1. Introduction

AeroDesign.uk respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, contact us, request a quotation, place an order, make a payment, arrange a return or warranty claim, or otherwise interact with us.

For UK data-protection law, the data controller is:

AeroDesign.uk
Legal name: AeroDesign.uk
Email: sales@aerodesign.uk
Telephone: +447307209313

In this policy, “we”, “us” and “our” refer to AeroDesign.uk.

2. Information we collect

The personal information we collect depends on how you interact with us. It may include:

• your name, business name and job title;
• your billing address, delivery address and contact details;
• your email address and telephone number;
• information contained in enquiries, quotations and correspondence;
• details of products viewed, ordered, returned or submitted for warranty assessment;
• order numbers, invoices, transaction records and payment status;
• aircraft, installation or equipment information that you provide when seeking technical or warranty support;
• product model numbers, serial numbers, photographs and fault descriptions;
• delivery, tracking and proof-of-delivery information;
• account details, preferences and marketing choices;
• technical information such as your Internet Protocol address, browser, device, operating system and website activity; and
• information collected through cookies and similar technologies.

We ask that you do not provide sensitive personal information unless it is necessary for a specific request and we have asked you to provide it.

3. Payment information

Card payments are processed securely by Stripe or another payment provider identified at checkout. We do not normally receive or store your complete payment-card number, card security code or other full card credentials. Those details are submitted directly to the payment provider and processed in accordance with its own privacy and security terms.

We may receive limited payment information, such as the cardholder’s name, card type, the final digits of the card number, payment status, transaction reference and billing address.

For certain high-value orders, we may accept payment by bank transfer after issuing an invoice. Where payment is made by bank transfer, we may process the account name, payment reference, transaction amount and other information shown on our bank statement. We do not ask customers to send online-banking passwords, PINs or security credentials.

4. How we obtain personal information

We may obtain personal information:

• directly from you when you contact us, request a quotation, place an order or submit a support request;
• automatically when you use our website, including through cookies and server logs;
• from our payment, e-commerce, website-hosting and fraud-prevention providers;
• from DHL and other delivery or logistics providers;
• from MGL Avionics, distributors, authorised service organisations or manufacturers when dealing with product support, warranty or repair matters;
• from installers, engineers or businesses acting on your instructions; and
• from publicly available business records where appropriate.

Where another person places an order or contacts us on your behalf, that person should have the authority to provide your information to us.

5. How we use your information

We may use personal information to:

• respond to enquiries and provide product information;
• prepare quotations and process orders;
• verify payments and prevent fraudulent transactions;
• issue invoices, receipts and credit notes;
• arrange delivery, tracking and proof of delivery;
• provide customer service and technical support;
• manage returns, repairs, warranty claims and product recalls;
• communicate with MGL Avionics, distributors, repair centres or other relevant manufacturers;
• maintain product and serial-number records;
• comply with accounting, tax, product-safety and legal obligations;
• establish, exercise or defend legal claims;
• protect our website, systems, customers and business against misuse or fraud;
• improve our website, products and customer service;
• maintain business and financial records; and
• send marketing communications where permitted by law.

We will not sell your personal information to third parties.

6. Our lawful bases

UK data-protection law requires us to have a lawful basis for processing personal information. Depending on the circumstances, we may rely on the following bases.

Contract

We process information where it is necessary to take steps at your request before entering into a contract or to fulfil a contract with you. This includes preparing quotations, processing orders, accepting payments, delivering products and handling returns.

Legal obligation

We process certain information where necessary to comply with legal duties, including accounting, taxation, consumer-protection, product-safety and regulatory requirements.

Legitimate interests

We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights. These interests may include:

• operating and improving our business;
• providing customer and technical support;
• preventing fraud and protecting our systems;
• keeping appropriate records;
• communicating with manufacturers and service organisations;
• dealing with complaints and legal claims; and
• marketing similar products or services to existing customers where legally permitted.

Consent

We may rely on your consent for optional marketing communications, non-essential cookies or other activities where consent is required. You may withdraw your consent at any time. Withdrawal will not affect processing already carried out lawfully before consent was withdrawn.

7. Who we share information with

We may share personal information only where reasonably necessary with:

• Stripe and other payment-processing or fraud-prevention providers;
• banks and financial institutions;
• DHL and other delivery, freight, customs or logistics providers;
• website-hosting, ecommerce, email, cloud-storage and information-technology providers;
• accountants, insurers, solicitors and other professional advisers;
• MGL Avionics, authorised distributors, repair centres, manufacturers and technical-support providers;
• government departments, regulators, law-enforcement agencies, courts or tax authorities where required by law;
• a buyer, investor or professional adviser in connection with a possible sale, restructuring or transfer of all or part of our business; and
• other organisations where you instruct or authorise us to share information.

These organisations may act as our processors, independent controllers or joint controllers, depending on their role.

We require service providers acting on our behalf to handle personal information securely and only for authorised purposes.

8. Shipping and customs

To fulfil an order, we may provide DHL or another agreed carrier with information such as your name, company name, delivery address, telephone number, email address, order reference and relevant customs information.

For international shipments, information may also be shared with customs authorities, customs brokers, overseas delivery partners and other organisations involved in importing and delivering the goods.

Tracking information may be provided directly by the carrier. The carrier may process your information under its own privacy policy.

9. Warranty, repair and technical support information

When you make a warranty, repair or technical-support request, we may collect information about the product, its serial number, purchase date, installation, aircraft, reported fault and troubleshooting already undertaken.

