Serving you:
- Managing your account and fulfilling your bookings and orders
- Managing your bookings and purchases
- Managing third party products and services sold through our website or app
- Collecting and transmitting your Advance Passenger Information (API) if you don’t save this in your account
- Getting clearance to travel
- Getting you in the air
- Dealing with flight disruptions, and managing flight disruption claims and other claims
- Keeping you safe
- Running our easyJet Plus scheme
- Communicating with you
- Telling you about products and services we think will interest you
- Managing corporate accounts
Improving our products and services:
- Analysing customer survey responses
Running our business:
- Investigating and dealing with disruptive and banned passengers
- Detecting, monitoring, and preventing fraud
- Responding to your requests to exercise your rights under data protection law
- Financial, audit and tax reporting
- Responding to requests for disclosure of information (e.g. from the police)
- Responding to media enquiries or issuing press releases
Managing your account and fulfilling your bookings and orders
| Categories of personal data |
Lawful basis | How long we keep your data |
| Account details, including your title, name, contact details including email address, telephone number, postal address, and password | If we process these data to complete a booking or a purchase of ancillary services, to administer flight bookings, or do something necessary to fulfil our contract with you, we process your data to perform our contract with you. If you create an account but do not immediately purchase something from us, we process your data to enter into a future contract with you. |
Until you close your account, or if you don’t use your account for 6.5 years. |
| Payment card details you choose to save to use in future | Your consent |
Until you close your account or choose to delete the data, or if you don’t use your account for 2 years. |
| Advance Passenger Information (API) you choose to save to use in future | ||
| easyJet Plus Membership number or any other type of membership (e.g. Flight Club Membership) |
To perform our contract with you |
Until you close your account, or if you don’t use your account for 6.5 years. |
Managing your bookings and purchases
| Categories of personal data |
Lawful basis | How long we keep your data |
| Your name, surname and contact details | Managing your bookings and purchases of ancillary products and services is necessary to perform our contract with you. |
6.5 years from your flight. |
| Age group (adult/child/infant) |
||
| Booking Reference |
||
| Flight itinerary |
||
| Passenger names (if different from yours) |
||
| Products and services purchased (e.g. hold bags, allocated seats, sports equipment) |
||
| Payment card details | Processing your payment details is necessary to perform our contract with you. For German customers, and otherwise where required by law, we process payment and bank account data to comply with our legal obligations. |
6.5 years from the flight date, with the exception of your primary account number, which we retain for less than a day unless you choose to save it to your account for future use. |
| Bank account information (applicable to German customers only and/or when required by law) |
Processing your payment details is necessary to perform our contract with you. For German customers, and otherwise where required by law, we process payment and bank account data to comply with our legal obligations. |
6.5 years from your flight. |
| Reason for travel (business/leisure) | For the legitimate interest of improving our customer experience. | 6.5 years from your flight. |
| Discount codes, and eligibility for discounts | To perform our contract with you. | 6.5 years from your flight. |
| easyJet Plus Membership number |
Managing third party products and services sold through our website or app
| Categories of personal data |
Lawful basis | How long we keep your data |
| Car rentals: driver’s first and surname, rental agreement number, country, pick up and drop off dates, airport transfer, and type of car. | We process your personal data to perform the contract between you and us or the service provider. | 6.5 years from your flight. |
| Airport transfers: operator details, type of service purchased, your destination, and your name, surname, and date of birth. |
||
| Hotel bookings: your contact details and billing information, and hotel provider. |
||
| GetYourGuide Deutschland GmbH: your contact details and billing information. |
||
| TrustedHouseSitters Limited: your contact details and billing information. |
||
| Airport parking: your contact details and billing information, and service provider. |
||
| Information related to the insurance purchased including your contact details and billing information, and insurance provider. |
Collecting and transmitting your Advance Passenger Information (API) if you don’t save this in your account
| Categories of personal data |
Lawful basis | How long we keep your data |
| Your full name | We are required to process these data to comply with our legal obligations. If you choose to upload a photo of your identity document, we process it on the basis of your consent. |
3 months from the date on which we transmit it to the relevant authorities. |
| Nationality |
||
| Date of birth |
||
| Gender |
||
| Type and number of travel document |
||
| Travel document expiry date |
||
| Travel document country of issue |
||
| If you choose to scan your identity document using our app, a copy of that photograph |
Getting clearance to travel
| Categories of personal data |
Lawful basis | How long we keep your data |
| Your contact details, Advance Passenger Information, identity card information, flight details and seat number, baggage details, easyJet Plus membership status, car hire details, and special service requests. |
To comply with our legal obligations to verify the accuracy of passenger data and to communicate correct passenger data to border control authorities. | 4 months from the date we transmit the record. |
Getting you in the air
| Categories of personal data |
Lawful basis | How long we keep your data |
| Customer manifest (a list of all passengers on a flight) which includes names of passengers, seat number, nationality, point of embarkation and disembarkation, flight date and number) | To comply with our legal obligations to ensure that only those that are entitled to fly are onboarded on the correct flights, and to ensure that our customers receive appropriate assistance. |
