any changes to it;
• Device details - information about the device (e.g. computer, mobile phone) that you use to access our websites;
• CCTV images - your image may be captured on CCTV footage whilst at airports from which we operate;
• Call Recordings - if you call our contact centre we may record your call for quality monitoring purposes to improve services. You will be informed when making a call if it is being recorded;
• Information contained in enquiries or complaints - if you make a complaint about a booking, product or service, or call our customer helpline (either before or during your holiday), you will provide us with associated information which might in some cases include special categories of data such as information about health (e.g. where you notify us of any requirement of disabled passengers) or religion (e.g. where you request a specific meal choice);
• Identity documents - we require details included on your passport in order to allow us to process your booking. Also, if you exercise any of your rights under data protection laws such as requesting information about your personal data that we hold, we may ask for proof of your identity such as a copy of your passport or driving licence;
• IP address and cookie data - When you visit our websites we also automatically receive your IP address which is a unique identifier for your computer or other device you are using to access our site.  Our websites also use cookies - please click here for further information; and
• Special categories of data - We may also process information about you that the law considers to fall within special categories, such as information about your health or disabilities, racial or ethnic origin, religious or other beliefs or sexual orientation.  This information is known as "special categories of data" and receives extra protection under data protection laws. We may collect this to ensure we can meet any specific health requirements you have when travelling or to ensure we provide meals which meet any religious based dietary requirements. In other cases, we may need this information about you to fulfil your order, answer a complaint or defend a legal claim from you or we may be able to assume some information about you from what you tell us.

Where does your personal data come from?

Essential Information

Most of the data we process about you comes from you, for example, information you provide to us so that we can fulfil your travel booking.

Other information is gathered during your use of our websites (e.g. IP addresses or information obtained via cookies) and from your interaction with us at airports and hotels (e.g. data we may receive from airport check-in systems).

Detailed Information

A lot of the data we process is data which you provide to us, such as your name, contact details, payment card information, date of birth etc.  You usually provide this information when you make a booking via our websites or call centre, or when you contact us via email, letter or phone.

If you use social media sites such as Facebook, Twitter and Instagram, booking engines or personal banking sites, these sites are operated by third party providers and they may share your personal data with us.

Cookies

Essential Information

Similar to other commercial websites, our websites utilise a standard technology to collect information about how our website is used by individual computers connected to the internet.

This information is gathered through "Cookies". Cookies are small files of letters and numbers that we put on your computer's hard drive. These small files allow us to distinguish you from other users of our website, monitor website traffic and to personalise the content of the site for you. This ultimately helps us provide you with a good experience when you browse our websites and improve the content of our marketing and allows us to improve our site going forward.

Please note however that Cookies cannot retrieve any personal data from your hard drive or pass on computer viruses.

Detailed Information

To find out more about our use of cookies please read our cookies policy here.

Do you have to provide your personal data?

Essential Information

In most cases, providing your personal data to us is optional, however, if you do not provide it, we will probably not be able to fulfil your booking.  For example, if you book a flight with us, we need details such as your name and passport details to be able to complete your booking and we will need your payment card details to take your payment.  When you make a booking, we will only collect information which is required for the purpose of your booking.  In other cases, you have a choice over whether we collect your personal data, for example, you can turn off cookies on your browser and we will not place any cookies on your device or computer (although in this case you may not be able to use all parts of our website).  Sometimes, we are required by law to collect certain data for border control purposes and where you have booked a flight with us you cannot prevent this collection of data other than by choosing not to check-in for this flight.

What do we use your personal data for?

Essential Information

The main way we use your personal data is to fulfil your booking (be it a flight booking or a holiday booking) to help us understand your needs and to provide you with a better service.  We may store information about your travel history and your preferences.  We may also use your personal data for marketing purposes, but we will make sure to not send you emails with offers and information if you have told us you would prefer not to receive these.

Detailed Information

As well as to fulfil your flight or holiday booking and to provide you with updates about your booking, we use your information in the following ways:

