Privacy Policy

Who are we?

Reward Flight Finder Limited, a company registered in England and Wales with company number 11310410 and its registered office at International House, 12 Constance Street, London E16 2DQ (RFF, we or us) is committed to protecting and respecting your privacy.

What does this policy cover?

 This policy (together with our website terms of use, and any other documents referred to in them):

• Sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

• Explains how and why we collect and use your personal data.

• Explains how long we keep your personal data for.

• Explains when, why and with who we will share your personal data.

• Explains the effect of refusing to provide the personal data requested.

• Explains where we store your personal data and whether we transfer your data outside of the UK.

• Explains the different rights and choices you have when it comes to your personal data; and

• Explains how you can contact us.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.  By signing up to use our app or website you are accepting and consenting to the practices described in this policy.

Regarding the EU GDPR, the version of the General Data Protection Regulation as implemented by the United Kingdom (UK GDPR) and the Data Protection Act 2018 (Act), we act as a controller in relation to your personal data.

Information we may hold about you

We may collect and process the following data about you:

Registration Information:  This includes information you provide when you register to use our service, participate in discussion boards or other social media functions on our service.  It may include your name, address, email address and phone number, username, and any other information you provide.
 

Marketing Preferences:  You may give us information about you by filling in forms on our service, completing questionnaires, or by corresponding with us by phone, email or otherwise.  This includes your preferences in receiving marketing from us and any third parties connected with us. You or other users may provide us with information about you when you or they share a referral code. 

Identity Data:   It may include your name, address, email address and phone number, username, or similar identifier.
 

Financial Data:  Financial and credit card information
 

Transaction Data: Includes details about any transactions made by you.
 

Regarding each of your visits to our service, we may automatically collect the following information:

Technical Information, which includes the following:

• Internet protocol (IP) address used to connect your computer or mobile phone to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.

• Location data to determine your current location; some of our location-enabled services require your personal data for the feature to work;

• Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our service (including date and time); pages within our service you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number;

How is your personal data collected?

We will collect and process the following data about you:

Information you give us. This is information (including Registration, Identity, Financial, and Marketing and Communications Data) you consent to give us about you by registering, filling in forms, by corresponding with us (for example, by email or chat). And completing questionnaires. If you contact us, we will keep a record of that correspondence.

Information we receive from other sources including third parties and publicly available sources. 

We may work closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them. 

Device Data. Google Analytics or other software will be used to help us understand how our users interact with our service.  The information gathered from this service is anonymous but will ultimately help us shape a better user experience for our customers.

How do we use your personal data?

We will only use your personal data when the law allows us to. We will use your personal data where it is necessary in order for us to perform our contract with you, or necessary for our legitimate interests (or those of a third party), and your interests, rights and freedoms do not override those interests, or where we need to comply with a legal or regulatory obligation.

We will use your personal data in the following ways, on the legal basis that it is necessary for us to perform our contract with you and for our legitimate interests (or those of a third party), and that your interests, rights and freedoms do not override those interests:

• We will provide you with access to our service and the ability to register as a new user, including granting you access, allowing you to access all of the services we agree to provide to you.

• We will carry out any other obligations arising from the contract entered into between us and you, including processing payments, fees and any charges, and providing you with customer support.

• To enable you to participate in a prize draw, competition or complete a survey.

• We may send you direct marketing communications in relation to similar products or services that we think may be of interest to you (provided that you have an absolute right to opt-out of any of these communications at any time, including at the time of providing us your personal data or at any time thereafter); and

• We will use your personal data to regularly update and rectify any personal data we hold in relation to you and to notify you of any changes to our service or any other services.

We will get your consent before sending any third party direct marketing communications to you via email or text message. You have the right to withdraw consent at any time by contacting us.

In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. However, if we combine or connect anonymised data with your data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used by this privacy policy.

 

Disclosure of your information

We may share your personal information with any member of our company, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We may share your information with selected external third parties, including:

• Marketing providers, hosting providers, and other third party providers that we use for the purposes of carrying out our obligations and exercising our rights;

• Third parties where you ask us to send your referral code to them;

• HM Revenue & Customs, and any applicable regulator;

• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;

• If RFF or substantially all of its assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets; and

• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our end user agreement and other agreements, or to protect the rights, property, or safety of RFF, our customers, or others.

Third party links

Our service may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. Please note that these websites and any services that may be accessible through them have their own privacy policies and that we do not accept any responsibility or liability for these policies or for any personal data that may be collected through these websites or services, such as Contact and Location Data. Please check these policies before you submit any personal data to these websites or use these services.

