Main menu

Processing of personal data: detailed information

Serving you:

  • Managing  your account and fulfilling your bookings and orders 
  • Managing your bookings and purchases
  • Managing third party products and services sold through our website or app
  • Collecting and transmitting your Advance Passenger Information (API) if you don’t save this in your account
  • Getting clearance to travel
  • Getting you in the air
  • Dealing with flight disruptions, and managing flight disruption claims and other claims
  • Keeping you safe
  • Running our easyJet Plus scheme
  • Communicating with you
  • Telling you about products and services we think will interest you
  • Managing corporate accounts

 

Improving our products and services:

  • Analysing customer survey responses

 

Running our business:

  • Investigating and dealing with disruptive and banned passengers
  • Detecting, monitoring, and preventing fraud
  • Responding to your requests to exercise your rights under data protection law
  • Financial, audit and tax reporting
  • Responding to requests for disclosure of information (e.g. from the police)
  • Responding to media enquiries or issuing press releases
 


Managing your account and fulfilling your bookings and orders

Categories of personal data
Lawful basis How long we keep your data
Account details, including your title, name, contact details including email address, telephone number, postal address, and password If we process these data to complete a booking or a purchase of ancillary services, to administer flight bookings, or do something necessary to fulfil our contract with you, we process your data to perform our contract with you. 

If you create an account but do not immediately purchase something from us, we process your data to enter into a future contract with you.
Until you close your account, or if you don’t use your account for 6.5 years.
Payment card details you choose to save to use in future Your consent
Until you close your account or choose to delete the data, or if you don’t use your account for 2 years.
Advance Passenger Information (API) you choose to save to use in future
easyJet Plus Membership number or any other type of membership (e.g. Flight Club Membership)
To perform our contract with you
Until you close your account, or if you don’t use your account for 6.5 years.


Managing your bookings and purchases

Categories of personal data
Lawful basis How long we keep your data
Your name, surname and contact details Managing your bookings and purchases of ancillary products and services is necessary to perform our contract with you.
 
6.5 years from your flight.
Age group (adult/child/infant)
Booking Reference
Flight itinerary
Passenger names (if different from yours)
Products and services purchased (e.g. hold bags, allocated seats, sports equipment)
Payment card details Processing your payment details is necessary to perform our contract with you.
For German customers, and otherwise where required by law, we process payment and bank account data to comply with our legal obligations. 
6.5 years from the flight date, with the exception of your primary account number, which we retain for less than a day unless you choose to save it to your account for future use.
Bank account information (applicable to German customers only and/or when required by law)
Processing your payment details is necessary to perform our contract with you.
For German customers, and otherwise where required by law, we process payment and bank account data to comply with our legal obligations. 
6.5 years from your flight.
 Reason for travel (business/leisure) For the legitimate interest of improving our customer experience. 6.5 years from your flight.
Discount codes, and eligibility for discounts To perform our contract with you. 6.5 years from your flight.
easyJet Plus Membership number


Managing third party products and services sold through our website or app

Categories of personal data
Lawful basis How long we keep your data
Car rentals: driver’s first and surname, rental agreement number, country, pick up and drop off dates, airport transfer, and type of car. We process your personal data to perform the contract between you and us or the service provider. 6.5 years from your flight.
Airport transfers: operator details, type of service purchased, your destination, and your name, surname, and date of birth.
Hotel bookings: your contact details and billing information, and hotel provider.
GetYourGuide Deutschland GmbH: your contact details and billing information.
TrustedHouseSitters Limited: your contact details and billing information.
Information related to the purchase of an easyJet Euro currency Card provided by R. Raphael & Sons plc, Payment card technologies (Retail) Limited.
Airport parking: your contact details and billing information, and service provider.
Signature Flight Support UK Regions Ltd: your contact details and billing information.
Information related to the insurance purchased including your contact details and billing information, and insurance provider.


Collecting and transmitting your Advance Passenger Information (API) if you don’t save this in your account

Categories of personal data
Lawful basis How long we keep your data
Your full name We are required to process these data to comply with our legal obligations.

If you choose to upload a photo of your identity document, we process it on the basis of your consent.
 
3 months from the date on which we transmit it to the relevant authorities.
Nationality
Date of birth
Gender
Type and number of travel document
Travel document expiry date
Travel document country of issue
If you choose to scan your identity document using our app, a copy of that photograph


Getting clearance to travel

Categories of personal data
Lawful basis How long we keep your data
Your contact details, Advance Passenger Information, identity card information, flight details and seat number, baggage details, easyJet Plus membership status, car hire details, and special service requests.
To comply with our legal obligations to verify the accuracy of passenger data and to communicate correct passenger data to border control authorities. 4 months from the date we transmit the record.