• for marketing purposes: We (including our group companies and partners) and carefully selected third parties may use your personal data to inform you, by email, letter, phone or SMS, about offers, products and services that we think may be of interest to you and we may tell you about other organisations' products and services. We will tell you about this when we collect your information and if you do not wish to receive these communications, please let us know. You can change your mind at any time by visiting our unsubscribe page here https://www.jet2holidays.com/unsubscribe or https://www.jet2.com/unsubscribe or by contacting us at privacy@jet2.com. You can also unsubscribe following the instructions that we will include in any communication, such as email or text, we send to you;
• for marketing purposes with social media: We may use your personal data to generate targeted marketing on various social media sites, for example but not limited to, Facebook. If you do not wish to receive such targeted marketing generally, you are able to switch this off within the social media site. If you do not want to receive such targeted marketing from us, you can contact us at: privacy@jet2.com;
• to respond to and deal with any complaint or query or request which you contact us with.  As part of our customer care procedures, we may also follow-up, either by letter, phone, SMS, email, or via social media, with customers who have travelled with us, for example to resolve a complaint or to ask for a testimonial;
• to comply with your requests to exercise your rights under data protection legislation such as when you request access to your personal data;
• to administer promotions and competitions which we run from time to time;
• for market research: from time to time, we may also use your information to contact you by letter, phone, SMS or email to conduct customer satisfaction surveys or similar market research exercises;
• for the purposes of ensuring safety and security on our flights and in our resorts;
• to help us design our websites and improve your experience: we may collect information about the way you use and access our websites. Our web system collects information about each visitor, including IP address, the length of time spent on the website and the order in which pages are visited. Our web site may use technologies to help analyse how users navigate our web pages, links and forms. This is explained in more detail in the cookies section here
• for fraud prevention: to protect our customers and us from fraud and theft, we may look at information that we get from identity checks along with information in our customer records and other information which is publically available (including on social media);
• for meeting our regulatory obligations, including liaising with regulatory authorities and for our own internal audit purposes;
• for complying with applicable laws and regulations;
• for training and quality purposes to make sure we continue to deliver the standard of service that you expect from us;
• to comply with lawful requests by public authorities, discovery requests, or where otherwise required or permitted by applicable laws, court orders, government regulations, or regulatory authorities;
• to enforce our legal rights and obligations and for any purposes in connection with any legal claims made by or involving you including reviewing information which you have made publically available and which may be relevant to any claim (including information available on social media sites); and
• for planning, due diligence and implementation in relation to a commercial transaction or service transfer that affects customers, for example mergers and acquisitions or a sale of all or part of our business.

What are the legal grounds for processing your personal data?

Essential Information

Data protection laws require us to tell you what legal basis we use for processing your personal data.  These bases are set out in the applicable data protection law.  We generally use the following grounds:

• the processing is necessary to perform a contract with you (i.e. the contract for the sale and purchase of your flight or holiday), or to take steps requested by you before entering into this contract;
• the processing is in our or someone else's legitimate interests, and these interests are not overridden by your interests or rights in the protection of your personal data;
• you have given your consent to the processing of your data; or
• the processing is necessary to meet a legal obligation which applies to us.

Sometimes we process data about you which the law considers to fall within special categories (see section "What personal data do we process?" for more details), in which case, we use one of the following grounds:

• the processing is necessary to protect your vital interests or those of another person where you are physically or legally incapable of giving consent (e.g. in the event of a medical emergency);
• the processing is necessary for the establishment, exercise or defence of legal claims;
• the processing is necessary for reasons of substantial public interest on the basis of EU or domestic law; or
• you have freely given your consent to the processing.

Please see the table below if you want to know which particular grounds we use for each particular processing activity.

Detailed Information

We explain below which particular ground we use for each activity.  Where we rely on the ground that the processing is in our or someone else's legitimate interests, we explain what those interests are (data protection laws require us to tell you about this).

Who do we share your personal data with?

Essential Information

We share your personal data with third parties who provide services to us.

In relation to passengers making reservations to destinations in the United States of America we are required to transfer to the US Department of Homeland Security ("DHS") certain travel and reservation data about passengers flying between the European Union and the United States of America in accordance with an International Agreement between the European Union and the United States.

Detailed Information

The types of third party service providers who we share your data with include companies which help us understand our customer behaviour or help improve our website, local airports and third party ground handlers who help provide services to you and our local partners in relation to package holidays.  We always have contracts in place with these third parties which require them to properly protect your data and only use it for the purposes of providing the particular service.

Where hotels which you stay in make decisions themselves about how to use your personal data they will be the data controller of that information and we would encourage you to read their privacy policy to understand how they handle your information and how to exercise your rights.

As part of providing your holiday we will engage local operators (for example, to arrange airport transfers) and we will share your personal data with them so they we can make sure your holiday runs smoothly.

If we sell or buy any business or assets, we will disclose your personal data to the prospective seller or buyer of such business or assets, and if we or part of our business is acquired by a third party, personal data about our customers will be transferred to that third party.

In the event of medical emergency during a flight we may share personal data with third party service providers to call for advice for the purposes of managing and recording passenger medical issues. Your personal data may also be included in a flight report which is sent to the flight operator.

If you purchase car hire through Jet2holidays we will transfer your personal data to Rental Cars (Travel Jigsaw Limited) to provide you with car hire services. Jet2holidays and Rental Cars will be independent data controllers in respect of that information. Rental Cars will use the information in accordance with their privacy policy https://www.jet2carhire.com/PrivacyPolicy.do

We also share personal data for the purposes of fraud prevention and detection with other group companies and other organisations (including law enforcement agencies) involved in fraud prevention and detection. This includes sharing your details with a third party fraud management solution providers, in order to identify potentially fraudulent bookings.