Where we store your personal data

The data that we collect from you may be transferred to, and stored at, a destination outside the UK or the European Economic Area (EEA).  It may also be processed by staff operating outside the UK or the EEA, who work for us or for one of our suppliers.  Such staff may be engaged in, among other things, the processing of your payment details and the provision of support services.  By submitting your personal data, you agree to this transfer, storing or processing. If you are a UK citizen based in the UK or an EU citizen based in the EEA, then whenever we transfer your personal data out of the UK or the EEA (other than from the UK to the EEA), we will only transfer your personal data:

• To countries that have been deemed to provide an adequate level of protection for personal data by the European Commission;

• Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK; or

• If an appropriate safeguard has been put in place.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In particular:

• We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know;

• All personal data is stored on secure servers;

• Payment transactions will be encrypted using SSL technology; and We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. Unfortunately, the transmission of information via the internet is not completely secure.  Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our service, and any transmission is at your own risk.  Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. 
  Where we have given you (or where you have chosen) a password which enables you to access certain parts of our service, you are responsible for keeping this password confidential.  We ask you not to share a password with anyone.

Retention of your information

We retain your personal data for as long as necessary to fulfil the purposes we collected it for. In determining the appropriate retention periods, we take into account the following criteria:

• Our legal and regulatory obligations,

• Any relevant industry standards or codes,

• The nature and sensitivity of the personal data and

• The potential risk of harm from any unauthorized or unlawful processing, accidental loss, destruction of or damage to the personal data.

In some circumstances, we will anonymize your data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.</.p>

If you do not use your account for a period of [2] years then we will treat the account as expired and your data will be archived and may be deleted.

Your Rights

You have the right to ask us not to process your personal data for marketing purposes.  You can exercise your right to prevent such processing at any time by checking certain boxes on the forms we use to collect your data.  You can also exercise the right at any time by contacting us at help@rewardflightfinder.com

You have various statutory rights in relation to your personal data. You have the right to:

• Object to direct marketing communications at any time.

• Request and obtain access to your personal data.

• Rectification or erasure of your personal data, in certain circumstances.

• Object to or restrict the processing of your personal data in certain circumstances.

• Have your personal data stored in a manner in which it is portable from the environment in which it is stored by us to another environment.

• Request the transfer of your personal data to a third party.

• Request restriction of processing of your data; and

• Withdraw your consent at any time (where we are relying on consent to process your data)

To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us at help@rewardflightfinder.com.

However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

We reserve the right to request that you provide evidence of your identification if you ask us to carry out any steps in relation to your personal data.

Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues.

Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email.  Please check back frequently to see any updates or changes to our privacy policy.

Contact

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to help@rewardflightfinder.com

Cookies

Please see our Cookie Policy page for details of cookies used by us. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the Services may become inaccessible or not function properly.

A cookie is a small information file that is sent to your computer, mobile or other device when you visit a website, and it will recognize your device on future visits. These types of files do several different jobs, such as remembering your preferences and chosen items, improving your service experience and ensuring that the adverts or offers you see online are more relevant to you.

You may delete or block these cookies, but if you do, then these features will stop working, and some of our online services may not work as intended.

The cookie-related information is not used to identify you personally, and the pattern data is fully under our control (except in the case of the anonymous analytics). These cookies are used only for the purposes as described here.

We use cookies in the following ways:

• To ensure that content from our service is presented in the most effective manner for you and for your computer.

• To administer our service and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.

• To improve our service to ensure that content is presented in the most effective manner for you and for your computer;

• To allow you to participate in interactive features of our service, when you choose to do so;

• As part of our efforts to keep our service safe and secure;

• To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you; and

• To make suggestions and recommendations to you and other users of our service about goods or services that may interest you or them.

  Cloudflare Turnstile

• We use Cloudflare Turnstile to help protect our website from bots, spam, and other malicious activity. Turnstile may process certain technical signals, such as your IP address, browser and device information, User-Agent, TLS fingerprint, and information relating to the website and Turnstile sitekey.
   
• These signals are used by Cloudflare to help distinguish legitimate users from automated or malicious traffic and to protect the security of our website. Cloudflare may also process these signals to improve the effectiveness of its Turnstile bot-detection capabilities.
   
• For more information about how Cloudflare processes information through Turnstile, please see Cloudflare's Turnstile Privacy Addendum:
  Cloudflare Turnstile Privacy Addendum