We may share relevant information with MGL Avionics, its distributors, authorised technicians, repair centres or other manufacturers where necessary to assess a fault, confirm warranty eligibility, arrange a repair or replacement, or provide technical guidance.

Please avoid including unrelated personal or confidential information in photographs, log files, configuration files or other materials submitted for technical support.

10. Marketing communications

We may send you information about products, services or related updates where you have consented or where another lawful basis permits us to do so.

You may opt out at any time by:

• using the unsubscribe link in a marketing email; or
• contacting us at sales@aerodesign.uk.

Opting out of marketing will not prevent us from sending essential communications concerning an order, payment, delivery, warranty claim or other existing business relationship.

We do not use your information for third-party advertising without your consent.

11. Cookies and similar technologies

Our website may use cookies and similar technologies to:

• enable essential website and checkout functions;
• remember preferences;
• maintain security and prevent fraud;
• understand how visitors use the website; and
• measure or improve website performance.

Essential cookies may be used where they are necessary for the website or service requested by you. Non-essential analytics, advertising or preference cookies will be used only where permitted and, where required, after you have given consent.

Further information about the cookies we use, their purposes and how long they remain active should be provided in our Cookie Policy or cookie-preference tool.

You can change your cookie choices through the website’s cookie settings. You can also control cookies through your browser, although disabling essential cookies may prevent parts of the website or checkout from working correctly.

12. International transfers

Some organisations that support our website, payment processing, communications, product support or other services may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take the appropriate steps required by UK data-protection law. These may include:

• transferring information to a country covered by UK adequacy regulations;
• using an approved international data-transfer agreement or addendum;
• relying on another legally recognised safeguard; or
• relying on a permitted exception in limited circumstances.

You may contact us for further information about the safeguards used for a particular transfer.

13. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, warranty, product-safety and reporting requirements.

Typical retention periods may include:

• enquiry and quotation records: 2 years;
• customer, order and invoice records: normally at least six years after the end of the relevant financial year or transaction, where required for tax and accounting purposes;
• payment records: for the period necessary to reconcile transactions and meet legal or fraud-prevention requirements;
• delivery records: for the period necessary to confirm delivery and deal with claims;
• warranty, repair and product serial-number records: for the warranty period and a reasonable period afterwards, or longer where needed for product-safety or legal reasons;
• marketing records: until you withdraw consent or object, subject to keeping a minimal suppression record so that we can respect your preference; and
• website and security logs: 2 years.

The exact retention period may vary depending on the nature of the information, our legal obligations and whether the information is required in connection with a complaint, dispute, safety issue or legal claim.

14. How we protect your information

We use appropriate technical and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

These measures may include:

• access controls and password protection;
• secure payment processing through specialist providers;
• encrypted website connections;
• secure backups and software updates;
• restricted access to customer information;
• supplier checks and contractual data-protection requirements; and
• procedures for dealing with suspected personal-data breaches.

No internet transmission or electronic storage system can be guaranteed to be completely secure. You should take reasonable care when sending information electronically and notify us promptly if you believe an account or communication has been compromised.

15. Your data-protection rights

Depending on the circumstances, you may have the right to:

• be informed about how your personal information is used;
• request access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete information in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to processing based on legitimate interests;
• object at any time to the use of your information for direct marketing;
• receive certain information in a structured, commonly used and machine-readable format;
• ask us to transfer eligible information to another organisation;
• withdraw consent where processing is based on consent; and
• raise a complaint with the Information Commissioner’s Office.

These rights are subject to legal conditions and exceptions. We may need to verify your identity before responding to a request.

To exercise a right, contact us using the details at the beginning of this policy. We will normally respond within one month, although the period may be extended where a request is complex or numerous. We will tell you if an extension applies.

We will not normally charge a fee. A reasonable fee may be charged, or a request may be refused, where permitted by law—for example, where a request is manifestly unfounded or excessive.

16. Automated decision-making

We do not currently make decisions that produce legal or similarly significant effects about customers solely through automated processing.

Our payment or fraud-prevention providers may use automated systems to assess transactions. Where applicable, their use of personal information will be governed by their own privacy policies and applicable legal obligations.

17. Children’s information

Our products and services are not directed at children, and we do not knowingly collect personal information from children for marketing purposes.

Where a person under 18 contacts us about a product or order, we may request the involvement or authorisation of a parent, guardian or other responsible adult where appropriate.

18. Third-party websites

Our website may contain links to websites operated by manufacturers, suppliers, delivery providers, payment providers or other third parties.

We are not responsible for the content, security or privacy practices of third-party websites. You should review the privacy policy of any external website before submitting personal information to it.

19. Business customers and other individuals

Where a customer is a company, flying club, installer or other organisation, we may process the personal information of its employees, officers, members, contractors or representatives.

The organisation providing the information should ensure that the relevant individuals are aware that their information may be provided to us and understand how it will be used.

20. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our services, suppliers, legal obligations or data-processing activities.

The current version will be published on our website with the date on which it was last updated. Where a change is significant, we may provide an additional notice by email or through the website where appropriate.

21. Questions and complaints

Questions, requests or concerns about this Privacy Policy or our use of personal information should be sent to:

AeroDesign.uk
Email: sales@aerodesign.uk
Telephone: +447307209313

We would appreciate the opportunity to address your concerns directly.

You also have the right to complain to the UK Information Commissioner’s Office. Further information is available from the ICO. You may contact the ICO through its website or by telephone on 0303 123 1113.

Your right to complain to the ICO is not affected by contacting us first.