How we collect, use and protect your personal information — written in plain English, because privacy shouldn't need a lawyer.
Our data protection team answers every request within 30 days — usually much faster.
Email the DPOrwandairflights.com is a UK-based travel agency specialising in flight bookings, rescheduling and refunds from the United Kingdom to destinations across Africa, the Middle East and beyond. We are registered in England and Wales, with our head office at 123 Aviation House, 45 Travel Way, London, UK.
We take your privacy seriously. This policy sets out exactly what we do with your data, why we do it, and the choices and rights you have. By using our website or booking with us, you agree to the practices described here.
We only collect what we need to plan, book and support your travel. This falls into three groups:
Passport & identity documents: when a booking requires them, we collect passport details strictly for ticketing and airline requirements. They are stored encrypted, shared only with the operating airline and immigration authorities where legally required, and deleted after your trip unless retention rules require otherwise.
Under UK GDPR, every use of your data must have a lawful basis. We rely on:
When you book with us, we must process your (and fellow passengers') details to deliver the tickets and services you've paid for.
For fraud prevention, service improvement and secure website operation — always balanced against your rights and expectations.
For marketing emails and non-essential cookies. You can withdraw consent at any time — it's as easy as clicking unsubscribe.
Where laws require us to keep or share information — for example, tax records and advance passenger information for international flights.
Cookies are small text files stored on your device. We use a minimal set — strictly necessary ones keep the site working; analytics ones (only with your consent) help us understand what to improve. We do not use advertising or cross-site tracking cookies.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| session_id | Essential | Keeps you logged in during a booking session and remembers form steps | Session |
| csrf_token | Essential | Protects forms against cross-site request forgery | Session |
| cookie_consent | Essential | Remembers your cookie preferences | 12 months |
| _analytics_uid | Analytics | Anonymised, aggregated usage statistics (no profiling) | 12 months |
You can control or delete cookies through your browser settings at any time. Blocking essential cookies may affect parts of the booking flow.
We never sell your data. We share it only with the parties needed to deliver your travel, under strict agreements:
Because we book international travel, your data may be transferred outside the UK — for example to airlines based in Rwanda, the UAE or Qatar. Where this happens, we protect it using UK IDTA addenda, adequacy regulations, or the destination country's recognised equivalence, ensuring your data receives substantially the same protection it enjoys in the UK.
We keep personal data only as long as necessary:
Under UK GDPR you have enforceable rights over your data — and exercising them is free:
Request a copy of the personal data we hold about you.
Correct inaccurate or incomplete information.
Ask us to delete your data where there's no legal reason to keep it.
Ask us to pause processing while a dispute is resolved.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or opt out of marketing.
To exercise any right, email privacy@rwandairflights.com or write to our DPO. We respond within one month — usually within days — and may ask for ID verification to protect your data from misuse.
We apply bank-grade protections: TLS encryption for all data in transit, encryption at rest for stored documents, PCI-DSS-compliant payment processing, role-based access controls, and regular staff training. In the unlikely event of a breach affecting your rights, we will notify you and the ICO without undue delay, as the law requires.
Our website is intended for adults. We do collect children's details when they travel — but only as part of a booking made by a parent or guardian, and only the minimum the airline requires. If you believe a child's data has been provided to us without appropriate consent, contact us and we will delete it promptly.
We may update this policy as our services or the law evolve. The "last updated" date at the top always shows the current version. For significant changes that affect you directly (not just legal housekeeping), we'll also notify account holders by email before the changes take effect. Previous versions are available on request.
Reach our Data Protection Officer directly — no call centres, no ticket queues.
You also have the right to complain to our supervisory authority, the Information Commissioner's Office (ICO) — ico.org.uk · 0303 123 1113. We'd appreciate the chance to fix things first, but the choice is always yours.
Book with confidence — transparent fares, flexible tickets, and a privacy policy written for humans.