< Go Back

Privacy

Policy

Last updated: 2/10/25

This Privacy Policy explains how Floan Ltd (“Floan”, “we”, “our”, “us”) collects, uses, shares, and protects your personal information when you use our website and booking services

By booking with Floan, you agree to the terms of this Privacy Policy.

1. Who We Are

Floan Ltd is registered in England & Wales under company number 10079805.

We act as:

Merchant of Record (MoR) for bookings,
Booking agent for airlines and travel providers, and
Credit broker for finance products provided by Snap.

We are a data controller for the information you provide to us.

2. Information We Collect

We may collect and process the following categories of personal data:

Booking details: names, passport information, dates of birth, contact details, travel dates, destinations.
Payment details: card number (processed securely via our payment processor), billing address, and transaction history.
Finance details: where you apply for instalments/loans, information required by Snap to assess creditworthiness.
Technical data: IP address, device type, browser information, cookies.
Communication data: records of emails, calls, or live chat with our support team.

3. How We Use Your Information

We use your information to:

Process and manage bookings.
Facilitate payments and act as Merchant of Record.
Share required details with airlines or service providers.
Share required details with Snap when you apply for finance.
Provide customer support and resolve disputes.
Comply with legal obligations, fraud prevention, and regulatory requirements.
Improve our services, website functionality, and security.

We will use your contact data for marketing only when you opt in and give us permission. You can opt out at any time.

3A. Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing your personal data. Depending on the purpose, we rely on one or more of the following legal bases:

Contractual necessity – When processing is necessary to enter into or perform a contract with you, including:
- Managing and fulfilling travel bookings
- Facilitating payments as Merchant of Record
- Acting as a credit broker for finance applications
Legal obligation – When processing is necessary to comply with the law, such as:
- Retaining financial and booking records for tax and accounting purposes
- Responding to lawful requests from regulators or authorities
Legitimate interests – When processing is necessary for our legitimate business interests, provided these are not overridden by your rights. Examples include:
- Fraud detection and prevention
- Analysing usage to improve our services and website
- Maintaining customer support records
Consent – When you have provided clear consent for us to process your data, for example:
- Receiving marketing communications
- Use of non-essential cookies (e.g., for analytics or advertising)

You may withdraw your consent at any time by contacting us at privacy@floan.co.uk or by using the unsubscribe link in our emails.

4. Sharing Your Information

We may share your information with:

Airlines and travel providers (to fulfil bookings).
Snap (the lender) if you apply for finance.
Payment processors (e.g., Stripe) to handle secure card transactions..
Regulators and authorities where legally required (FCA, HMRC, law enforcement).
Service providers such as IT hosting, analytics, and fraud-prevention services.

We will never sell your personal data to third parties.

5. Data Retention

We retain your data only for as long as necessary:

Booking records – up to 7 years (for legal and accounting purposes).
Finance/credit application data – as required by FCA regulations.
Communication logs – up to 3 years.

After this, your data will be securely deleted or anonymised.

6. Your Rights

Under UK GDPR, you have the right to:

Access a copy of the personal data we hold about you.
Correct inaccuracies in your data.
Request erasure of your data (where legally possible).
Restrict or object to processing.
Request data portability.
Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@floan.co.uk.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.

7. Data Security

We take appropriate technical and organisational measures to protect your data, including encryption, access controls, and secure storage.

8. International Transfers

Some airlines, service providers, or IT partners may be located outside the UK/EEA. Where data is transferred internationally, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

9. Cookies

Our website uses cookies to improve user experience and analytics. You can manage cookie settings through your browser at any time. For details, see our Cookie Policy.

10. Updates to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with a revised “last updated” date.

11. Contact Us

Floan Ltd

Email: support@floan.co.uk

Telephone: Contact Us