Privacy and data protection
Privacy Policy
This Privacy Policy explains how Airdelay collects, uses, stores, shares, and protects personal data when you use our website, submit a flight compensation claim, create an account, upload documents, sign claim documents, provide payment details, contact us, or subscribe to marketing communications.
Last updated: 4 August 2026
1. Who we are
Airdelay is the service name used by Airdelay Danışmanlık Limited Şirketi, a limited company registered in Türkiye. The company’s MERSİS number is 0010239499600001, and its registered office is Meşrutiyet Mah. Karanfil Sok. Zafir İş Merkezi No: 4, İç Kapı No: 91, Çankaya/Ankara, Türkiye.
For the processing activities described in this Privacy Policy, Airdelay Danışmanlık Limited Şirketi is the data controller unless another organization independently determines the purposes and means of processing for its own activities.
For privacy questions or requests, contact us through the Contact page, by email at [email protected], or by telephone at +1 857 305 6367.
2. Scope of this policy
This policy applies when you visit airdelay.net, submit or manage a claim, create or use an account, use the claim status checker, upload documents, provide signatures, provide payment details, respond to additional information requests, contact us, or subscribe to marketing communications.
This policy also applies to information provided about other passengers, such as family members, children, or travel companions included in the same claim. If you provide personal data about another person, you must have permission, legal authority, or another lawful basis to provide that data to Airdelay. Each adult passenger may be asked to provide their own authorization and signature.
3. Personal data we collect
The personal data we collect depends on how you use Airdelay and what stage your claim is in. We may collect and process the categories below.
Identity data
Full name, passenger names, date of birth where needed, nationality where needed, country of residence where needed, signature, and identity information shown in uploaded documents.
Contact data
Email address, phone number if provided, account contact details, communication preferences, and contact history.
Flight and claim data
Airports, airlines, flight numbers, travel dates, route, disruption type, delay length, cancellation notice, rerouting details, missed connection details, claim status, and claim reference numbers.
Booking data
Booking reference, ticket number, reservation details, boarding pass information, travel confirmation details, passenger list, and airline correspondence.
Document data
Uploaded files such as boarding passes, tickets, booking confirmations, airline messages, passport or ID documents, authorization documents, signatures, and supporting evidence.
Payment data
Bank account holder name, IBAN or other account details, SWIFT/BIC where needed, bank country, account currency, compensation transfer records, and payment administration details.
Account data
Email-based login or account credentials, password-protected account information, claim dashboard activity, status views, account settings, and account-related preferences.
Communication data
Messages you send to us, claim updates, support requests, service confirmations, additional information responses, document requests, payment requests, and communication history.
Technical data
IP address, browser and device information, approximate location derived from technical data, cookie choices, usage and error logs, claim and form submission timestamps, document and acceptance versions, and security-related records.
4. Identity documents, signatures, and payment details
Flight compensation claims may require information that is more sensitive than ordinary website data. This can include passport or ID documents, signatures, authorization materials, airline correspondence, and bank or other payment details.
Airdelay requests and uses these details only where they are reasonably needed for claim review, claim authorization, airline requirements, identity or passenger verification, document preparation, payment administration, record keeping, fraud prevention, or related legal and administrative purposes.
Passport, ID, and authorization documents
We may process passport or identity documents, signed authorization, electronic signatures, and claim documents where they are needed to review, prepare, support, submit, or verify your claim.
Bank and payment details
Payment details are requested only when a claim reaches the payment stage or when they are otherwise needed for compensation transfer or related payment administration. We do not request bank details for general browsing or basic claim information pages.
Sensitive identity, authorization, or payment details should only be submitted through the relevant Airdelay claim flow when requested. Do not send passports, signatures, or bank details through general contact messages unless we specifically direct you to a secure claim page.
5. How we collect personal data
We may collect personal data directly from you, from people acting on your behalf, from passengers included in a claim, from claim-related documents, or automatically when you use the website.
- When you submit a flight compensation claim or provide claim details.
