Heathrow Expansion privacy notice

Last updated: 27 March 2026

This privacy notice tells you what to expect when Heathrow Airport Ltd (Heathrow) collects personal information about you for Heathrow Expansion.

Whenever you provide such information we are legally obliged to use your information in line with all applicable laws concerning the protection of personal data, including the UK General Data Protection Regulation (UK GDPR).

What information will we collect about you?

In connection with the preparation and submission of the Development Consent Order (DCO) and associated land referencing and property activities for Heathrow Expansion, we may collect and process personal data relating to individuals with an interest in land or rights affected by the proposed development.This information may include but is not limited to:

  • Name
  • Postal address
  • Email address
  • Telephone number(s)
  • Details of land ownership, who is in occupation, or interests in land (including rights and tenancies)
  • Correspondence and records of engagement relating to land and property matters
  • Payment information
  • Survey information

This information is collected for the purposes of compiling the Book of Reference, the Land & Rights Tracker, and other documents required to be submitted as part of the DCO process and any further Heathrow Expansion project work.

Personal data may be obtained directly from you, from publicly available sources (such as His Majesty’s Land Registry (HMLR)), or from third parties where relevant to confirm land interests such as ownership or occupation.

How will Heathrow use the information it collects about me?

Personal data collected for the DCO and Heathrow Expansion will be used only where necessary and proportionate, including but not limited to the following purposes:

  • To identify landowners, occupiers, and parties with an interest in land directly or indirectly affected by the proposed development
  • To prepare and maintain statutory DCO documentation
  • To engage with affected parties in relation to land access, rights, acquisition, or compensation matters
  • To comply with legal and regulatory obligations under the Planning Act 2008 and associated legislation
  • To deliver the work required as part of the DCO process and any further Heathrow Expansion project work.

Your personal data will not be used for marketing purposes.

The following lawful basis may apply as justification for collecting and using your personal data as it is necessary for the submission of the DCO application and for the purpose of the Heathrow Expansion project:

  • It is necessary for compliance with our legal obligations OR
  • Where we have a legitimate interest OR
  • You have given consent for a specific usage of your data OR
  • Where we have a contractual requirement to process your data

Personal data collected for the DCO process and the Heathrow Expansion project may be shared, where necessary, with trusted third-party suppliers involved in delivering the DCO, IT and data hosting providers, HM Land Registry and its affiliates, and relevant central government and regulatory bodies. There may be occasions where we need to transfer your data outside of the UK and European Economic Area (EEA). Where your personal information is transferred outside the EEA or the UK because we are using a service provider in a third country, we will implement safeguards so that your personal information continues to be protected.

How long will Heathrow keep my information?

Heathrow will retain personal data in line with statutory DCO requirements and for the purposes of the Heathrow Expansion project, and for a reasonable period thereafter to manage any subsequent DCO processes or related claims. Data retention arrangements will be kept under regular review.

We will not transfer or disclose your personal information, other than as identified in this Privacy Notice, to our trusted third party suppliers, to the police, tribunals, courts, regulators, or other authorities to assist them with their investigations or requests or for us to report security incidents or suspected or actual unlawful acts and/or as may be otherwise required by law.

What rights do I have over my personal data?

Under UK GDPR, you have the right to:

  • Access your personal data by making a subject access request
  • Rectification, erasure or restriction of your information where this is justified and contrary to Heathrow’s requirement to obtain and submit the data for DCO requirements and for the purposes of the Heathrow Expansion project
  • Object to the processing of your information where this is justified
  • Data portability

To exercise your rights please contact the Heathrow Data Protection Officer using the following contact details:

By Post - Data Protection Officer, Heathrow Airport Limited, The Compass Centre, Nelson Road, Hounslow, Middlesex TW6 2GW

By Email - privacy@heathrow.com

What if I find your response unsatisfactory?

If you would like to make a data privacy-related complaint, please contact us at privacy@heathrow.com

Should you find our response unsatisfactory, you have the right to lodge a complaint with the supervisory authority – the Information Commissioner’s Office (ICO). You can find more information on the ICO website at https://ico.org.uk/concerns/ regarding the complaints process.

Changes to this privacy notice

We will keep this privacy notice under regular review and we will place any updates here. At the start of this privacy notice we will tell you when it was last updated.