Privacy Policy

1. Who we are

NXT.DEALS is a travel comparison and booking platform operated by FXN Holdings Limited, a company registered in England and Wales (company number 16134139, VAT GB500441452), with its registered office at 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. For the purposes of UK GDPR and the EU GDPR, we are the data controller of the personal data we collect about you through this website.

You can reach our privacy team at privacy@nxt.deals.

2. The data we collect

We collect the following categories of personal data:

• Identity data — full name, date of birth, gender, nationality, and passport / ID document details where required by an airline or accommodation supplier.
• Contact data — email address, phone number, and billing address.
• Booking data — search queries (origin / destination, dates, passenger numbers), the offers you view, the bookings you make, ancillaries (bags, seats, meals), special assistance requests, loyalty programme numbers, and associated traveller details you provide for everyone on the booking.
• Payment data — card details and billing information. Card numbers are collected and tokenised by our payment processor; we do not store full card numbers on our own systems.
• Technical data — IP address, device type, browser, operating system, language preference, and referring URL.
• Usage data — pages visited, features used, search history, and interactions with the site.
• Communications — the content of messages you send us via email or our contact forms.

We do not knowingly collect special category data (health, religion, etc.) unless you voluntarily provide it as part of a special assistance request, in which case we process it only to fulfil that request and pass it to the relevant supplier.

3. How we use your data

We use your personal data to:

• Process your travel search, present results, and complete bookings.
• Pass passenger and payment information to airlines, accommodation providers, and their technology partners so the travel can be delivered.
• Send booking confirmations, e-tickets, vouchers, and itinerary updates.
• Handle changes, cancellations, refunds, and customer support enquiries.
• Detect and prevent fraud, comply with anti-money-laundering rules, and meet legal and regulatory obligations.
• Improve the website and our services through aggregated analytics and product research.
• Send marketing communications, where you have consented or where we have a legitimate interest and you have not opted out.

4. Lawful basis for processing

We rely on the following lawful bases under UK / EU GDPR:

• Performance of a contract — to provide the booking service you have requested.
• Legitimate interests — to operate, secure and improve the site, prevent fraud, and (where permitted) market our services to existing customers.
• Legal obligation — to comply with tax, accounting, anti-fraud, and aviation security requirements.
• Consent — for non-essential cookies and for direct marketing where consent is required.

5. Who we share your data with

We share personal data with:

• Airlines and accommodation suppliers who will actually provide the travel services you book. They process your data as independent controllers under their own privacy policies.
• Duffel Technology Limited — our travel infrastructure partner who routes searches and bookings to suppliers (see Section 6).
• Payment processors — including Duffel Payments and its underlying processor Stripe, who handle card authorisation, settlement, and fraud screening.
• IT, hosting, analytics, and email delivery providers acting as our processors under contractual safeguards.
• Professional advisers such as lawyers, auditors, and insurers, where reasonably required.
• Government and regulatory authorities, including customs, immigration, and tax authorities, where required by law (for example, Advance Passenger Information).

We do not sell your personal data.

6. Bookings powered by Duffel

Flight and accommodation searches and bookings made through NXT.DEALS are delivered via the Duffel platform, operated by Duffel Technology Limited (company number 11188295), 3rd Floor, 100 Clifton Street, London, EC2A 4TP, United Kingdom. When you search or book, the data needed to complete the transaction — including passenger details, contact details, payment details, and ancillary selections — is transmitted to Duffel and on to the relevant airline or accommodation supplier.

Duffel acts as our processor for the technical delivery of the service and, in some cases, as an independent controller (for example, when providing payment processing, fraud screening, or its own travel agency services). Duffel's own privacy practices are described at duffel.com/privacy-policy.

The travel itself is provided directly by the airline or accommodation supplier under their own terms and conditions of carriage / supply. Those suppliers are independent controllers of the data they receive and you should consult their privacy notices for details of how they handle it.

7. International transfers

Because travel is international, your personal data will often be transferred outside your country of residence — for example, to an airline based in another country, to a hotel at your destination, or to a supplier's reservation system. Where we transfer personal data outside the UK or EEA, we rely on either an adequacy decision by the UK / European Commission, or standard contractual clauses with appropriate supplementary safeguards.

8. Data retention

We retain personal data only for as long as we need it for the purposes set out in this policy, including to meet legal, accounting, tax, and dispute-resolution requirements. Booking records are typically retained for at least six years after the date of travel for tax and accounting purposes. Search and analytics data is retained in aggregated or pseudonymised form for shorter periods.

9. Your rights

Subject to the conditions in applicable data protection law, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (the "right to be forgotten").
• Restrict or object to processing.
• Request portability of your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office at ico.org.uk.

To exercise any of these rights, email privacy@nxt.deals. We respond to verified requests within one month.

10. Cookies and tracking

We use cookies and similar technologies to make the site work, remember your search preferences, measure usage, and (with your consent) deliver relevant marketing. You can manage non-essential cookies through your browser settings or via our cookie banner. Disabling certain cookies may affect site functionality, such as remembering search filters or staying logged in.

11. Security

We use technical and organisational measures designed to protect your personal data, including encryption in transit (TLS), access controls, and tokenisation of card details by our payment processor. No system is perfectly secure, however, and we cannot guarantee absolute security.

12. Children

NXT.DEALS is not directed at children under 16. We do not knowingly collect personal data directly from children. Bookings that include child or infant passengers are made by an adult, who is responsible for providing the relevant traveller details on their behalf.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page shows when it was most recently revised. Material changes will be notified through the site or by email where appropriate.

14. How to contact us

For any privacy-related question or to exercise your rights, please contact:
FXN Holdings Limited
61 Bridge Street, Kington, HR5 3DJ, United Kingdom
Email: privacy@nxt.deals