- When you create an account, log in, view your claim dashboard, or check claim status.
- When you upload documents, sign authorization, accept Terms, or respond to additional information requests.
- When you provide bank or other payment details for compensation transfer.
- When you contact us through the Contact page or another approved communication channel.
- When you subscribe to marketing communications or manage communication preferences.
- When airlines, claim-related parties, or passengers provide information connected with a claim.
- When website security, necessary cookies, consented analytics, logs, or similar technologies collect technical data.
6. How we use personal data
We use personal data only where we have a lawful and relevant purpose. These purposes may include:
Claim assessment
To assess whether your flight disruption may qualify for compensation or further review.
Claim preparation
To prepare, organize, support, submit, and manage claim-related information and documents.
Authorization documents
To generate, store, verify, and use claim authorization, assignment, power of attorney, or similar claim documents where needed.
Communication
To send claim updates, account and verification messages, document requests, additional-information requests, payment requests, delivery notices, and customer support replies.
Payment administration
To request and verify payment instructions when a claim reaches the payment stage, arrange compensation transfer, maintain payment records, and resolve failed or returned transfers.
Security and fraud prevention
To protect the website, accounts, claim forms, uploaded documents, communications, and claim processes from misuse.
Legal and compliance
To comply with legal obligations, respond to lawful requests, maintain records, resolve disputes, and enforce agreements.
Website improvement
To understand website performance, improve forms, prevent errors, and maintain a reliable service experience.
Optional marketing
To send updates, passenger-rights guides, or marketing emails only where you have agreed or where the law allows it.
7. Legal bases for processing
Where laws such as the GDPR, UK GDPR, KVKK, or similar data protection rules apply, Airdelay relies on appropriate legal bases for processing personal data. The legal basis can depend on the type of data and the reason it is processed.
| Purpose | Examples of personal data | Possible legal basis |
|---|---|---|
| Providing claim assistance services | Identity, contact, flight, claim, booking, passenger, document, and authorization data | Performance of a contract or steps taken before entering into a service relationship |
| Reviewing and supporting claim documentation | Tickets, boarding passes, airline messages, passport or ID documents, signatures, authorization documents | Performance of a contract, steps requested before entering into a contract, legal obligations, legitimate interests, or establishment, exercise, or defense of legal claims, as applicable |
| Generating and using claim documents | Claim form data, passenger details, signature, date, claim ID, route, flight details, booking reference, authorization records | Performance of a contract, steps requested before entering into a contract, legitimate interests, legal obligations, and legal claims where applicable |
| Payment administration | Bank or payment details, account holder name, currency, payment and transfer records | Performance of a contract, legal obligations, and legitimate interests in secure and accurate payment administration |
| Service communication | Email address, claim status, information requests, support messages | Performance of a contract and legitimate interests |
| Marketing communications | Email address, name, consent status, unsubscribe records, communication preferences | Consent or another permitted marketing basis under applicable law |
| Website security and fraud prevention | Technical data, security logs, usage information, form submission records | Legitimate interests and legal obligations where applicable |
| Legal compliance and dispute handling | Claim records, communication records, payment records, consent records, account records | Legal obligations, legitimate interests, and establishment, exercise, or defense of legal claims |
Under Türkiye’s KVKK, processing may rely on the legal grounds available under Articles 5 and 6, including where processing is necessary for a contract, a legal obligation, the establishment, exercise, or protection of a right, or Airdelay’s legitimate interests without harming fundamental rights and freedoms. Where the GDPR or UK GDPR applies, the corresponding legal bases may include contract, legal obligation, legitimate interests, legal claims, and consent where consent is genuinely required.
8. Claim documents and authorization records
When you submit a claim, accept the Terms of Service, and provide a signature where requested, Airdelay may generate and store claim-related documents based on the information you provide. These may include a Claim Authorization, Limited Power of Attorney, Assignment Agreement, Authority to Act, claim letter, payment request, claim summary, or other claim-related document.
These documents may include your name, signature, claim ID, booking reference, flight number, flight date, route, disruption type, passenger information, submitted date, and other details needed to identify and handle the claim.
