Computer Misuse Act 1990 prohibits unauthorised access to a computer system. Using someone else’s details to access their booking very likely doesn’t pass the ‘authorised’ test.