Mir Travel
Privacy

What we hold, and why.

In plain English first, with the formal wording underneath. If anything here is unclear, ask us — that is a fault in the notice, not in you.

Last updated

2026-10-28

What we collect

In short

The details an airline needs to issue a ticket, and the details we need to reach you about it. Traveller names, dates of birth, passport numbers where the route requires them, your email and phone number, and a record of what you booked and paid.

We also record technical information your browser sends — IP address, device and browser type, and the pages you visited — which we use to keep the site working and to spot fraudulent bookings. Formally, we process identity, contact, travel-document, booking and payment, and technical data. We do not ask for health information; if you tell us about a medical or accessibility need so the airline can help, we pass it to the airline for that purpose only.

Why we need it

In short

To perform the contract you enter into when you book: issuing the ticket, telling you about schedule changes, and handling refunds. Some of it we hold because the law requires it — tax records, and the passenger data some destinations demand.

  • Lawful basis

    Contract

    Booking, ticketing, changes

  • Lawful basis

    Legal obligation

    Tax records, border data

  • Lawful basis

    Legitimate interests

    Fraud checks, site security

Who we share it with

In short

The airline you are flying with and the reservation system that holds the booking, plus our payment provider and the services that send our emails, run the site, run our live chat and tell us when something breaks. We do not sell your details, and we do not pass them to advertisers.

The operating airline
Traveller names, dates of birth, passport data
The global distribution system
The booking record itself
Our email provider
Your email address and the booking details in the emails we send you
Our payment provider
Your card details, entered on its page, and the amount paid
Our hosting provider
Everything above, stored on servers it runs for us
Our error-monitoring service
Technical error reports, with personal details removed before they are sent

How long we keep it

In short

Booking records — traveller details, contact details and what was paid — are kept so we can handle changes, refunds and our tax records.

We keep booking and payment records, with the traveller details in them, for at least six years after the end of the financial year in which the booking was made, because UK tax and company law require it, and for as long as an open refund, complaint or claim needs them.

Cookies

In short

The site sets two cookies, both needed for it to work. Our live chat, run by tawk.to, sets its own cookies (twk_idm_key, TawkConnectionTime and twk_uuid_…) and keeps the conversation in your browser's storage.

We count visits with Plausible Analytics, which sets no cookies and stores nothing in your browser. Booking references and other personal details are removed from page addresses before they are sent.

LANG
Remembers the language you chose
XSRF-TOKEN
Protects the booking form from requests made by other sites

The site's own cookies are strictly necessary for it to work, so under the Privacy and Electronic Communications Regulations 2003 they need no consent. You can block them in your browser, but searching and booking will then stop working.

Your rights

In short

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it once we are no longer required to keep it. Write to us and we will reply within one month.

[email protected]

If you think we have handled your data badly, tell us first — we would rather fix it. You also have the right to complain to the supervisory authority:

the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.

Contacting us

In short

Write to us about anything in this notice at the address below.

[email protected]

We are the data controller for the personal data described in this notice; our registered details are under Data controller. We reply to every request about your data within one month.