Privacy Policy • Win Flight Claims

# Privacy Policy **Last updated:** 18th November 2025 This Privacy Policy describes how Win Flight Claims ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at winflightclaims.com (the "Site"). By accessing or using our Site, you agree to this Privacy Policy. If you do not agree with our policies and practices, do not use our Site. ## Information We Collect We collect several types of information from and about users of our Site. ### Information You Provide Directly We collect information you provide when you interact with our Site, including: **Through Flight Compensation Forms:** - Full name - Email address - Phone number - Flight details (departure and arrival airports, flight number, flight date) - Booking reference - Airline name - Disruption details (delay duration, cancellation, denied boarding) - Passenger information - Any other information you choose to provide in message fields or custom form fields We use Typeform to collect information through forms on our Site. When you submit a form, Typeform collects and processes your information on our behalf. For more information about how Typeform handles your data, please review their privacy policy at <https://www.typeform.com/help/privacy-policy/>. **Through Account Registration (if applicable):** - Username and password - Profile information - Billing information **Through Payment Processing:** When you make a purchase or payment through our Site, we use Stripe to process transactions. Stripe collects and processes your payment information, including: - Credit or debit card information - Billing address - Transaction details We do not store your complete payment card information on our servers. Stripe’s use of your personal information is governed by their privacy policy at <https://stripe.com/privacy>. Stripe is certified as a PCI Service Provider Level 1, the most stringent level of certification in the payments industry. **Through Communications:** - Information in emails, chat messages, or other communications with us - Feedback, survey responses, and testimonials ### Information Collected Automatically When you access and use our Site, we automatically collect: **Device and Browser Information:** - IP address - Browser type and version - Operating system - Device type (desktop, mobile, tablet) - Screen resolution - Browser language settings **Usage Information:** - Pages visited - Time and date of visits - Time spent on pages - Click-stream data - Referring and exit pages - Links clicked - Search terms used on our Site **Location Information:** - Geographic location based on IP address - Time zone ### Information from Cookies and Tracking Technologies We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities. See the “Cookies and Tracking Technologies” section below for more details. ### Information from Third Parties We may receive information about you from: - Business partners - Analytics providers - Advertising networks - Social media platforms (if you interact with our social media content) - Publicly available sources - Payment processors (transaction confirmation and fraud prevention) ## How We Use Your Information We use the information we collect for various purposes: **To Provide and Maintain Our Services:** - Process and respond to your inquiries - Deliver requested information, content, or services - Create and manage your account (if applicable) - Process transactions and payments - Provide customer support - Send transaction confirmations and receipts **To Communicate With You:** - Send you updates about our services - Send marketing and promotional communications (with your consent) - Send administrative information, such as changes to our terms or policies - Respond to your comments and questions **To Improve Our Site and Services:** - Analyze how visitors use our Site - Understand user preferences and trends - Test new features and functionality - Conduct research and analytics - Monitor and analyze Site performance **For Marketing and Advertising:** - Personalize your experience on our Site - Display targeted advertisements - Measure advertising effectiveness - Conduct remarketing and retargeting campaigns - Build custom and lookalike audiences **For Security and Legal Compliance:** - Detect and prevent fraud - Protect against unauthorized access and security threats - Comply with legal obligations - Enforce our terms and conditions - Resolve disputes ## Cookies and Tracking Technologies We use cookies and similar technologies to collect information and improve your experience on our Site. ### What Are Cookies? Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand how you use the site. ### Types of Cookies We Use **Strictly Necessary Cookies:** These cookies are essential for our Site to function properly. They enable core functionality such as security, network management, and accessibility. **Analytics Cookies:** These cookies help us understand how visitors interact with our Site by collecting and reporting information anonymously. We use the following analytics tools: PostHog, Google Analytics **Marketing Cookies:** This Site uses advertising and retargeting cookies. These cookies are used to personalize the advertisements that we show to you so that they are meaningful to you. These cookies also help us keep track of the efficiency of these ad campaigns. For the purpose of marketing, advertising, and retargeting, we use: Meta Pixel, Google Ads Pixel, LinkedIn Insight Tag, Reddit Pixel **Preference Cookies:** These cookies remember your preferences and settings, such as language preferences and region. **Session vs. Persistent Cookies:** - Session cookies are temporary and deleted when you close your browser - Persistent cookies remain on your device for a set period or until you delete them ### Third-Party Cookies Third parties, including analytics and advertising partners, may set cookies through our Site. We do not control these third-party cookies. We encourage you to review the privacy policies of these third parties. ### Managing Cookies You can control and manage cookies through your browser settings. Most browsers allow you to: - View and delete cookies - Block third-party cookies - Block cookies from specific sites - Block all cookies - Delete all cookies when you close your browser Note that blocking or deleting cookies may affect your experience on our Site and limit functionality. You can also opt out of targeted advertising through: - Network Advertising Initiative: <http://www.networkadvertising.org/choices/> - Digital Advertising Alliance: <http://www.aboutads.info/choices/> - European Interactive Digital Advertising Alliance: <http://www.youronlinechoices.eu/> ### Do Not Track Signals Some browsers have a “Do Not Track” feature. Our Site does not currently respond to Do Not Track signals. ## How We Share Your Information We may share your information in the following circumstances: **Service Providers:** We share information with third-party vendors, consultants, and service providers who perform services on our