Privacy Policy

FlightPayout operates flightpayout.co.uk, a document-preparation service that helps air passengers claim compensation under UK261 and Regulation (EC) No 261/2004 for a flat fee of £9.99. We take no commission. We are the controller of the personal data described on this page. Contact us at admin@flightpayout.co.uk.

Flight details (airline, airports, flight number, date, whether the flight was delayed or cancelled, and the exact arrival delay you enter): to check eligibility and prepare your claim documents.

Passenger details (the lead passenger’s name, any companions’ names, your email address and your booking reference and, if you choose to give it, your airline’s complaint reference): only to prepare your claim documents and email them to you. We do not ask for or collect your postal address.

Payment. Payment takes place on a page hosted by Stripe. We never see or store your card details. We send Stripe only a random claim token, the airline code, the number of passengers and the time you ticked the box asking us to start immediately (as proof of that request). We do not send names, email addresses or booking references to Stripe. Stripe collects your payment details and email address itself under its own privacy policy.

Technical data. Your IP address is used briefly (about 10 minutes) to limit repeated submissions and protect the site from abuse. Our hosting provider also keeps standard server logs.

We use your details to provide the service you ask for and pay for (performance of a contract, UK GDPR Article 6(1)(b)). We use technical data to keep the site secure and prevent abuse (legitimate interests, Article 6(1)(f)).

Before payment: up to 45 minutes. After you submit your passenger details, they are held encrypted (AES-256) in our database while you pay. If you do not complete payment they are deleted automatically within 45 minutes.

After payment: 60 seconds. Once Stripe confirms payment, your details are used once, in server memory, to prepare your claim document kit and email it to you. Names, companions, email address and booking reference and any airline complaint reference are then permanently overwritten in our database by our 60-second hard-wipe, and the temporary PDF file is deleted. We keep no copy of your claim kit, so we cannot recover or re-send it. Please save the email.

If delivery fails: up to 24 hours. If something goes wrong after you have paid, we keep your encrypted details for up to 24 hours so the system can retry, then delete them.

What we do keep. An anonymised record containing the payment reference, the flight facts and the claim status, with no names, contact details or booking references. We keep it to reconcile payments and meet accounting duties. Public flight-disruption facts (airline code, flight number, route, date and status), which are not personal data, are kept for 90 days to power our airline pages.

The 60-second server data wipe operates entirely on our own server and within the data minimisation and storage limitation principles of the UK GDPR: we collect only what is needed to prepare your claim kit, we keep it only for as long as that takes, and we store nothing long-term. Once your claim kit has been delivered your personal inputs are permanently erased, so there is no passenger record for us to protect, search or disclose afterwards.

Stripe (payment processing). AeroDataBox via RapidAPI (public flight schedule data only: no passenger data is ever sent). Our hosting and email delivery providers, who process data on our behalf to run the site and send your claim kit email. Your email service provider may keep its own transmission records. We do not sell personal data and we do not use it for advertising.

Some of our providers, including Stripe, may process data outside the UK. Where they do, we rely on safeguards such as UK adequacy regulations or standard contractual clauses.

The site uses cookies that are necessary for it to work. Other cookies are only set if you accept them through the cookie banner, where you can change your choice at any time.

You have the right to access, correct or delete your personal data, to restrict or object to its use, to data portability, and to withdraw consent where we rely on it. Because we wipe your details within 60 seconds of delivery, we will usually hold no personal data about you after that point, and we will tell you so if you ask. To make a request, email admin@flightpayout.co.uk. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Pending details are encrypted at rest, payments are handled on Stripe’s hosted page, payment confirmations are checked with a cryptographic signature before anything is processed, and repeated submissions are rate-limited.

If we change how we handle personal data we will update this page and the date above.