Privacy policy
How we collect, use and protect personal data.
Controller
Blacklist Aviation, Tallinn, Estonia. Email: sales@flyblacklist.eu. Company registration details will be added here once confirmed.
Data we process
When you submit a flight enquiry we process the details you provide: name, email address, phone number, route, dates, passenger count and any additional requests.
Once a flight is confirmed we also process the passenger details required by the operating air carrier.
Purposes and legal bases
Responding to enquiries and preparing quotes: pre-contractual steps and legitimate interest.
Arranging the flight and performing the agreement: performance of a contract.
Accounting and tax obligations: legal obligation.
Recipients
Data is shared only to the extent necessary to arrange the flight: with air operators, handling agents, ground transport partners and our IT and email service providers. We do not sell data or use it for third-party marketing.
Retention
Enquiry data is retained for up to three years from the last contact. Contract and accounting records are retained for the period required by law, generally seven years.
Analytics and cookies
We use cookies necessary for the website to function and general visit statistics. Statistics are used only in aggregate form to improve the website.
Your rights
You have the right to access your data, request correction or erasure, restrict processing, object to processing and receive your data in a portable format. Write to sales@flyblacklist.eu.
Complaints
If you believe your data is processed unlawfully, you may lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).
Policy updates
This privacy policy was last updated in January 2026.