GDPR Policy

1. Strict Principles of Data Minimization & Scope

In absolute compliance with UK GDPR Article 5(1)(c), Peace Flight Hub enforces a strict data minimization protocol across our flight search query forms, telephone queues (020 8965 0364), and booking architecture. We restrict the gathering of personal traveler profiles exclusively to elements that are dynamically required to execute your transport contracts, satisfy aviation border security checks, or clear secure financial transactions:

• Necessary Operational Records: Legal passenger names matching official travel passports, dates of birth, contact telephone numbers, email addresses, and specific Passenger Name Records (PNR).
• No Redundant Aggregation: We do not run background telemetry profiles, harvest peripheral social data, or keep unneeded demographic records. Once your specific ticketing cycles, regulatory tracking periods, and tax auditing parameters have concluded, personal profile data is removed from our live storage systems.

2. Lawful Bases for Passenger Data Processing

We handle individual traveler information solely under clear, established legal justifications in compliance with UK GDPR Article 6:

• Contractual Necessity: Transferring passport details, itinerary preferences, and seat allotments to executing air carriers and global GDS networks to construct and issue your travel tickets.
• Legal Obligation: Submitting advanced passenger information (API) records to international customs, immigration offices, and national security entities as required by aviation law.
• Legitimate Interests: Running secure card tokenization to guard against transaction fraud, keeping call verification recordings to prove manual verbal itinerary agreements, and analyzing web performance parameters to protect our digital assets.

3. Structural Data Security and Access Limits

To guarantee that all personal files are managed with maximum regulatory care, our network uses comprehensive technical and administrative firewalls. All digital database entry lines are protected via Secure Sockets Layer (SSL) transport protocols, card processing operations comply strictly with PCI-DSS guidelines, and internal access to live booking logs is restricted solely to certified travel consultants actively managing your specific itinerary files.

4. Comprehensive Exercise of Passenger Rights

Under the UK GDPR framework, you hold enforceable statutory rights regarding the management of your personal information. You can exercise these protections at any moment:

• Right of Access & Portability: You can request a clear, comprehensive breakdown of the personal data strings we store, delivered in a structured digital configuration.
• Right to Rectification: You can demand the instant correction of typographic mistakes, spelling errors, or outdated contact coordinates within our active databases.
• Right to Erasure ("Right to be Forgotten"): You can instruct the permanent deletion of your passenger profile records, provided the data is no longer required for active travel contracts, pending financial settlements, or corporate UK tax tracking requirements.
• Right to Object & Restrict Processing: You possess the absolute right to limit how we use your data or object to automated background processing channels.

To submit a formal Data Subject Access Request (DSAR) or register an data concern, contact our data protection supervisor directly at reservation@peaceflighthub.com or send physical mail to our office address: Peace Travel and Tour Ltd, 38 High Street Harlesden, London, NW10 4LS.