Getting you in the air

Categories of personal data
Lawful basis How long we keep your data
Customer manifest (a list of all passengers on a flight) which includes names of passengers, seat number, nationality, point of embarkation and disembarkation, flight date and number) To comply with our legal obligations to ensure that only those that are entitled to fly are onboarded on the correct flights, and to ensure that our customers receive appropriate assistance.
 
Deleted once the flight has departed except when it is required by a relevant authority or public body.
 SSR (Special Service Requests) Reports
Passenger Name List/Additions/Deletions To comply with our legal obligations to ensure that only those that are entitled to fly are onboarded on the correct flights, and to ensure that our customers receive appropriate assistance.
6.5 years from the date of your flight.
Passenger Assistance/Change Assistance List
Passenger Reconciliation List (PRL)


Dealing with flight disruptions

Categories of personal data
Lawful basis How long we keep your data
Your contact details and flight information
To comply with our legal obligations relating to disrupted flights. 6.5 years from the date of the disrupted flight
Your hotel accommodation allocation, if we provide you with hotel accommodation


Managing flight disruption claims and other claims

Categories of personal data
Lawful basis How long we keep your data
Flight disruption claims and related information
We process personal data relating to claims to comply with our legal obligation to give effect to the rights of eligible passengers.  6.5 years after the case is closed
Passenger Liability Insurance claims and related information
Passenger Lost and Damaged baggage claims and related information
Legal claims and related information
If we have a legal obligation to respond to your claim or to pay compensation, we process your data to comply with our legal obligations. Otherwise, we process your data for the legitimate interests of providing customer services, and defending and exercising our rights.
10 years from date of settlement/judgment/order
Bank account information
If we have a legal obligation to respond to your claim or to pay compensation, we process your data to comply with our legal obligations. Otherwise, we process your data for the legitimate interests of providing customer services, and defending and exercising our rights.
90 days after the case is closed 
Escalated customer complaints
If we have a legal obligation to respond to your claim or to pay compensation, we process your data to comply with our legal obligations. Otherwise, we process your data for the legitimate interests of providing customer services, and defending and exercising our rights.
6.5 years from date of complaint


Keeping you safe

Categories of personal data
Lawful basis How long we keep your data
Safety reports and passenger incident records To comply with our legal obligations to record safety incidents relating to flights. 6.5 years from the date of flight.
Immigration reports
Operational reports
Medical reports
Witness statement


Running our easyJet Plus scheme

Categories of personal data
Lawful basis How long we keep your data
Your name and contact details including email address, telephone number, postal address We process your data to perform our contract with you, and to take steps to enter into a contract with you when you decide to become an easyJet Plus member.
9 months from the end of your membership.
Date of birth
Membership number and membership status
Membership Invoice (upon customer's request)
We process your data to perform our contract with you, and to take steps to enter into a contract with you when you decide to become an easyJet Plus member.
We do not keep a copy of the invoice after we have sent it to you. the invoice has been sent to the customer.


Communicating with you

Categories of personal data
Lawful basis How long we keep your data
Name and contact details including email address, telephone number and postal address
If we are required by law to communicate with you (e.g. in respect of flight disruptions), we process your data to comply with our legal obligations.

If communications relate to our contract with you, or relate to a future contract, we process your data to perform our contract with you or enter into a contract with you.

For all other communications, we process your data for our, and your, legitimate interests, such as administering your account, responding to your questions, and providing you with customer service.
6.5 years 
Private social media messages you send us
If we are required by law to communicate with you (e.g. in respect of flight disruptions), we process your data to comply with our legal obligations.

If communications relate to our contract with you, or relate to a future contract, we process your data to perform our contract with you or enter into a contract with you.

For all other communications, we process your data for our, and your, legitimate interests, such as administering your account, responding to your questions, and providing you with customer service.
6.5 years from the date of the communication
Public social media messages
If we are required by law to communicate with you (e.g. in respect of flight disruptions), we process your data to comply with our legal obligations.

If communications relate to our contract with you, or relate to a future contract, we process your data to perform our contract with you or enter into a contract with you.

For all other communications, we process your data for our, and your, legitimate interests, such as administering your account, responding to your questions, and providing you with customer service.
2 years
Letters you send us
If we are required by law to communicate with you (e.g. in respect of flight disruptions), we process your data to comply with our legal obligations.

If communications relate to our contract with you, or relate to a future contract, we process your data to perform our contract with you or enter into a contract with you.

For all other communications, we process your data for our, and your, legitimate interests, such as administering your account, responding to your questions, and providing you with customer service.
3 months after the letters are scanned
Live chat messages
If we are required by law to communicate with you (e.g. in respect of flight disruptions), we process your data to comply with our legal obligations.

