Privacy Policy

FlightCompensations.com is the data controller for the personal data described in this policy. Address: 780 Park Ave, Lakewood, New Jersey 08701, United States.

You can reach us about any privacy matter at support@flightcompensations.com.

We collect only what the service needs at each stage.

To assess eligibility and to prepare, submit and pursue your claim — this is necessary to perform the contract you enter with us when you authorize us to act.

To confirm to the airline the identity of each passenger it is paying — this is necessary to perform the contract.

To take payment for the fixed success fee and any optional purchase, and to keep the accounting records the law requires — contract, and our legal obligations.

To send you service messages about your claim, including sign-in links and status updates — contract.

To keep the service secure, prevent abuse, debug faults and maintain an audit trail of staff access to sensitive documents — our legitimate interest in operating the service safely.

To meet legal, tax and regulatory obligations, and to establish or defend legal claims.

We do not sell your personal data, and we do not use it for advertising profiling.

Airlines, and where necessary their agents or the relevant national enforcement body, receive the information needed to pursue your specific claim — this is the point of the service.

We send a passenger's ID to an airline only when that airline asks for it to process the claim.

Service providers process data on our instructions under contract. They fall into a small number of categories: cloud hosting and database, transactional email delivery, payment processing, flight-data lookup, and document/text assistance used to draft correspondence.

Where address suggestions are offered on the claim form, what you type into the address field is sent to Google's Places service to produce the suggestions. Using a suggestion is optional — you can always type your address yourself.

Where an automated tool helps draft claim correspondence, its output is reviewed by a person before anything is sent. No legally significant document is sent to an airline without human approval.

We may disclose data where the law requires it, or to establish, exercise or defend legal claims.

Some of our providers process data outside the country where you live. Where that happens, the transfer is covered by an appropriate safeguard — an adequacy decision or standard contractual clauses — and we contract with providers on that basis.

We keep claim records for as long as your claim is active, and afterwards for the period needed to handle disputes, appeals and complaints, and to satisfy accounting and tax obligations.

Uploaded documents are kept for the life of the claim and its retention period, then deleted. Draft flight checks that are never converted into a claim expire automatically.

Passport and ID card images are deleted as soon as your claim is closed, whatever the outcome. If you withdraw your authorization, they are deleted then.

Sign-in tokens are short-lived and single-use; sessions expire. We store token hashes only, never the token itself.

Traffic to the site is encrypted in transit, and data is encrypted at rest by our database provider. Credentials held for integrations are encrypted with authenticated encryption before storage.

Access is checked on the server for every request, so you can only see your own claims. Staff access is role-restricted, and staff views of sensitive documents are recorded in the claim's audit log.

Uploaded documents are served only to you and the staff working your claim — never from public URLs.

Depending on where you live, you can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You can also withdraw your authorization for us to act on a claim at any time.

To exercise any of these, email support@flightcompensations.com. We will respond within the period the law allows. Some data must be retained despite a deletion request where accounting or legal-defence obligations apply; we will tell you when that is the case.

If you are unhappy with how we handle your data, you can complain to the data protection authority in your country.

We use a small number of strictly necessary cookies: one to keep you signed in, ones required for security, and one that remembers your cookie choice. These are needed for the service to work and are not used for advertising.

With your consent we also use Google Analytics to understand how the site is used and Google Ads to measure whether our advertising leads to claims. Neither sets a cookie or stores an identifier until you accept in the cookie banner; if you decline, the service works exactly the same and Google receives only aggregated, cookieless measurements. You can change your choice at any time by clearing this site's cookies.

The service is not directed at children. An adult must submit a claim, including where the claim covers a child who travelled on the same booking. The adult submitting the claim also provides a photo of each child's passport or ID card. It is kept and deleted on the same terms as an adult's.

We may update this policy. The current version is always published here with its last-updated date, and we will tell you directly if a change materially affects how we use your data.