1. Introduction
Airport Dimensions, a Collinson Group Ltd company (hereinafter referred to as "we", “our” and “us”) is committed to protecting and respecting your personal data. This privacy notice (“Privacy Notice”) explains how we handle any personal data that we collect and process when you use our website, services or products.
2. Individuals covered by this Privacy Notice
This Privacy Notice aims to inform you about how we collect, store, use and disclose information about you when you:
3. Who is responsible for your personal data?
Airport Dimensions Holdings Limited is a company registered in England and Wales with company number 11291574 and office in 3 More London Riverside, 5th Floor, London, SE1 2AQ, United Kingdom.
For the purposes of data protection legislation, we are the controllers of the personal data processed under this Privacy Notice. This means that Airport Dimensions determines the purposes for which, and the manner in which, your personal data is collected, used and handled when you interact with our websites, digital platforms, products, or Services.
The contact details for our Data Protection Team and information on your rights are set out in the ‘Your rights’ section below.
4. Categories of personal data we process or collect
We collect and process the personal data that you provide when interacting with us, either online or via email, mobile, phone or post. Such personal data may include the following:
5. Source of personal data
6. Purposes and legal basis for processing
We must have a legal basis in order to process your personal data. In most cases, that will be for us to provide the contracted Service. The table below sets out the purposes for which we use your personal data and our legal basis for doing so:
What we use your information for | Our legal basis for doing so |
Provide you with access to our website and/or mobile app to administer and deliver travel benefits, lounge access, loyalty services, and customer engagement programmes. | To perform our contract with you, or to take steps at your request prior to entering into a contract |
Verify your identity, eligibility and entitlement to Services. | To perform our contract with you; and for our legitimate interests in preventing fraud and ensuring Services are provided only to eligible individuals |
Provide customer support, respond to enquiries, manage complaints and resolve disputes. | To perform our contract with you; and for our legitimate interests in maintaining service quality and customer satisfaction |
Process transactions, manage billing arrangements with partners, reconcile usage data and prevent misuse of Services. | To perform our contract; and for our legitimate interests in financial administration and fraud prevention |
Comply with applicable legal, regulatory and governance obligations (including financial services regulation, audit, reporting, sanctions screening and law enforcement requests) | To comply with our legal obligations |
Manage corporate transactions, restructurings or asset transfers. | For our legitimate interests in business continuity and corporate governance |
Establish, exercise or defend legal claims. | For our legitimate interests and, where applicable, under Article 9(2)(f) in respect of special category data. |
Conduct fraud detection, prevention, security monitoring and investigations. | For our legitimate interests in protecting our business, partners and customers from fraud and unlawful activity; and to comply with legal obligations |
Improve, develop and enhance our Services, digital platforms, customer experience solutions and analytics capabilities (including usage analysis and service optimisation). | For our legitimate interests in improving our products and Services and enhancing user experience |
Conduct aggregated analytics, performance reporting and insights for our partners (in anonymised or aggregated form where possible). | For our legitimate interests in commercial reporting and business intelligence |
Send you service-related communications (including operational updates, changes to Services, security alerts and transactional communications). | To perform our contract with you and to comply with legal obligations |
Send marketing communications about our own or partners’ products and Services | Where you have provided consent; or where permitted under applicable laws based on our legitimate interests |
7. Personal data sharing and international transfers
7.1. We will not share your personal data with anyone else unless you agree to this, or such sharing is necessary to fulfil our contract with you, or we are legally allowed or required to do so. Moreover, your personal data will only be shared with selected organisations which comply with our security procedures and policies. Organisations we may share your personal data with include:
7.2. Some of those organisations may be based in a country outside the European Economic Area or where different data privacy laws apply. We will only transfer your personal data to that country after ensuring an equivalent level of protection of your rights and freedoms, or you have given us your consent to do so. Personal data collected and processed in accordance with this Privacy Notice is stored on secure servers currently located in the European Economic Area.
7.3. Where personal data is transferred outside the United Kingdom or European Economic Area, including to countries that are not recognised by the European Commission or United Kingdom Government as providing an adequate level of data protection, we implement appropriate safeguards to ensure the level of protection given to your personal data is not adversely affected by such transfers including at least one of the following:
You can obtain copies of these documents by emailing our Data Protection Team at the email address provided in Section 10 (‘Your Rights’) below.
8. Cookies and similar technologies
8.1. We use a consent management platform to enable you to manage your cookie preferences. Strictly necessary cookies are used to provide core website functionality. All other cookies, including analytics and advertising cookies, are deployed only with your consent in accordance with applicable electronic marketing laws.
