The UK CAA’s Consumer and Markets Group will, in the event of the failure of ATOL holder, contact the appointed Insolvency Practitioner/Administrator or Liquidator to obtain its booking data.  The booking data may contain all information you supplied at the time of booking. This may include your name, postal and/or email address, telephone number and details of any special requests or assistance required.  This data may be used for the purpose of arranging repatriation and claims management.

Why we process your personal information?

The processing of your personal data during repatriation and claims management is necessary for the purposes of our, or our third party’s, legitimate interests and does not affect your fundamental rights and freedoms as a data subject. We only use your data in ways you would reasonably expect.

Who sees your personal information and why?

We need to share your claims/booking data with external auditors and the contracted claims processing agencies for the purpose of audit and processing refund claims after the failure of an ATOL company. All of our contracted claims agencies are based in the UK.

We currently work with the following claims agencies:

“CEGA Group Services Ltd”. The “CEGA Group” is part of the “Charles Taylor Group” of companies.

“Rightpath Insurance Solutions Limited”. Please note that “Protect Claims” is a trading style of “Rightpath Insurance Solutions Limited”.

If we utilise new or different claims agencies we will always reflect the change in this privacy notice.

Our contracted claims agencies require your contact details to communicate with you throughout the claims process. This will often be by email. In the event that the claims portal in unavailable we will send a form to you by email or post.

It is not uncommon for a claims agency to ask you to submit further information by email throughout the claims process. The claims agencies may require you to confirm booking data, including any payment details, to perform a refund. You may be asked to submit proof of booking and payments made. To counter any attempts of fraudulent activity, we may ask you to provide proof of identity.

How long we keep your personal information and why?

We retain your personal information for 7 years after the failure of the ATOL company. The data is held for compliance and audit purposes. Claims data is also kept to defend possible future legal claims in cases such as fraud. However, we can delete information that would not be relevant to such a claim. Personal data is always deleted when such a claim can no longer arise.  

Your individual rights

You may submit an enquiry or make a complaint by emailing FOI.requests@caa.co.uk. Further rights as a data subject can be found here. Contact details of the CAA’s Data Protection Officer can be found here. You have a right to complain to the ICO about the CAA’s processing of personal data. Access to our General privacy notice can be found here.

This privacy notice was updated on 20 July 2020 and is subject to change.