Privacy Policy

Flybe Group PLC is committed to respecting your privacy and will protect your Personal Information

Key Summary

We collect, process and store your Personal Information:

  • if you visit our website;
  • if you contact us.

If you contact us that services is provided by a third party and that third party will process Personal Information about you.

We share your Personal Information with third parties in the circumstances described below).

We use cookies, which are text files containing small amounts of information that are downloaded to your computer or mobile device. To find out more click here: Cookie Policy

This Privacy Policy explains what Personal Information we process, why we process it, how it is legal and your rights.

1. Introduction

We are Flybe Group PLC (with registered company number 01373432) of New Walker Hangar Exeter International Airport, Clyst Honiton, Exeter EX5 2BA.

We are a Controller under Data Protection Law and take your privacy seriously. We ask that you read this Privacy Policy very carefully because it contains important information about how we process your Personal Information and your rights.

If you would like this notice in another format (for example, audio, large print, braille) please contact us via

2. What is the purpose of the privacy policy?

This Privacy Policy sets out the basis on which any Personal Information we collect from you, or that is provided to us by a third party, will be processed by us.

3. Queries

If you have any questions about this Privacy Policy or Personal Information that we hold about you, including any requests to exercise your rights, please contact our Data Protection Officer using the details set out below:

Controller Flybe Group PLC

New Jack Walker Hangar

Exeter International Airport

Clyst Honiton

Exeter, EX5 2BA

4. Changes to this Privacy Policy

This version of the Privacy Policy was last updated on 22 February 2019 and historic versions can be obtained by contacting us via the email address above.

This Privacy Policy may be updated from time to time. If the change impacts you or your Personal Information, we will inform you of changes made to this Privacy Policy.

5. The personal information we collect about you

We collect or store Personal Information about you at different points in our relationship with you:

  • when you browse or visit our website
  • if you contact us.

If you opt to request further information about us via a third party provider for example London Stock Exchange or similar then that third party with collect and process your personal data according to their own privacy policy. You should familiarise yourself with their policy.

If you contact us via our email address our service provider will collect your personal information as explained below and process it to deal with your query to us. They will then send your personal information to us where required to deal with your query.

5.1 Personal information

We collect the following Personal Information:

Type of Personal Information Personal Information includes:
Contact Data
  • email address
  • name
  • address (where provided by you)
  • telephone numbers (where provided by you)
Identity Data
  • first name
  • maiden name
  • last name
  • username or similar identifier
  • marital status
  • title
  • date of birth
  • gender
Technical Data
  • internet protocol (IP) address
  • login data
  • browser type and version
  • time zone setting and location
  • browser plug-in types and versions
  • operating system and platform
  • other technology on the devices you use to access our website

6. How we use your personal data

We are required to tell you what we use your Personal Information for and the lawful basis on which we can process your Personal Information:

Purpose Type of Personal Information Lawful basis for processing Details
To monitor browsing on our website
  • Technical Data
  • Legitimate interest
  • Consent

To improve the functionality and content of our website.

For more information please see our Cookie Policy.

To manage and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
  • Identity Data
  • Contact Data
  • Technical Data
  • Legitimate interests
  • Necessary to comply with a legal obligation

To manage our business and ensure the effective provision of administration and IT services, network security.

To prevent fraud.

To send communications and deal with queries you send us
  • Identity Data
  • Contact Data
  • Legitimate interest

To contact by email or using such other contact details you provide for administrative or operational reasons related to your query you send to us.

NOTE: These communications are not made for marketing purposes and therefore you will continue to receive them even if you opt out of receiving marketing communications.

We may process your Personal Information for more than one lawful ground depending on the specific purpose for which we are using your Personal Information. Please contact us if you need details about the specific legal ground we are relying on to process your Personal Information where more than one ground has been set out in the table above.

Where we need to collect Personal Information by law or under the terms of a contract we have with you and you fail to provide that Personal Information when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with flights or services or issue tickets). In this case, we may have to cancel your ticket or not provide the service to you, but we will notify you if this is the case at the time.

7. Who do we share your personal information with?

7.1 Other authorities

In addition to the Advanced Passenger Information, we may disclose Personal Information to law enforcement bodies or regulatory authorities when this is required by law. For example, to prevent crime.

7.2 Our service providers

As outline above, we will share your Personal Information with the following companies that provide services to us and act as our Processors:

Processor Description Data location

Dealing with any queries you have and send via our contact details

Maitland’s Privacy Policy is located here

Inside EU (UK)
GoDaddy UK

Website Hosting Service

Go Daddy’s Privacy Policy is located here

Inside EU (UK)

We require all our Processors to respect the security of your Personal Information and to treat it in accordance with the law.