8.2. We use cookies as identifiers on our website in order to improve your user experience by enabling our website to 'remember' you, either for the duration of your visit (using a 'session cookie') or for repeat visits (using a 'persistent cookie'). We may also use cookies to enable us to tailor our Services or products based, for example, on your location and/or browsing habits or to provide the website service to enable you to purchase our products. With your consent, we use third party identifier cookies to help tailor adverts to you by sharing with advertisers.
8.3. You can block or opt-out of non-essential cookies either using our cookie management tool or using your browser.
8.4. Please click here to read our Cookie Policy which explains what we do and how you can alter your cookie settings.
8.5. Strictly necessary cookies are used on the basis of our legitimate interests or to perform a contract.
8.6. All other cookies, including analytics, are used only with your consent.
8.7. You can manage or withdraw your consent at any time via our cookie banner or the settings link in the website footer.
9. Data retention
9.1. We will only keep your personal data for as long as it is needed for the purposes for which it was collected, and we will remove from our systems all personal data which is no longer required.
9.2. Retention periods vary depending on the type of Service provided. For example:
10. Your rights
If you would like to request access, review, update, rectify, or delete any personal data we hold about you, or exercise any other data subject right you can email us at dataprotectionteam@collinsongroup.com. Our Data Protection team will review your request and respond to you as quickly as possible.
Please note that we may still use any aggregated or anonymised data that does not identify any individual. We may also retain and use your information as necessary, for example, to comply with our legal obligations, resolve disputes, and enforce our agreements.
We respect all applicable local laws as they apply to data subject rights. For example, under the CCPA, California residents have certain rights regarding the personal data that businesses have about them. This includes the rights to request access or deletion of your personal data, as well as the right to direct a business to stop selling your personal data.
You also have the right to lodge a complaint with the relevant data protection Supervisory Authority. If residing in the UK, you can contact the Information Commissioner’s Office, if you believe your rights have not been respected. The contact details for the ICO are:
Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Tel: 0303 123 1113 Email: icocasework@ico.org.uk.
Your rights: | Meaning: |
The right to object to the processing | You have the right to object to the processing of your personal data in certain situations. |
The right to information | You have the right to be informed whether and to what extent we process your data. |
The right of access | Subject to certain exceptions you have the right to obtain a confirmation as to whether or not we process your personal data, and if we do, request access to your data. |
The right to rectification | If the personal data that we process is incomplete or incorrect, you have the right to request their completion or correction at any time. |
The right to deletion | Subject to certain exceptions, if you consider that we should stop processing some or all of your personal data, you have the right to request its deletion. However, there may well be reasons why an immediate deletion may not be possible (for example, where retention is required to meet legal or regulatory obligations). |
The right to restrict the processing | You have the right to request that we restrict the processing of your personal data in certain situations: If you contest the accuracy of your personal data, you may request that its processing is restricted while we verify its accuracy. If the processing of your personal data is considered unlawful, but you do not require the deletion of your personal data. If we no longer need the data for the purposes of its processing, but you need it for the establishment, exercise or defence of legal claims. If you object to our processing of your data based on our legitimate interests. |
The right to data portability | Where the processing takes place on the basis of your consent or contract, and is carried out by automated means, you have the right to request that we provide your personal data to you in a machine-readable format. |
Your rights in relation to automated decision making and profiling | You have the right to object to decisions based exclusively on the automated processing of your personal data. |
The right to withdraw your consent | If your personal data is processed on basis of your consent, you have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. |
11. Links to other websites
We may have links to other sites promoting our partners and clients. These links may take you to other companies who have their own privacy notice and our privacy notice will not cover their use of data. We encourage you to review the Privacy Notice of any linked site you visit.
12. Business transfers
We may choose to buy or sell assets and may share or transfer customer information in connection with the evaluation of these transactions. Also, if we, or our assets, are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, personal data could be one of the assets transferred to or acquired by a third party.
13. Security
We use appropriate technical, organisational and administrative security measures to protect any information we hold in our records from loss, misuse, and unauthorised access, disclosure, alteration and destruction. We have written procedures and policies which are regularly audited, and the audits are reviewed at senior level.
14. Information pertaining to children
Some of our Services may involve the processing of personal data relating to dependants or family members in connection with membership benefits. Where required by law, we rely on consent provided by a parent or legal guardian. If you are under 18, please do not attempt to register for our Services or send any personal data about yourself to us. If we learn that we have collected personal data from a child under age 18, we will delete that information as quickly as possible.
15. Automated decision making or profiling
We may use automated tools to assist in fraud detection, eligibility validation and risk monitoring. However, we do not make decisions based solely on automated processing which produce legal or similarly significant effects without human review.
16. Changes to our Privacy Notice
We keep our Privacy Notice under regular review, and we will make new versions available on our Privacy Notice page on our website. This Privacy Notice was last updated on 7 April 2026.
