Last updated: 31 July 2025
Heathrow and its group companies are committed to ensuring the privacy of all information you provide when you attend a Heathrow event.
This privacy notice outlines how Heathrow Airport Limited (Heathrow) and its group companies will process, store and safeguard your personal data (including photographs/videos) in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
When you attend a Heathrow event, we will collect the following information about you:
Heathrow collects information prior to, during and after the event, about you via your digital email and Heathrow’s media and communications team that may be present during the event. This may include collecting unique online identifiers such as IP addresses, which are numbers that uniquely identify a specific computer or other network device on the internet. For more information, see our section on ‘Privacy & Cookies’ below.
The lawful justification for collecting and using your personal data is that, by attending a Heathrow event, you have provided your consent for us to collect the data in order to use for our corporate communications and marketing.
You understand that you are providing consent for photographs/videos being used and any other reproductions, modifications or adaptations of the photograph/video for its commercial or non-commercial purposes.
You confirm that I am at least 18 years old. If you are under 18, you confirm that you have consent, as required by this privacy notice, from your parent or legal guardian to attend a Heathrow event and consent to video filming and photography of your image, and the uses as outlined below.
Heathrow may use your personal data for several purposes across several platforms, including the following:
Your information will be stored in the Heathrow Content Library system. The Heathrow Content Library system is managed by the following recipients in order to deliver our corporate communications and marketing:
Access to the content library is provided to select third parties who may use your images, however, your images will only be shared on the platforms listed above for which you have consented. All photographs/videos taken are the property of HAL. Copyright of the photograph/video remains with HAL.
Photos and videos may be made available to the public for promotional uses. You agree and understand that websites and other online media can be seen throughout the world, and not just in the United Kingdom where UK law applies. Once images are in the public eye, or shared on social media, Heathrow has no control over their use, retrieval, or deletion.
You understand that you will not be able to claim any benefits or payments for the use of the photographs or videos.
We will not transfer or disclose your personal information, other than as identified in this Privacy Notice, to our trusted third party suppliers, to the police, tribunals, courts, regulators, or other authorities to assist them with their investigations or requests or for us to report security incidents or suspected or actual unlawful acts and/or as may be otherwise required by law.
Information processed by Heathrow and our data processors as identified within this Privacy Notice is done within the UK and the EEA. When Heathrow processes your information, it is processed only in the UK and is not moved or transferred overseas. If third parties use an image/s for their own purposes, they may transfer this information outside of the UK.
Your information will be retained for a period of five years on our content capture platform. After this point, the consent will automatically expire, and we will not re-use any images or videos after this time and remove any material from our platforms. Please note printed materials, websites and social media may still be in circulation after the five year period. Your information will be deleted after five years.
Your information will be retained in a secure environment and access to it will be restricted according to the 'need to know' principle.
To exercise your rights please contact the Heathrow Data Protection Officer using the following contact details:
By Email to - privacy@heathrow.com
From time to time, we may process personal data from EU residents. Whenever applicable, we have appointed an EU Representative to ensure that we continuously process your personal data in compliance with applicable laws and without undermining your statutory rights.
You can contact our EU Representative at HeathrowEURepresentative@eversheds-sutherland.com and write EU Representative as subject matter. You may also contact our EU Representative per post mail at:
Eversheds Sutherland Netherlands B.V.
Attn. EU Representative Heathrow Airport
Fascinatio Boulevard 212
Floor 2A
3065 WB Rotterdam
Should you find our response unsatisfactory, you have the right to lodge a complaint with the supervisory authority – the Information Commissioner’s Office (ICO). You can find more information on the ICO website at https://ico.org.uk/concerns/ regarding the complaints process.
A new era has begun for the UK and EU now that the Brexit transition period is over. From time to time we may process personal data from EU residents. Whenever applicable, we have appointed an EU Representative to ensure that we continuously process your personal data in compliance with applicable laws and without undermining your statutory rights.
You can contact our EU Representative at HeathrowEURepresentative@eversheds-sutherland.com and write EU Representative as subject matter. You may also contact our EU Representative per post mail at:
Eversheds Sutherland Netherlands B.V.
Attn. EU Representative Heathrow Airport
Fascinatio Boulevard 212
Floor 2A
3065 WB Rotterdam
Alternatively, you can set your browser to restrict, block or delete cookies from Heathrow and our third-party advertisers, or any other website. Each browser is different, so check the 'Help' menu of your particular browser to learn how to change your cookie preferences. If you choose to disable all cookies, we cannot guarantee the performance of our websites and some features may not work as expected.
We will keep this privacy notice under regular review and we will place any updates here. At the start of this privacy notice we will tell you when it was last updated.