Deleted once the flight has departed except when it is required by a relevant authority or public body. |
| SSR (Special Service Requests) Reports | ||
| Passenger Name List/Additions/Deletions | To comply with our legal obligations to ensure that only those that are entitled to fly are onboarded on the correct flights, and to ensure that our customers receive appropriate assistance. |
6.5 years from the date of your flight. |
| Passenger Assistance/Change Assistance List | ||
| Passenger Reconciliation List (PRL) |
Dealing with flight disruptions
| Categories of personal data |
Lawful basis | How long we keep your data |
| Your contact details and flight information |
To comply with our legal obligations relating to disrupted flights. | 6.5 years from the date of the disrupted flight |
| Your hotel accommodation allocation, if we provide you with hotel accommodation |
Managing flight disruption claims and other claims
| Categories of personal data |
Lawful basis | How long we keep your data |
| Flight disruption claims and related information |
We process personal data relating to claims to comply with our legal obligation to give effect to the rights of eligible passengers. | 6.5 years after the case is closed |
| Passenger Liability Insurance claims and related information |
||
| Passenger Lost and Damaged baggage claims and related information |
||
| Legal claims and related information |
If we have a legal obligation to respond to your claim or to pay compensation, we process your data to comply with our legal obligations. Otherwise, we process your data for the legitimate interests of providing customer services, and defending and exercising our rights. |
10 years from date of settlement/judgment/order |
| Bank account information |
If we have a legal obligation to respond to your claim or to pay compensation, we process your data to comply with our legal obligations. Otherwise, we process your data for the legitimate interests of providing customer services, and defending and exercising our rights. |
90 days after the case is closed |
| Escalated customer complaints |
If we have a legal obligation to respond to your claim or to pay compensation, we process your data to comply with our legal obligations. Otherwise, we process your data for the legitimate interests of providing customer services, and defending and exercising our rights. |
6.5 years from date of complaint |
Keeping you safe
| Categories of personal data |
Lawful basis | How long we keep your data |
| Safety reports and passenger incident records | To comply with our legal obligations to record safety incidents relating to flights. | 6.5 years from the date of flight. |
| Immigration reports |
||
| Operational reports |
||
| Medical reports |
||
| Witness statement |
Running our easyJet Plus scheme
| Categories of personal data |
Lawful basis | How long we keep your data |
| Your name and contact details including email address, telephone number, postal address | We process your data to perform our contract with you, and to take steps to enter into a contract with you when you decide to become an easyJet Plus member. |
9 months from the end of your membership. |
| Date of birth |
||
| Membership number and membership status |
||
| Membership Invoice (upon customer's request) |
We process your data to perform our contract with you, and to take steps to enter into a contract with you when you decide to become an easyJet Plus member. |
We do not keep a copy of the invoice after we have sent it to you. the invoice has been sent to the customer. |
Communicating with you
| Categories of personal data |
Lawful basis | How long we keep your data |
| Name and contact details including email address, telephone number and postal address |
If we are required by law to communicate with you (e.g. in respect of flight disruptions), we process your data to comply with our legal obligations. If communications relate to our contract with you, or relate to a future contract, we process your data to perform our contract with you or enter into a contract with you. For all other communications, we process your data for our, and your, legitimate interests, such as administering your account, responding to your questions, and providing you with customer service. |
6.5 years |
| Private social media messages you send us |
If we are required by law to communicate with you (e.g. in respect of flight disruptions), we process your data to comply with our legal obligations. If communications relate to our contract with you, or relate to a future contract, we process your data to perform our contract with you or enter into a contract with you. For all other communications, we process your data for our, and your, legitimate interests, such as administering your account, responding to your questions, and providing you with customer service. |
6.5 years from the date of the communication |
| Public social media messages |
If we are required by law to communicate with you (e.g. in respect of flight disruptions), we process your data to comply with our legal obligations. If communications relate to our contract with you, or relate to a future contract, we process your data to perform our contract with you or enter into a contract with you. For all other communications, we process your data for our, and your, legitimate interests, such as administering your account, responding to your questions, and providing you with customer service. |
2 years |
| Letters you send us |
If we are required by law to communicate with you (e.g. in respect of flight disruptions), we process your data to comply with our legal obligations. If communications relate to our contract with you, or relate to a future contract, we process your data to perform our contract with you or enter into a contract with you. For all other communications, we process your data for our, and your, legitimate interests, such as administering your account, responding to your questions, and providing you with customer service. |
3 months after the letters are scanned |
| Live chat messages |
If we are required by law to communicate with you (e.g. in respect of flight disruptions), we process your data to comply with our legal obligations. If communications relate to our contract with you, or relate to a future contract, we process your data to perform our contract with you or enter into a contract with you. For all other communications, we process your data for our, and your, legitimate interests, such as administering your account, responding to your questions, and providing you with customer service. |
