Effective date: 2026-08-10
Product version: 0.1.0
Who controls your information
Huang Yiyong, trading as DelayDesk, is the controller for the processing described in this notice.
Address: No. 376, China Harbour View Road, Kowloon City District, Hong Kong, Hong Kong SAR, China. Privacy contact: support@delaydesk.com.
What the checker processes
The eligibility checker keeps the selections you make in the memory of your browser tab so it can display an indicative result. The current code does not send those selections to DelayDesk, write them to local storage or cookies, or append them to an external link. Reloading or closing the page clears the current answers.
The result is general information. It is not a decision with legal or similarly significant effect, and it is not used to profile you.
Data we may receive
| Activity | Data and purpose | Legal basis, legitimate interest and retention |
|---|---|---|
| Hosting and security | IP address, browser or device information, requested URL, referrer, timestamp and security events, used to deliver and protect the site. | Legitimate interests. The specific interests are delivering requested pages, diagnosing failures, preventing abuse and protecting the availability and integrity of the service. DelayDesk does not maintain a separate application-log store. Cloudflare applies its active service settings and published privacy terms to provider-level access and security data. |
| Website corrections and support email | Your email address, name, message, attachments and message metadata, used to investigate and answer a website correction, accessibility report or support question. | Legitimate interests. The specific interests are maintaining accurate passenger-rights information, correcting faults and responding to people who contact the service. Support emails are retained for up to 12 months after the last interaction, unless longer retention is required for a legal dispute |
| Privacy-rights email | Your identity and contact details, request, correspondence and evidence reasonably needed to locate records and answer a data-protection request. | Legal obligation under applicable data-protection law. Records needed to demonstrate how the request was handled are kept for Support emails are retained for up to 12 months after the last interaction, unless longer retention is required for a legal dispute. |
| Partnership email | Business contact details, proposal, due-diligence material and correspondence, used to evaluate and respond to a proposed commercial relationship. | Steps requested before entering a contract when you are the prospective contracting party. Otherwise, legitimate interests in evaluating and documenting responsible commercial relationships. Support emails are retained for up to 12 months after the last interaction, unless longer retention is required for a legal dispute |
| External affiliate referral | A named provider may receive its referral identifier and normal web-request data after you deliberately follow a labelled external link. Checker answers are not included. | The provider acts under its own privacy notice. There are no active affiliate links in the current build. |
Where legitimate interests apply, the operator considers whether the stated operational need can be met with less data, limits access and retention, and gives particular weight to the fact that people may be seeking help after a disrupted journey. You may object as described below.
Do not email booking references, passports, identity documents, boarding passes, bank details or payment-card information. If sensitive claim material is sent despite this warning, it will not be used to assess the claim and should be securely deleted in line with the operator's incident and retention process.
Providers, recipients and locations
- Hosting: Cloudflare, Inc. (Cloudflare Workers); data region: Cloudflare global network; processing locations follow Cloudflare's Privacy Policy and Data Processing Addendum.
- Email: Porkbun Email Forwarding and the operator's configured destination mailbox provider.
- International transfers: Technical data and support emails may be processed in Hong Kong and in locations used by Cloudflare and the email provider, subject to their applicable contractual safeguards
Cookies and similar technologies
The current repository does not enable non-essential analytics, advertising cookies, local-storage tracking, pixels or user profiling. Essential infrastructure may still process request logs as described above. See the cookie and storage notice for the current inventory and the rule for any future change.
Your rights
Depending on the processing and its legal basis, you may have rights to access, correct, erase, restrict or receive your personal data, and to withdraw consent where consent is used.
How to make a data protection complaint
Email support@delaydesk.com with the subject “Data protection complaint”. Explain the processing you are concerned about, the relevant date or period, what you would like the operator to do and any previous correspondence. Include only information reasonably needed to investigate.
The operator will acknowledge receipt within 30 days. The 30-day period is for acknowledgement, not a promised resolution deadline. It will take appropriate steps to investigate without undue delay, keep you informed where necessary and communicate the outcome, reasons and any action taken.
You may complain to the Information Commissioner's Office after raising the matter with DelayDesk or while it is being handled; you do not have to wait for DelayDesk to finish before contacting the ICO. The ICO publishes a current guide for making a data protection complaint and guidance on the organisation's complaint-handling duties.
Children
DelayDesk is not designed to collect children's personal data. The checker does not ask for age or identity. A parent or guardian should handle any airline claim and avoid sending a child's documents to DelayDesk.
Changes to this notice
Material changes will receive a new effective date and be recorded in product updates. This notice must be updated before adding a contact form, claim upload, account, non-exempt analytics or advertising measurement.