Last updated: December 2025
Flight Ready Programme – Autism, Privacy Notice
This privacy notice tells you what to expect when Heathrow Airport Ltd (Heathrow) collects personal information about you when you take part in the Flight Ready Programme – Autism. Heathrow is committed to protecting your personal information when you provide us with your personal information for this event.
Whenever you provide such information we are legally obliged to use your information in line with all applicable laws concerning the protection of personal data, including the UK General Data Protection Regulation (UK GDPR).W
When providing us with your personal information for this event, we will collect the following information about you:
*We will only collect this additional information should you be picked for this event. In order to facilitate the event, we will collect the above information for the purpose of raising a Temporary Airside Visitor Pass, to enable you to access various areas within Heathrow Airport. It will also allow Heathrow to better tailor the event to you and ensure we make any appropriate adjustments to make your time with us enjoyable.
Heathrow will use your personal data for several purposes including the following:
To provide you with information before the event, to gain your feedback after the event, and raise a Temporary Airside Visitor Pass. The lawful justification for collecting and using your personal data is that it is necessary to enable Heathrow to create a Temporary Airside Visitor Pass for you to access key areas that you will be taken to on the day of the event. We will only use the information provided where you have provided your consent or in line with the terms and conditions you have agreed to.
Failure to provide mandatory data fields denoted by a ‘*’ above will mean that we will not be able to offer you a place at the event.
Your information will be stored and managed by the following recipients in order to raise a Temporary Airside Visitor Pass, provide you with information before the event, and to gain your feedback after the event:
Information processed by Heathrow and our trusted third parties as identified within this Privacy Notice is done within the UK and the EEA.
Your information will be retained for a period of up to two months from the date of the event after which point it will be deleted.
Your information will be retained in a secure environment and access to it will be restricted according to the 'need to know' principle.
We will not transfer or disclose your personal information, other than as identified in this Privacy Notice, to our trusted third party suppliers, to the police, tribunals, courts, regulators, or other authorities to assist them with their investigations or requests or for us to report security incidents or suspected or actual unlawful acts and/or as may be otherwise required by law.
Under UK GDPR, you have the right to:
To exercise your rights please contact the Heathrow Data Protection Officer using the following contact details:
From time to time, we may process personal data from EU residents. Whenever applicable, we have appointed an EU Representative to ensure that we continuously process your personal data in compliance with applicable laws and without undermining your statutory rights.
You can contact our EU Representative at HeathrowEURepresentative@eversheds-sutherland.com and write EU Representative as subject matter. You may also contact our EU Representative per post mail at:
Eversheds Sutherland Netherlands B.V.
Attn. EU Representative Heathrow Airport
Fascinatio Boulevard 212
Floor 2A
3065 WB Rotterdam
Should you find our response unsatisfactory, you have the right to lodge a complaint with the supervisory authority – the Information Commissioner’s Office (ICO). You can find more information on the ICO website at https://ico.org.uk/concerns/ regarding the complaints process.
We will keep this privacy notice under regular review and we will place any updates here. At the start of this privacy notice we will tell you when it was last updated.