If communications relate to our contract with you, or relate to a future contract, we process your data to perform our contract with you or enter into a contract with you.

For all other communications, we process your data for our, and your, legitimate interests, such as administering your account, responding to your questions, and providing you with customer service.
7.5 years from the date of the communication
Information you send us via our webforms
Email
Notes on communications
Paper booking confirmation
To perform our contract with you
Not retained once sent. 
Call recordings
Legitimate Interests: to resolve complaints, defend and exercise our rights, and train and improve our customer services teams.
180 days from the date of the call.


Telling you about products and services we think will interest you

Categories of personal data
Lawful basis How long we keep your data
Your contact details and information about you
We process your personal data for our legitimate interest of marketing products and services which we think will interest you.

If you have chosen to give us additional information for marketing purposes (such as your chosen preferred airport), or else if we must have your consent because of a legal requirement, we will process your data only where you have consented. 
Until you delete your account or withdraw your consent, or if you don’t use your account for 6.5 years.

We keep a record of consent for 6.5 years from account closure.
Booking/Purchase History
Your marketing preferences
Flight Club Membership
We process your personal data for the legitimate interest of determining if you are eligible for membership of our Flight Club and, if you join our Flight Club, as necessary to perform our contract with you.
Up to 1 year after your Flight Club membership has ended.
easyJet Plus Membership number and related information
To perform our contract with you.
9 months from the end of your membership.


Managing corporate accounts

Categories of personal data
Lawful basis How long we keep your data
Your name, email address and contact number, if you are your company’s corporate contact
If you are a corporate travel buyer, we process your personal data for our legitimate interest of communicating with you about the product and services your company has bought.

We will also send you marketing about our products and services (again, a legitimate interest) unless you have told us you do not want to receive this. 
6.5 years from the end date of the contract.

If the contact is changed during the life of the contract, the details of the initial contact are deleted, and the personal data of the new contact is kept for 5 years from the date the contract was terminated.
Corporate Address
Gender
Job Title
Communication Permissions


Analysing customer survey responses

Categories of personal data
Lawful basis How long we keep your data
Your name and email address
For the legitimate interest of improving our products and services, and customer service. 4.5 years from receipt. 
Country of residence
Flight number 
Booking Reference
Your comments
Feedback Rating


Investigating and dealing with disruptive and banned passengers

Categories of personal data
Lawful basis How long we keep your data
Banned Passenger List and information related to a banned passenger investigation
For the legitimate interest of ensuring the safety of our operations and protect the safety and security of our passengers and employees. 

If we are required by law to prevent you from flying, we process your data in accordance with this legal obligation.
Information on incidents which do not lead to further investigation: 3 months from the date of the report.

Banned Passenger List: for the duration of the ban, and then one month.

Security and incident reports: 6.5 years from the date of the flight. 


Detecting, monitoring, and preventing fraud

Categories of personal data
Lawful basis How long we keep your data
This depends on the suspected fraud, but typically includes name, contact and account details, IP address information, location information, booking and flight information, payment information, and related information.
For the legitimate interest of monitoring, detecting and preventing fraud. 6 years 


Responding to your requests to exercise your rights under data protection law

Categories of personal data
Lawful basis How long we keep your data
Information needed to verify your identity and ensure you are the data subject in question
To comply with our legal obligations under the data protection framework.
Deleted once your request is fulfilled.
Information sought / processed as part of your request, which depends on the scope of your request.
To comply with our legal obligations under the data protection framework. 6.5 years from the date of the disrupted flight.


Financial, audit and tax reporting

Categories of personal data
Lawful basis How long we keep your data
External audit reports, which may contain your personal data
For the legitimate interest of conducting external audits of our operations.
7 years 
Passenger names on reports on Air Passenger Duty exemption (infants & children)
 
To comply with our legal obligation to exempt passengers from Air
Passenger Duty
7 years 
Bank statements
For the legitimate interest of confirming valid payments from customers. 
7 years 
Banking reconciliations
For the legitimate interest of confirming valid payments from customers.  90 days after the case is closed or after the payment has been successfully made if this happens later.


Responding to requests for disclosure of information (e.g. from the police)

Categories of personal data
Lawful basis How long we keep your data
This depends on the nature of the request, but often includes name and contact information, financial / payment information, and travel information.
For the legitimate interest of assisting in the prevention or detection of crime, where a request is not an obligation.

To comply with our legal obligations, where a request is binding (e.g. made under statutory powers, or in response to a court order).
 
1 year after information has been provided.


Responding to media enquiries or issuing press releases

Categories of personal data
Lawful basis How long we keep your data
It depends on the situation, but typically a customer’s name and flight details.
For the legitimate interests of responding to a media enquiry, public relations, or providing customer service. 6.5 years from the date of the press release or statement