Airdelay may use these documents to submit the claim to the airline, request compensation, respond to airline questions, verify authorization, maintain evidence of your acceptance, and manage payment or dispute records.
We may keep records showing when you accepted the Terms of Service, when you submitted the claim, the wording and version of the acceptance presented to you, the version of the authorization text, and the signature or claim document generated. This helps protect both you and Airdelay if an airline or another party later questions the authorization or contractual record.
9. Fellow passengers, shared bookings, and minors
If you include another passenger in a claim, you confirm that you have permission or legal authority to provide their personal data, travel details, and documents to Airdelay. Each adult passenger may be required to review and sign their own claim authorization.
If you include a child or minor passenger, you confirm that you are the parent, legal guardian, or otherwise legally authorized to act for that child, or that you have obtained the required permission from the parent or legal guardian.
Airdelay may request additional proof of authority, guardian details, signatures, identity documents, or supporting information before processing a claim for another passenger or a minor.
10. Marketing communications
Airdelay may send marketing communications only where you have agreed to receive them or where applicable law allows us to do so. Marketing consent is separate from claim submission and is not required to use the claim service.
- You can unsubscribe from marketing communications at any time.
- Unsubscribing from marketing does not stop important service messages about your claim, account, documents, payment process, security, or legal notices.
- We may keep a limited record of your marketing consent, unsubscribe request, or communication preference to respect your choice.
- Marketing emails may include Airdelay updates, passenger-rights guides, claim-related educational content, or service announcements.
11. Who we share data with
We do not sell your personal data. We may share personal data only where needed for the purposes described in this policy, where legally required, where you have authorized the sharing, or where sharing is reasonably necessary to protect rights, security, or service integrity.
Airlines and claim-related parties
Airlines involved in your claim, airline claims departments, airline representatives, payment handlers, complaint bodies, or other parties needed to verify, submit, handle, or resolve the claim.
Professional partners
Administrative, translation, accounting, audit, compliance, or professional advisers where necessary to review, prepare, submit, manage, support, account for, or protect a claim or Airdelay’s legal interests.
Technology and operations providers
Trusted providers for website hosting, private document storage, backups, email delivery, security, authentication, form processing, monitoring, analytics used with the required choices, and other technical operations under appropriate confidentiality and security commitments.
Payment and financial providers
Payment, banking, transfer, fraud-prevention, or financial service providers where needed to arrange compensation transfer, verify payment details, keep payment records, or handle payment issues.
Authorities and lawful requests
Courts, regulators, public authorities, law enforcement, or other parties where disclosure is required by law or necessary to protect rights, safety, security, or legal interests.
Business transfers
If Airdelay is involved in a merger, restructuring, financing, sale, transfer, or similar business transaction, personal data may be shared where necessary and legally permitted.
Service providers are expected to process personal data only for the purposes needed to provide their services to Airdelay and not for their own unrelated marketing purposes.
12. International transfers
Airdelay may use service providers, partners, airlines, or infrastructure located in different countries. This means personal data may be processed or stored outside your country of residence, including outside the European Economic Area, the United Kingdom, or Türkiye.
Where required by applicable law, we use an available lawful transfer mechanism and appropriate safeguards. Depending on the applicable regime, these may include an adequacy decision, standard contractual clauses, binding company rules, written undertakings or contractual protections recognized under KVKK, transfer assessments, explicit consent where legally valid and appropriate, or another permitted mechanism.
International transfer may also be necessary when the airline, payment provider, service provider, passenger, or claim-related party is located in another country.
