This policy applies from October 28, 2026.
Your choices and data rights
You may exercise the following rights in relation to your personal information:
See your data. You may request access to the information we hold about you and a copy in a structured, commonly used, machine-readable format.
Correct it. You may have inaccurate or incomplete information corrected, including by updating it through your account.
Ask for deletion. In certain circumstances you may request that your personal information be erased.
Limit its use. You may request restriction of processing; we temporarily stop processing the information while that restriction applies.
Move it. You may receive your information in a structured, commonly used, machine-readable format and transfer it to another controller.
Object. Where processing relies on legitimate interests, you may object to it.
Raise a complaint. You may complain to a supervisory authority if you consider your data rights infringed. We encourage you to contact us first so we can try to resolve your concerns promptly.
Data protection law places limits and exceptions on these rights. Our Data Protection Officer can help you exercise them and answer questions or concerns about personal information.
Who is responsible for your information
Our company is WIZORG LTD, based at Little Winters Farm Roundbush Road, Layer Marney, Colchester, CO5 9UR, England.
In this policy, “we”, “us” and “our” mean WIZORG LTD. We are committed to protecting privacy; this document describes the collection, use and disclosure of your personal information.
Why we process data and on what basis
The processing purposes and corresponding legal bases are:
Account, subscription and payments. Delivering these relies on performance of the contract: Article 6(1)(b).
Support requests. We rely on contractual performance or our legitimate interest in resolving your questions: Article 6(1)(b) or (f).
Account and service messages. Renewal reminders and booking confirmations, for example, rely on performance of the contract: Article 6(1)(b).
Legal and tax requirements. Processing necessary to meet these is based on legal obligation: Article 6(1)(c).
Statistics, session playback and campaigns. These activities rely on your consent under Article 6(1)(a). You may refuse or withdraw it through “Cookie settings” in the page footer.
Information used to operate the platform
Information about you
We collect only the personal information needed to deliver our services. The categories we collect are:
Your name and surname, and those of the passengers you book for.
Ways to contact you: email, telephone and postal address.
Subscription billing details and payment information.
Flight and booking details (airline, flight number, booking reference, dates and airports), passengers’ dates of birth where the airline requires them, and details you supply to our customer support team.
We use that information for:
Setting up and administering your account.
Taking payments and providing the services.
Answering questions and handling support requests.
Delivering important service notices and updates.
Meeting duties imposed by law and regulation.
Information about visits and devices
We also collect technical information about how you interact with our website and services, which may include personal data. It includes:
Visit logs: browser type, pages viewed and access times.
Device details: device type, operating system and IP address.
Your IP address is personal data. This information helps us assess usage, improve the services and optimize your experience on the platform.
Recipients and service partners
We only pass your data to the providers that need it to run Passfly:
our hosting provider, to run the site;
our account provider, which handles your sign-in and keeps your bookings;
our payment provider, to take payment for your bookings and your membership;
the partners who carry out your booking (Fast Track, Business Lounge, Meet & Greet, Auto Check-in or activity), with only the information they need;
our chat tool, when you contact support: it receives your messages, your IP address and your browser type;
our translation service, to show the site in your language;
our anti-bot service, which checks the cancellation and withdrawal forms using your IP address and your activity on the page;
our map service, which receives your IP address when a map is shown on an activity page.
Other tools only receive your data if you accept them in the cookie banner:
analytics and advertising tools, to know how many people visit the site and whether our ads work. They may follow your browsing on other sites;
an email marketing tool, to know whether your visit came from one of our emails;
a visit analysis tool, which records your clicks, scrolling and the pages you view to help us improve the site. Form fields are masked. This data is not anonymous: it is linked to an identifier, not to your name.
We do not sell your data. If you accept marketing cookies, our advertising partners receive browsing identifiers to measure and adjust our campaigns. If they also use them for their own purposes, their own terms apply.
How long information is kept
Retention is limited to the time needed for the stated purposes. The applicable periods are:
Account information: the subscription period and a further 6 years, under the Limitation Act 1980.
Payment information: 7 years, in line with HMRC record-keeping requirements.
Support conversations are retained for 3 years. Cookies and trackers last no longer than 13 months; the consent choice is stored for 6 months. Audience-measurement data is kept for no longer than 25 months.
Your choices about cookies and trackers
On your first visit, our consent banner offers choices for optional cookies: accept all, reject all or select categories. A cookie remembers your decision until that choice expires.
Use “Cookie settings” at the bottom of any page to reopen the choices, view categories, or change or withdraw permission. Rejecting optional cookies does not prevent you from using Passfly.
With your consent, our analytics tools help us understand site use; our advertising and email tools measure and personalise campaigns. Technical cookies needed for a requested service — language, security, payment or support chat — work without that consent.
Session playbacks cover clicks, scrolling and viewed pages. Form fields are masked. Journeys are linked to a pseudonymous identifier, so they are not anonymous. Our analytics tools process your IP address, geographic origin, the date and duration of visits, and the pages viewed.
Make your choice in the banner: accept, reject or customise. Continuing to browse is not consent.
Measures used to protect information
To protect the confidentiality and security of your personal data, we apply the following measures:
Encrypted transmission. Industry-standard protocols encrypt all data sent between your device and our servers against unauthorized access.
Restricted access. Only authorized staff needing the information for services or support can access personal information.
Security reviews. Regular audits and vulnerability assessments identify risks so they can be addressed.
Backups. Regular copies are kept on secure servers to reduce disruption if data is lost.
Payment security. Billing and payment details are handled with trusted, compliant processing partners.
Limited collection. We process only information necessary for the purposes in this policy.
Internet transmission and electronic storage cannot be made absolutely secure, despite these precautions. If a security breach occurs, we notify you and the relevant authorities where the law requires it.
Processing outside the UK and EEA
Your data is processed by WIZORG LTD in the United Kingdom, a country covered by a European Commission adequacy decision. Some of our providers (payment, hosting, analytics, support chat, translation) may process data outside the UK and EEA, including in the United States. Safeguards: an adequacy decision, including the EU-US Data Privacy Framework, or standard contractual clauses, a copy of which is available on request at contact@passfly.co.
Updates to this document
We may revise this policy from time to time. Changes are notified by publishing the replacement policy on this page.
Questions and requests
For questions or concerns about this policy, use the following contact details:
Post: WIZORG LTD, Little Winters Farm Roundbush Road, Layer Marney, Colchester, CO5 9UR, England.
Write to us at contact@passfly.co.
Call us on .