behalf, such as: - Website hosting (Vercel) - Payment processing (Stripe) - Form collection and management (Typeform) - Data analysis - Email delivery - Customer service - Marketing and advertising These service providers are contractually obligated to use your information only as necessary to provide services to us and are required to protect your information. **Business Transfers:** If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. **Legal Requirements:** We may disclose your information if required by law or in response to: - Court orders or subpoenas - Legal processes - Government or regulatory requests - Requests to protect our rights, property, or safety - Requests to protect the rights, property, or safety of others **With Your Consent:** We may share your information with third parties when you give us consent to do so. **Aggregated or De-identified Information:** We may share aggregated or de-identified information that cannot reasonably be used to identify you. **We Do Not Sell Your Information:** We do not sell your personal information to third parties. ## Data Retention We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Factors we consider in determining retention periods include: - The nature and sensitivity of the information - The purposes for which we process the information - Whether we can achieve those purposes through other means - Legal, regulatory, tax, or accounting requirements When we no longer need your information, we will securely delete or anonymize it. ## International Data Transfers Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your country. Our Site is hosted on Vercel’s infrastructure, which may process and store data in multiple locations globally. When we transfer information internationally, we take steps to ensure your information receives an adequate level of protection, including: - Standard contractual clauses - Data processing agreements - Other appropriate safeguards ## Your Rights and Choices Depending on your location, you may have certain rights regarding your personal information. ### Access and Portability You have the right to: - Request access to the personal information we hold about you - Receive a copy of your personal information in a structured, commonly used format - Request that we transfer your information to another organization ### Correction You have the right to request that we correct inaccurate or incomplete personal information. ### Deletion You have the right to request deletion of your personal information, subject to certain exceptions (such as legal obligations or legitimate interests). ### Objection and Restriction You have the right to: - Object to our processing of your personal information - Request that we restrict processing of your personal information in certain circumstances ### Opt-Out of Marketing You have the right to opt out of marketing communications at any time by: - Clicking the “unsubscribe” link in our emails - Contacting us at support@winflightclaims.com - Updating your communication preferences (if you have an account) Note that even if you opt out of marketing communications, we may still send you non-promotional messages related to your account or transactions. ### Withdrawal of Consent If we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. ### Exercise Your Rights To exercise any of these rights, please contact us at support@winflightclaims.com. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request. In some cases, we may decline your request if permitted or required by law. ## Security We implement reasonable technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, use, disclosure, alteration, and destruction. These measures include: - Encryption of data in transit and at rest (SSL/TLS) - Secure server infrastructure provided by Vercel - Secure payment processing through Stripe’s PCI-compliant systems - Access controls and authentication - Regular security assessments - Employee training on data protection However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at support@winflightclaims.com. ## Third-Party Websites and Services Our Site may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices or content of these third parties. We encourage you to read the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected through our Site. **Third-Party Services We Use:** - **Vercel** (hosting): <https://vercel.com/legal/privacy-policy> - **Stripe** (payment processing): <https://stripe.com/privacy> - **Typeform** (form collection): <https://www.typeform.com/help/privacy-policy/> - **PostHog** (analytics): <https://posthog.com/privacy> - **Google Analytics** (analytics): <https://policies.google.com/privacy> ## Children’s Privacy Our Site is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information as quickly as possible. If you believe we may have collected information from a child under 13, please contact us at support@winflightclaims.com. ## California Privacy Rights If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA). ### Your CCPA Rights You have the right to: - Know what personal information we collect, use, disclose, and sell - Request deletion of your personal information - Opt out of the sale of your personal information (note: we do not sell personal information) - Non-discrimination for exercising your CCPA rights ### How to Exercise Your Rights To exercise your CCPA rights, contact us at support@winflightclaims.com. We will verify your identity before processing your request. You may designate an authorized agent to make requests on your behalf. ### California “Shine the Light” Law California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, contact us at support@winflightclaims.com. ## European Privacy Rights If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR) and other applicable laws. ### Legal Basis for Processing We process your personal information based on the following legal grounds: - Consent: You have given consent for specific purposes - Contract: Processing is necessary to fulfill a contract with you - Legal obligation: Processing is required by law - Legitimate interests: Processing is necessary for our legitimate business interests ### Your GDPR Rights In addition to the rights listed above, you have the right to lodge a complaint with a supervisory authority if you believe we have processed your information unlawfully. ## Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by: - Posting the updated policy on this page - Updating the “Last updated” date - Sending you an email notification (if you have provided your email address) - Displaying a prominent notice on our Site Your continued use of our Site after changes become effective constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. ## Contact Us If you have questions, comments, or concerns about this Privacy Policy or our privacy practices, please contact us: **Email:** support@winflightclaims.com **Mailing Address:** Win Flight Claims 86-90 Paul Street London, UK EC2A 4NE We will respond to your inquiry within a reasonable timeframe.