13. How long we keep data
We keep personal data only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law. The applicable period depends on the claim status, limitation and dispute periods, tax and accounting duties, payment records, security needs, fraud-prevention needs, account status, and valid user requests. We periodically review whether continued retention is necessary.
| Data category | Retention approach |
|---|---|
| Claim and flight records | Kept while the claim is active and afterwards for a reasonable period needed for disputes, legal claims, audits, accounting, fraud prevention, or compliance. |
| Uploaded documents and authorization materials | Kept only for as long as needed for claim handling, airline requirements, verification, legal record keeping, dispute protection, or payment administration. |
| Bank and payment details | Kept for payment administration, audit, accounting, dispute, fraud-prevention, and compliance purposes, then deleted, restricted, or archived where appropriate. |
| Account data | Kept while your account is active and for a reasonable period after closure where needed for records, security, disputes, legal obligations, or service continuity. |
| Marketing data | Kept until you unsubscribe or withdraw consent, plus limited records needed to respect your opt-out choice. |
| Technical and security data | Kept for limited periods appropriate for security, fraud prevention, troubleshooting, analytics, spam prevention, and website maintenance. |
| Contact and support messages | Kept for as long as needed to answer the request, maintain service records, investigate issues, or protect legal and operational interests. |
If we no longer need personal data for active use but must keep it for legal, accounting, dispute, or compliance reasons, we may restrict access to it and retain it only for those limited purposes.
14. How we protect data
We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures are selected according to the nature of the data and the risks involved, especially for identity documents, signatures, claim files, account data, and payment details.
Access and confidentiality
We limit access to personal data to people and service providers who need it for legitimate business, claim, security, payment, or compliance purposes.
Security controls
We use safeguards appropriate to the risks, which may include encrypted transmission, access controls, private document storage, authentication controls, logging, backups, software maintenance, and restrictions on access to claim and payment data.
No website, storage system, or internet transmission is completely secure. If you believe your personal data, claim documents, payment details, or account has been affected by a security issue, please contact us immediately through our Contact page.
15. Your privacy rights
Depending on your country, region, and applicable law, you may have rights over your personal data. These rights may include the right to access, correct, delete, restrict, object to, or receive a copy of your data, and the right to withdraw consent where processing is based on consent.
GDPR and UK GDPR rights
You may have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and complaint to a supervisory authority.
KVKK rights
If Türkiye’s KVKK applies, Article 11 may give you rights to learn whether your data is processed, request information, learn the purpose and recipients, request correction, deletion or destruction where conditions are met, request notification of certain actions to recipients, object to outcomes produced exclusively by automated systems, and claim compensation for unlawful processing.
How to make a request
To exercise privacy rights, use our Contact page or email [email protected]. We may request information reasonably necessary to verify identity and authority before completing a request.
Limits to requests
Some rights may be limited where we need to keep information for legal claims, regulatory obligations, fraud prevention, accounting, security, or completion of a claim-related service.
If you are not satisfied with how we handle your privacy request, you may have the right to complain to a relevant data protection authority in your country or region.
16. Cookies and similar technologies
Airdelay may use cookies, pixels, local storage, logs, and similar technologies to operate the website, keep sessions secure, remember preferences, prevent spam or abuse, understand website performance, measure marketing effectiveness, and improve user experience.
Some cookies are necessary for the website to work correctly. Others may be used for analytics, performance, marketing measurement, or preference management where permitted by law or your choices.
You can control cookies through your browser settings and, where required, through the cookie consent options on the website. Blocking necessary cookies may affect how parts of the website, account area, forms, or claim services work. More information is available in our Cookie Policy.
17. Third-party links
Airdelay may link to third-party websites, resources, payment pages, airline pages, or other external services. Those third-party websites and services have their own privacy notices and practices. Airdelay is not responsible for the privacy practices of websites or services that we do not control.
18. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, security practices, company details, or data processing activities. The updated version will be posted on this page with a new “Last updated” date.
If a change is material and applicable law requires direct notice, we may notify users by email, account message, website notice, or another appropriate method.
19. Contact us
If you have questions about this Privacy Policy, want to exercise privacy rights, or want to contact us about personal data, contact Airdelay Danışmanlık Limited Şirketi through the Contact page or by email at [email protected].
Formal privacy request details
Registered electronic notification address (KEP): [email protected]. This address is reserved for formal electronic notifications and is not a customer-support inbox.
