Privacy Policy

Who we are

The controller of the personal information described in this policy is:

You can contact us about privacy questions or requests at partners@flagship.travel.

What we collect

If you subscribe to Flagship news. We collect the email address you submit in the footer subscription form. We also record that the form was submitted from the footer, the consent wording and version shown when you subscribed (currently 2026-09-10), and the submission timestamp supplied by our form provider. Forminit also processes technical information associated with the submission, such as IP address, browser/user agent, referring site, and approximate location derived from the IP address, to operate and protect its form service.

If you apply for a job. Our careers form may ask for information such as your name, email address, phone number, location, work authorization, languages, professional links, CV, employment or professional background, and anything else you choose to include in your application.

We primarily collect this information directly from you. Where relevant to a recruitment process, we may also receive or review professional information from recruiters, referrals, references, or publicly available professional sources such as LinkedIn.

If you visit the site. Our website host and related infrastructure providers may process standard technical information needed to deliver and secure the site, such as IP address, browser type, device information, requested pages, timestamps, and server or security logs.

We do not use this information for advertising or behavioral profiling.

Why we use it

We use subscription information to send occasional Flagship Group news that you have asked to receive. We rely on the consent you give by clicking Subscribe. You may withdraw that consent at any time by contacting partners@flagship.travel.

We use application information to:

• assess your suitability for a role
• communicate with you about your application
• manage and document our recruitment process
• take steps at your request in connection with potential employment
• maintain appropriate records of hiring decisions
• consider you for future roles where you have separately asked us to do so

For applicants in the UK, European Economic Area, or other jurisdictions where similar concepts apply, we generally rely on our legitimate interests in recruiting and managing our businesses and, where relevant, taking steps at your request before entering into an employment relationship.

Where you separately ask us to keep your details for future opportunities, we rely on your consent for that additional use. You can withdraw that consent at any time by contacting partners@flagship.travel.

We use technical and security information as necessary to operate, maintain, troubleshoot, and protect the website and our systems.

We do not sell your personal information.

We do not use applicant or website information for third-party advertising.

Who else sees it

Access to personal information is limited to people and organizations that reasonably need it for the purposes described in this policy.

Application information may be shared with:

• relevant employees, recruiters, and hiring managers within Flagship
• subsidiaries and affiliates within the Flagship group where reasonably necessary to evaluate an application, recruit for a role, or consider an applicant for another opportunity they have agreed to be considered for
• Forminit, which receives and stores careers form submissions and uploaded files on our behalf
• our website hosting and infrastructure providers
• professional advisers such as legal, accounting, compliance, or other advisers where reasonably necessary
• regulators, courts, law enforcement, or other parties where disclosure is required or permitted by law

Footer subscription information is received and stored on our behalf by Forminit, our form provider. It may also be provided to a mailing service we use to send Flagship Group news.

Service providers that process personal information on our behalf are expected to handle it under appropriate contractual and confidentiality obligations.

International transfers

Flagship operates internationally. As a result, personal information may be accessed or processed by members of the Flagship group, service providers, or advisers in countries other than the country where you live or applied for a role, including the United States, the United Kingdom, and countries in the European Economic Area.

Where applicable data protection law requires additional safeguards for an international transfer, we use recognized legal mechanisms and protections appropriate to the transfer. Depending on the circumstances, these may include adequacy decisions, approved contractual protections such as Standard Contractual Clauses, UK transfer mechanisms, or other lawful transfer safeguards.

Our form provider, Forminit, hosts form submission data, user data, attachments, and backups on AWS infrastructure in Ireland in the European Union.

How long we keep it

We do not keep personal information longer than reasonably necessary for the purposes described in this policy.

For recruitment:

• if you are not selected for a role, we generally retain your application for 12 months after the relevant recruitment process concludes
• if you separately ask us to keep your details for future opportunities, we may retain your application for up to 24 months from your consent or latest meaningful contact
• if you join Flagship, relevant recruitment information may become part of your employee record and will then be handled under the applicable employee-record retention rules

We may retain particular information for longer where reasonably necessary to comply with law, establish or defend legal claims, respond to an investigation, or satisfy another legal or regulatory obligation.

We generally retain subscription information while you remain subscribed and review it periodically. If you withdraw consent by contacting partners@flagship.travel, we will stop using your email address for Flagship Group news and retain only a minimal suppression record where needed to respect your request.

Where no such reason applies, information is deleted after the applicable retention period.

If you would like us to delete your information sooner, contact partners@flagship.travel. We will consider the request in accordance with applicable law.

Cookies and similar technologies

We keep this simple.

We do not use advertising cookies, advertising pixels, cross-site tracking, or behavioral profiling on flagship.travel.

We use privacy-focused website analytics provided through our hosting platform to understand page visits and high-level interactions with the site. We do not send names, email addresses, phone numbers, application responses, or uploaded files to analytics.

The site may use technical or security technologies that are necessary to operate, deliver, and protect the service.

If we introduce advertising or other nonessential tracking technologies in the future, we will update this policy and, where required, provide an appropriate consent mechanism before those technologies are used.

Your rights

Depending on where you live and the law that applies to you, you may have rights relating to your personal information.

These may include rights to:

• request access to personal information we hold about you
• ask us to correct inaccurate or incomplete information
• request deletion of your information
• ask us to restrict certain processing
• object to processing based on legitimate interests
• receive certain information in a portable format
• withdraw consent where we rely on consent
• complain to your local data protection authority

These rights are subject to applicable legal conditions and exceptions.

To make a privacy request, contact partners@flagship.travel.

We will respond in accordance with the timelines required by applicable law. For requests subject to the UK GDPR or EU GDPR, this will normally be within one month, subject to any lawful extension.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Our careers form provider, Forminit, states that it uses encryption for data in transit and at rest and restricts access to production systems using least-privilege controls.

No online system can be guaranteed to be completely secure, but we aim to use safeguards appropriate to the nature of the information we process.

Changes to this policy

We may update this Privacy Policy from time to time.

When we do, we will update the Last updated date at the top of the page. If a change materially affects how we handle personal information, we may provide additional notice where appropriate.