We do not allow our Processors to use your Personal Information for their own purposes and only permit them to process your Personal Information for specified purposes and in accordance with our instructions.

8. Data security

We use technical and organisational measures to safeguard your Personal Information, and use secure connections on our website to ensure that your Personal Information is encrypted. In terms of the latter, this means that we convert your Personal Information into a computer code, which will make it harder for hackers to access your Personal Information on our website. If you want to know how we are keeping your data secure, please contact us and we can provide more details.

While we will use all reasonable efforts to safeguard your Personal Information, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any Personal Information that are transferred from you or to you via the internet.

9. Data retention

We will only retain your Personal Information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorised use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.

Details of retention periods for different aspects of your Personal Information are available from us on request. We shall keep your Personal Information relating to your query for a maximum period of 6 years from the date when you first provided us with a copy of such Personal Information.

10. Your legal rights

You have rights, as a Data Subject, under the Data Protection Law in relation to your Personal Information. You have the right to:

  1. Request access to your Personal Information
  2. Request correction to your Personal Information
  3. Request erasure to your Personal Information
  4. Object to processing of your Personal Information
  5. Request restriction of processing your Personal Information
  6. Request transfer of your Personal Information
  7. Right to withdraw consent

These rights are explained in more detail below. If you wish to exercise any of the rights set out above, please contact us using the contact details provided above. We will respond to any rights that you want to exercise within a month of receiving your request, unless your request is complex, in which case we will respond within 3 months.

Your right Description
Request access to your Personal Information This enables you to receive a copy of the Personal Information we hold about you and to check that we are lawfully processing it.
Request correction of the Personal Information that we hold about you

You can require us to correct any mistakes in your information which we hold free of charge.

If you would like to do this, please let us have enough information to identify you and let us know the information that is incorrect and what it should be replaced with.

Request erasure of your Personal Information

This enables you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process it.

You can ask us to erase your Personal Information where:

  • you do not believe that we need your Personal Information in order to process it for the purposes set out in this Privacy Policy;
  • if you had given us consent to process your Personal Information, you withdraw that consent and we cannot otherwise legally process your Personal Information;
  • you object to our processing and we do not have any legitimate interests that mean we can continue to process your Personal Information; or
  • your Personal Information has been processed unlawfully or have not been erased when it should have been.
Object to processing of your Personal Information

Where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.

You also have the right to object where we are processing your Personal Information for direct marketing purposes.

In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing of your Personal Information.

This enables you to ask us to suspend the processing of your Personal Information in the following scenarios:

  • if you want us to establish the Personal Information’s accuracy;
  • where our use of the Personal Information is unlawful but you do not want us to erase it;
  • where you need us to hold the Personal Information even if we no longer require it as you need it to establish, exercise or defend legal claims; or
  • you have objected to our use of your Personal Information but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your Personal Information to you or to a third party.

We will provide to you, or a third party you have chosen, your Personal Information in a structured, commonly used, machine-readable format.

This right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent at any time where we are relying on consent to process your Personal Information.

This will not affect the lawfulness of any processing carried out before you withdraw your consent.

If you withdraw your consent, we may not be able to provide certain flights or services to you. We will advise you if this is the case at the time you withdraw your consent.

Please be aware that there are exceptions and exemptions that apply to some of the rights, which we will apply in accordance with Data Protection Law.


Term Definition
Contact Data means the Personal Information described as such in Section 5.1 of the Privacy Policy;
Controller shall have the meaning given to it in the Data Protection Law;
Data Protection Law means the regulations on the protection of natural persons with regard to the processing of personal data and on the free movement of such data known as the General Data Protection Regulation ((EU) 2016/679) and any national legislation implementing this Regulation and related statutory instruments as amended or in force from time to time;
Data Subject shall have the meaning given to it in the Data Protection Law;
Identity Data means the Personal Information described as such in Section 5.1 of the Privacy Policy;
Personal Information means "Personal Data" as defined in the Data Protection Law;
Processor shall have the meaning given to it in the Data Protection Law;
Technical Data means the Personal Information described as such in Section 5.1 of the Privacy Policy;
Usage Data means the Personal Information described as such in Section 5.1 of the Privacy Policy;
we, us and our means Flybe Group PLC
you, your means the person browsing our website, creating an account with us, booking a flight or purchasing a service from us.