1. Introduction
Airport Dimensions, a Collinson Group Ltd company (hereinafter referred to as "we", “our” and “us”) is committed to protecting and respecting your personal data. This privacy notice (“Privacy Notice”) explains how we handle any personal data that we collect and process when you use our website, services or products.
2. Individuals covered by this Privacy Notice
This Privacy Notice aims to inform you about how we collect, store, use and disclose information about you when you:
3. Who is responsible for your personal data?
Airport Dimensions Holdings Limited is a company registered in England and Wales with company number 11291574 and office in 3 More London Riverside, 5th Floor, London, SE1 2AQ, United Kingdom.
For the purposes of data protection legislation, we are the controllers of the personal data processed under this Privacy Notice. This means that Airport Dimensions determines the purposes for which, and the manner in which, your personal data is collected, used and handled when you interact with our websites, digital platforms, products, or Services.
The contact details for our Data Protection Team and information on your rights are set out in the ‘Your rights’ section below.
4. Categories of personal data we process or collect
We collect and process the personal data that you provide when interacting with us, either online or via email, mobile, phone or post. Such personal data may include the following:
5. Source of personal data
6. Purposes and legal basis for processing
We must have a legal basis in order to process your personal data. In most cases, that will be for us to provide the contracted Service. The table below sets out the purposes for which we use your personal data and our legal basis for doing so:
What we use your information for | Our legal basis for doing so |
Provide you with access to our website and/or mobile app to administer and deliver travel benefits, lounge access, loyalty services, and customer engagement programmes. | To perform our contract with you, or to take steps at your request prior to entering into a contract |
Verify your identity, eligibility and entitlement to Services. | To perform our contract with you; and for our legitimate interests in preventing fraud and ensuring Services are provided only to eligible individuals |
Provide customer support, respond to enquiries, manage complaints and resolve disputes. | To perform our contract with you; and for our legitimate interests in maintaining service quality and customer satisfaction |
Process transactions, manage billing arrangements with partners, reconcile usage data and prevent misuse of Services. | To perform our contract; and for our legitimate interests in financial administration and fraud prevention |
Comply with applicable legal, regulatory and governance obligations (including financial services regulation, audit, reporting, sanctions screening and law enforcement requests) | To comply with our legal obligations |
Manage corporate transactions, restructurings or asset transfers. | For our legitimate interests in business continuity and corporate governance |
Establish, exercise or defend legal claims. | For our legitimate interests and, where applicable, under Article 9(2)(f) in respect of special category data. |
Conduct fraud detection, prevention, security monitoring and investigations. | For our legitimate interests in protecting our business, partners and customers from fraud and unlawful activity; and to comply with legal obligations |
Improve, develop and enhance our Services, digital platforms, customer experience solutions and analytics capabilities (including usage analysis and service optimisation). | For our legitimate interests in improving our products and Services and enhancing user experience |
Conduct aggregated analytics, performance reporting and insights for our partners (in anonymised or aggregated form where possible). | For our legitimate interests in commercial reporting and business intelligence |
Send you service-related communications (including operational updates, changes to Services, security alerts and transactional communications). | To perform our contract with you and to comply with legal obligations |
Send marketing communications about our own or partners’ products and Services | Where you have provided consent; or where permitted under applicable laws based on our legitimate interests |
7. Personal data sharing and international transfers
7.1. We will not share your personal data with anyone else unless you agree to this, or such sharing is necessary to fulfil our contract with you, or we are legally allowed or required to do so. Moreover, your personal data will only be shared with selected organisations which comply with our security procedures and policies. Organisations we may share your personal data with include:
7.2. Some of those organisations may be based in a country outside the European Economic Area or where different data privacy laws apply. We will only transfer your personal data to that country after ensuring an equivalent level of protection of your rights and freedoms, or you have given us your consent to do so. Personal data collected and processed in accordance with this Privacy Notice is stored on secure servers currently located in the European Economic Area.
7.3. Where personal data is transferred outside the United Kingdom or European Economic Area, including to countries that are not recognised by the European Commission or United Kingdom Government as providing an adequate level of data protection, we implement appropriate safeguards to ensure the level of protection given to your personal data is not adversely affected by such transfers including at least one of the following:
You can obtain copies of these documents by emailing our Data Protection Team at the email address provided in Section 10 (‘Your Rights’) below.
8. Cookies and similar technologies
8.1. We use a consent management platform to enable you to manage your cookie preferences. Strictly necessary cookies are used to provide core website functionality. All other cookies, including analytics and advertising cookies, are deployed only with your consent in accordance with applicable electronic marketing laws.
