The UK CAA’s Consumer and Markets Group will, in the event of the failure of ATOL holder, contact the appointed Insolvency Practitioner/Administrator or Liquidator to obtain its booking data.  The booking data may contain your personal details including your name, postal and/or email address, telephone number and details of your booking.  This data may be used for the purpose of arranging repatriation and claims management.

Why we process your personal information?

The processing of your personal data is necessary for the purposes of our, or our third party’s, legitimate interests and does not affect your fundamental rights and freedoms as a data subject.

Who sees your personal information and why?

We need to share your claims/booking data with external auditors and the contracted claims processing agencies for the purpose of audit and processing refund claims after the failure of an ATOL company.

We need to share your name and email address with external claims agencies, based in the UK, for the purpose of sending your claim form.

In some cases the system used to send claim forms is provided by Mailchimp. This is a registered trademark of The Rocket Science Group and they use your name and email address to provide services to us. 

Mailchimp have servers located in the United States of America, which is outside of the EU, and the CAA has ensured that there are adequate safeguards in place to secure your information.  You may ask us for more details about our claims agencies  by contacting Claims@caa.co.uk.

How long we keep your personal information and why?

We retain your personal information for 7 years after the failure of the ATOL company. The data is held for compliance and audit purposes.

Your individual rights

You may withdraw consent at any time, submit an enquiry or make a complaint by emailing FOI.requests@caa.co.uk.  Further rights as a data subject can be found here. Contact details of the CAA’s Data Protection Officer can be found here. You have a right to complain to the ICO about the CAA’s processing of personal data. Access to our General privacy notice can be found here.

This privacy notice was updated on 21 May 2019 and is subject to change.