Last updated: July 2026
AA Travel Group ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our travel services, website, or contact us.
We may collect the following types of personal information:
We use your personal information to:
Your personal information is stored securely using Firebase (Google Cloud Platform). We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.
We may share your information with third-party service providers necessary to provide our services, such as hotels, transport companies, and payment processors. We do not sell your personal information to third parties for marketing purposes.
Under the UK General Data Protection Regulation (GDPR), you have the right to:
We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Booking-related information may be retained for a longer period for accounting and legal purposes.
Our website uses cookies to enhance user experience. You can manage your cookie preferences through your browser settings. Please refer to our Cookies Policy for more information.
Your information may be transferred to and processed in countries outside the European Economic Area. We ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Our services are not intended for children under 18. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date.
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us via WhatsApp at +44 790 000 7023 or through our website contact form.
Disclaimer: This privacy policy is provided as a template and should be reviewed by a qualified legal professional to ensure it meets your specific business requirements and complies with applicable data protection laws including GDPR.