Privacy Policy for ExperienceFlight.co.uk (RPDA Aviation Ltd)

At ExperienceFlight.co.uk, operated by RPDA Aviation Ltd (collectively referred to as "we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, and disclose your personal information in compliance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). By using our website and services, you agree to the collection and use of your information as described in this policy.

Information We Collect

Personal Information
When you purchase a voucher, make an inquiry, or interact with our website, we may collect personal information, including:

• Contact Information: Full name, email address, phone number, and billing address.

• Payment Information: Payment details provided during transactions are securely processed by our third-party payment providers. We do not store payment card details on our servers.

• Booking Details: Information related to your chosen air experience, including preferences, booking dates, and any specific requirements.

• Technical Data: Information automatically collected from your device, such as IP address, browser type, and usage data, to enhance user experience and improve our website performance.

• Sensitive Information
  We do not collect sensitive information, such as health data, unless specifically required by a Network Provider to assess suitability for an air experience. Any such information will be handled securely and in compliance with relevant legislation.

How We Use Your Information

We use your personal information for the following purposes:

• Provision of Services: To process voucher purchases, bookings, and to coordinate with our Network Providers to deliver the air experience.

• Customer Support: To communicate with you regarding your purchase, answer inquiries, and provide assistance.

• Transaction Processing: To process payments and manage your orders securely.

• Marketing and Updates: To send you information about new offers, promotions, and updates relevant to our services, where you have provided consent.

• Compliance and Legal Obligations: To comply with applicable laws, regulations, and legal requirements.

• Lawful Basis for Processing
  Under UK GDPR, we rely on the following lawful bases to process your data:

• Contractual Necessity: For activities essential to completing and managing your bookings and purchases.

• Legitimate Interests: For purposes such as improving our services, maintaining website security, and responding to inquiries.

• Consent: For marketing communications, where we seek your consent prior to sending promotional materials.

Sharing Your Information

Network Providers
To facilitate your air experience, we share only necessary information with the relevant Network Providers responsible for your booking. These providers are bound by confidentiality agreements and are prohibited from using your data for any purpose other than the fulfillment of your experience.

Third-Party Service Providers
We use trusted third-party service providers to assist with payment processing, data analytics, and website hosting. These providers have access to limited personal information strictly for the purpose of delivering their services and are contractually obligated to protect your data.

Legal Requirements
We may disclose personal information where required by law, such as in response to a court order or other legal process, or if we believe disclosure is necessary to protect our rights, ensure safety, or comply with regulatory requirements.

Data Security

Data Protection Measures
We employ robust security measures to protect your personal information from unauthorised access, alteration, or disclosure. Our website employs SSL encryption to safeguard data transmitted between your device and our servers. We also use firewall protection and secure servers to ensure data integrity.

Access Control
Access to your personal information is restricted to employees and authorised contractors who need it to provide services. All such personnel are bound by confidentiality agreements and data protection obligations.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. For example:

• Booking and Transaction Records: Retained for seven years for tax and legal purposes.

• Marketing Information: Retained until you unsubscribe from our marketing communications.

Once data is no longer needed, we securely dispose of or anonymise it in compliance with our data retention policy.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you.

• Right to Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure: Request deletion of your data, subject to legal and contractual obligations.

• Right to Restrict Processing: Request restriction of data processing in certain circumstances.

• Right to Data Portability: Request transfer of your data to another service provider.

• Right to Withdraw Consent: Withdraw consent for marketing or other consent-based processing at any time.

  To exercise your rights, please contact us using the details provided below.

Marketing Preferences

We may send you marketing communications regarding offers, services, or updates that may be of interest. You can opt out of these communications at any time by clicking the unsubscribe link in our emails or contacting us directly. We will not share your information with third parties for marketing purposes without your explicit consent.

Cookies and Tracking Technologies

Our website uses cookies to improve your browsing experience and collect usage information. Cookies are small text files stored on your device, helping us analyse site traffic and personalise content. For more information, please refer to our Cookie Policy, available on our website.

Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our practices or legal requirements. Any updates will be posted on our website, and we recommend reviewing this page periodically to stay informed.

Contact Us

For questions, concerns, or to exercise your rights under this Privacy Policy, please contact:

RPDA Aviation Ltd (ExperienceFlight.co.uk)
Email: info@ experienceflight.co.uk
Phone: 01792 712119
Address: Cambrian House Flying Club, Swansea Airport Fairwood Common, Swansea SA2 7JU