7.5 years from the date of the communication |
| Information you send us via our webforms |
||
| Email |
||
| Notes on communications |
||
| Paper booking confirmation |
To perform our contract with you |
Not retained once sent. |
| Call recordings |
Legitimate Interests: to resolve complaints, defend and exercise our rights, and train and improve our customer services teams. |
180 days from the date of the call. |
Telling you about products and services we think will interest you
| Categories of personal data |
Lawful basis | How long we keep your data |
| Your contact details and information about you |
We process your personal data for our legitimate interest of marketing products and services which we think will interest you. If you have chosen to give us additional information for marketing purposes (such as your chosen preferred airport), or else if we must have your consent because of a legal requirement, we will process your data only where you have consented. |
Until you delete your account or withdraw your consent, or if you don’t use your account for 6.5 years. We keep a record of consent for 6.5 years from account closure. |
| Booking/Purchase History |
||
| Your marketing preferences |
||
| Flight Club Membership |
We process your personal data for the legitimate interest of determining if you are eligible for membership of our Flight Club and, if you join our Flight Club, as necessary to perform our contract with you. |
Up to 1 year after your Flight Club membership has ended. |
| easyJet Plus Membership number and related information |
To perform our contract with you. |
9 months from the end of your membership. |
Managing corporate accounts
| Categories of personal data |
Lawful basis | How long we keep your data |
| Your name, email address and contact number, if you are your company’s corporate contact |
If you are a corporate travel buyer, we process your personal data for our legitimate interest of communicating with you about the product and services your company has bought. We will also send you marketing about our products and services (again, a legitimate interest) unless you have told us you do not want to receive this. |
6.5 years from the end date of the contract. If the contact is changed during the life of the contract, the details of the initial contact are deleted, and the personal data of the new contact is kept for 5 years from the date the contract was terminated. |
| Corporate Address |
||
| Gender |
||
| Job Title |
||
| Communication Permissions |
Analysing customer survey responses
| Categories of personal data |
Lawful basis | How long we keep your data |
| Your name and email address |
For the legitimate interest of improving our products and services, and customer service. | 4.5 years from receipt. |
| Country of residence |
||
| Flight number |
||
| Booking Reference |
||
| Your comments |
||
| Feedback Rating |
Investigating and dealing with disruptive and banned passengers
| Categories of personal data |
Lawful basis | How long we keep your data |
| Banned Passenger List and information related to a banned passenger investigation |
For the legitimate interest of ensuring the safety of our operations and protect the safety and security of our passengers and employees. If we are required by law to prevent you from flying, we process your data in accordance with this legal obligation. |
Information on incidents which do not lead to further investigation: 3 months from the date of the report. Banned Passenger List: for the duration of the ban, and then one month. Security and incident reports: 6.5 years from the date of the flight. |
Detecting, monitoring, and preventing fraud
| Categories of personal data |
Lawful basis | How long we keep your data |
| This depends on the suspected fraud, but typically includes name, contact and account details, IP address information, location information, booking and flight information, payment information, and related information. |
For the legitimate interest of monitoring, detecting and preventing fraud. | 6 years |
Responding to your requests to exercise your rights under data protection law
| Categories of personal data |
Lawful basis | How long we keep your data |
| Information needed to verify your identity and ensure you are the data subject in question |
To comply with our legal obligations under the data protection framework. |
Deleted once your request is fulfilled. |
| Information sought / processed as part of your request, which depends on the scope of your request. |
To comply with our legal obligations under the data protection framework. | 6.5 years from the date of the disrupted flight. |
Financial, audit and tax reporting
| Categories of personal data |
Lawful basis | How long we keep your data |
| External audit reports, which may contain your personal data |
For the legitimate interest of conducting external audits of our operations. |
7 years |
| Passenger names on reports on Air Passenger Duty exemption (infants & children) |
To comply with our legal obligation to exempt passengers from Air Passenger Duty |
7 years |
| Bank statements |
For the legitimate interest of confirming valid payments from customers. |
7 years |
| Banking reconciliations |
For the legitimate interest of confirming valid payments from customers. | 90 days after the case is closed or after the payment has been successfully made if this happens later. |
Responding to requests for disclosure of information (e.g. from the police)
| Categories of personal data |
Lawful basis | How long we keep your data |
| This depends on the nature of the request, but often includes name and contact information, financial / payment information, and travel information. |
For the legitimate interest of assisting in the prevention or detection of crime, where a request is not an obligation. To comply with our legal obligations, where a request is binding (e.g. made under statutory powers, or in response to a court order). |
1 year after information has been provided. |
Responding to media enquiries or issuing press releases
| Categories of personal data |
Lawful basis | How long we keep your data |
| It depends on the situation, but typically a customer’s name and flight details. |
For the legitimate interests of responding to a media enquiry, public relations, or providing customer service. | 6.5 years from the date of the press release or statement |