8.2. We use cookies as identifiers on our website in order to improve your user experience by enabling our website to 'remember' you, either for the duration of your visit (using a 'session cookie') or for repeat visits (using a 'persistent cookie'). We may also use cookies to enable us to tailor our Services or products based, for example, on your location and/or browsing habits or to provide the website service to enable you to purchase our products. With your consent, we use third party identifier cookies to help tailor adverts to you by sharing with advertisers.
8.3. You can block or opt-out of non-essential cookies either using our cookie management tool or using your browser.
8.4. Please click here to read our Cookie Policy which explains what we do and how you can alter your cookie settings.
8.5. Strictly necessary cookies are used on the basis of our legitimate interests or to perform a contract.
8.6. All other cookies, including analytics, are used only with your consent.
8.7. You can manage or withdraw your consent at any time via our cookie banner or the settings link in the website footer.
9. Data retention
9.1. We will only keep your personal data for as long as it is needed for the purposes for which it was collected, and we will remove from our systems all personal data which is no longer required.
9.2. Retention periods vary depending on the type of Service provided. For example:
10. Your rights
If you would like to request access, review, update, rectify, or delete any personal data we hold about you, or exercise any other data subject right you can email us at dataprotectionteam@collinsongroup.com. Our Data Protection team will review your request and respond to you as quickly as possible.
Please note that we may still use any aggregated or anonymised data that does not identify any individual. We may also retain and use your information as necessary, for example, to comply with our legal obligations, resolve disputes, and enforce our agreements.
We respect all applicable local laws as they apply to data subject rights. For example, under the CCPA, California residents have certain rights regarding the personal data that businesses have about them. This includes the rights to request access or deletion of your personal data, as well as the right to direct a business to stop selling your personal data.
You also have the right to lodge a complaint with the relevant data protection Supervisory Authority. If residing in the UK, you can contact the Information Commissioner’s Office, if you believe your rights have not been respected. The contact details for the ICO are:
Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Tel: 0303 123 1113 Email: icocasework@ico.org.uk.
Your rights: | Meaning: |
The right to object to the processing | You have the right to object to the processing of your personal data in certain situations. |
The right to information | You have the right to be informed whether and to what extent we process your data. |
The right of access | Subject to certain exceptions you have the right to obtain a confirmation as to whether or not we process your personal data, and if we do, request access to your data. |
The right to rectification | If the personal data that we process is incomplete or incorrect, you have the right to request their completion or correction at any time. |
The right to deletion | Subject to certain exceptions, if you consider that we should stop processing some or all of your personal data, you have the right to request its deletion. However, there may well be reasons why an immediate deletion may not be possible (for example, where retention is required to meet legal or regulatory obligations). |
The right to restrict the processing | You have the right to request that we restrict the processing of your personal data in certain situations: If you contest the accuracy of your personal data, you may request that its processing is restricted while we verify its accuracy. If the processing of your personal data is considered unlawful, but you do not require the deletion of your personal data. If we no longer need the data for the purposes of its processing, but you need it for the establishment, exercise or defence of legal claims. If you object to our processing of your data based on our legitimate interests. |
The right to data portability | Where the processing takes place on the basis of your consent or contract, and is carried out by automated means, you have the right to request that we provide your personal data to you in a machine-readable format. |
Your rights in relation to automated decision making and profiling | You have the right to object to decisions based exclusively on the automated processing of your personal data. |
The right to withdraw your consent | If your personal data is processed on basis of your consent, you have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. |
11. Links to other websites
We may have links to other sites promoting our partners and clients. These links may take you to other companies who have their own privacy notice and our privacy notice will not cover their use of data. We encourage you to review the Privacy Notice of any linked site you visit.
12. Business transfers
We may choose to buy or sell assets and may share or transfer customer information in connection with the evaluation of these transactions. Also, if we, or our assets, are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, personal data could be one of the assets transferred to or acquired by a third party.
13. Security
We use appropriate technical, organisational and administrative security measures to protect any information we hold in our records from loss, misuse, and unauthorised access, disclosure, alteration and destruction. We have written procedures and policies which are regularly audited, and the audits are reviewed at senior level.
14. Information pertaining to children
Some of our Services may involve the processing of personal data relating to dependants or family members in connection with membership benefits. Where required by law, we rely on consent provided by a parent or legal guardian. If you are under 18, please do not attempt to register for our Services or send any personal data about yourself to us. If we learn that we have collected personal data from a child under age 18, we will delete that information as quickly as possible.
15. Automated decision making or profiling
We may use automated tools to assist in fraud detection, eligibility validation and risk monitoring. However, we do not make decisions based solely on automated processing which produce legal or similarly significant effects without human review.
16. Changes to our Privacy Notice
We keep our Privacy Notice under regular review, and we will make new versions available on our Privacy Notice page on our website. This Privacy Notice was last updated on 7 April 2026.
