Privacy policy

How we collect, use and protect personal data.


Controller

Blacklist Aviation, Tallinn, Estonia. Email: sales@flyblacklist.eu. Company registration details will be added here once confirmed.

Data we process

When you submit a flight enquiry we process the details you provide: name, email address, phone number, route, dates, passenger count and any additional requests.

Once a flight is confirmed we also process the passenger details required by the operating air carrier.

Purposes and legal bases

Responding to enquiries and preparing quotes: pre-contractual steps and legitimate interest.

Arranging the flight and performing the agreement: performance of a contract.

Accounting and tax obligations: legal obligation.

Recipients

Data is shared only to the extent necessary to arrange the flight: with air operators, handling agents, ground transport partners and our IT and email service providers. We do not sell data or use it for third-party marketing.

Retention

Enquiry data is retained for up to three years from the last contact. Contract and accounting records are retained for the period required by law, generally seven years.

Analytics and cookies

We use cookies necessary for the website to function and general visit statistics. Statistics are used only in aggregate form to improve the website.

Your rights

You have the right to access your data, request correction or erasure, restrict processing, object to processing and receive your data in a portable format. Write to sales@flyblacklist.eu.

Complaints

If you believe your data is processed unlawfully, you may lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

Policy updates

This privacy policy was last updated in January 2026.