If there are any incidents with disruptive passengers on board our flights, we may share personal data with law enforcement agencies. We also share personal data relating to reported incidents, complaints and feedback in relation to Jet2holidays with our travel partners and local agents.

In order to assess and defend any legal claims made against us, we may share your personal data with our legal advisors and claims handlers. We may also share your information with law enforcement and government agencies where this is reasonable for the prevention and detection of crime or if we believe a claim is being made fraudulently.

We also pass your information to border agencies where this is required to travel to certain countries.

How long do we keep your personal data for?

Essential Information

We will store your personal information for as long as is reasonably necessary for the purposes for which it was collected, as explained in this Privacy Policy. In some cases we may store your personal information for longer periods of time where we need to maintain an accurate record of your dealings with us to help manage complaints or claims you or others may raise, or otherwise comply with legal or regulatory requirements. If you would like to know more about how long we retain information please contact us.

What are your rights?

Essential Information

To exercise your rights please contact our Data Protection Officer at: privacy@jet2.com or, to make a request to access your data, follow the instructions below.

Detailed Information

Accessing your data

You can ask us to confirm whether we are processing your personal data and to give you a copy of that data along with further information about how we use your personal data.

To make a request to access your data please send us your request in writing, signed and dated to the address below along with:

• your full name and address;
• a photocopy of your passport or driving licence, so that we can verify your identity; and
• details of the personal data you require (along with any further details which may help us to identify you, such as dates and times of flights, destination and booking reference number if you know this).

If you are requesting a copy of personal data on behalf of a third party, please also send to us a signed authority from the individual whose data is required and a copy of their passport or driving licence. If the third party is a child under the age of 16, the written authority should come from a person with parental responsibility (along with a copy of the child’s passport).

Please send your request to: Data Protection Department, Legal Services, Jet2.com Limited, PO Box 284, Leeds, LS11 1GE or electronically to: privacy@jet2.com.

You do not have to pay a fee for a copy of your information unless your request is unfounded, repetitive or excessive, in which case we will charge a reasonable amount in the circumstances.  We will let you know of any charges before completing your request.

We aim to respond to you within 1 month of receiving your request unless it is particularly complicated or you have made several requests, in which case we aim to respond within 3 months.  We will let you know if we are going to take longer than 1 month in dealing with your request.  If we have a lot of information about you we might ask you if you can tell us what exactly you want to receive.  This will help us action your request more quickly.

Correcting your data

You can ask us to correct any data which is inaccurate or incomplete.  This is free of charge.

We aim to deal with requests for correction within 1 month, although it might take us up to 3 months if your request is particularly complicated.

If we can't action a request to correct your data, we will let you know and explain why this is.

Erasing your data

This right is sometimes referred to as "the right to be forgotten".  This is not an absolute right but you have the right to have your data erased, free of charge, in certain circumstances. 

There are some exceptions to this right.  If one of these applies, we will confirm this to you and we do not have to delete the data.

Restricting the processing of your data

You can ask us to restrict the processing of your personal data in some circumstances, free of charge.  This is not an absolute right.  If processing is restricted we can store the data and retain enough information to make sure the restriction is respected, but we cannot further process your data.

We will tell you if we decide to lift a restriction on processing your data.

Objecting to the processing of your data

Objecting to the processing of your data is free of charge.  It is not an absolute right but you can object to our processing of your data where it is:

• based on the legitimate interests ground; or
• for the purposes of scientific/historical research and statistics.

We will stop processing your personal data unless we have compelling legitimate grounds for the processing which override your interests and rights, or unless we are processing the data for the establishment, exercise or defence of legal claims.

You can require us to stop using your data for direct marketing purposes.  We will process your request as soon as it is received but it may take up to 14 days for this to be effective.  There are no exemptions or reasons for us to refuse.

Data Portability

This allows you to obtain and reuse your personal data for your own purposes across different services.  It applies where the following conditions are met:

you provided the personal data to us yourself;

• we are processing the data either based on your consent or because it is necessary for the performance of a contract; and
• the processing is carried out by automated means.

We will provide your data free of charge in a structured, commonly used and machine readable form.  We aim to provide your data within 1 month of receiving your request unless it is particularly complicated or you have made several requests, in which case we aim to respond within 3 months.  If we are going to take longer than 1 month we will let you know and explain why we need more time.  If we consider that we cannot provide you with your data, we will contact you and explain why this is.

Contact and complaints

If you have any questions about this policy or about how we use your personal data please contact the Data Protection Officer at: privacy@jet2.com.

If you are unhappy about how we are processing your data or how we have responded to a request or complaint, you have the right to make a complaint to the UK's data protection regulator, the Information Commissioner's Office (ICO).  You can find more details about how to contact the ICO on their website https://ico.org.uk/

Last updated: 7 February 2019