Back to Core Aviation Network

Legal & Trust · Core Aviation Network

Privacy Policy

How Core Aviation Network collects, uses, protects and manages personal data across the aircraft maintenance platform.

Introduction

This Privacy Policy explains how Core Aviation Network ("we", "us", or "our") collects, uses, and discloses your personal data when you use the Core Aviation Network website (the "Platform") as an Aircraft Operator or Maintenance, Repair, and Overhaul service provider ("MRO").

Data Controller

Core Aviation Network is the data controller for the personal data collected through the Platform. Our company number is 15789027 and our registered address is 5 Stavedown Road, South Wonston, Winchester, SO21 3HA, United Kingdom.

If you have any questions about this Privacy Policy or your rights, please contact our Data Protection Officer:

What personal data do we collect?

The personal data we collect depends on your role on the Platform:

  • For Aircraft Operators: We may collect information such as your company name, contact details (name, email address, phone number), aircraft fleet details, and any information you provide when requesting quotes or interacting with MROs on the Platform.
  • For MROs: We may collect information such as your company name, contact details (name, email address, phone number), certifications, capabilities, service offerings, and any information you include in your profile. We may also collect data on user reviews and feedback about your services.

How do we use your personal data?

We use your personal data for the following purposes, all within the confines of applicable UK data protection laws and regulations:

  • To provide and improve the Platform: We use your data to allow you to connect with MROs or Aircraft Operators (depending on your role), find relevant services, manage your account, and personalise your search results based on your location, industry, or past activity on the Platform.
  • To facilitate communication: We may use your data to send you updates about the Platform, respond to your inquiries, facilitate communication between you and other users, and send targeted service notifications (e.g., informing you about upcoming maintenance deadlines for your aircraft fleet).
  • To personalise your experience: We may use your data to personalise your experience on the Platform, such as recommending relevant MROs or services based on your past interactions and industry trends.
  • To prevent fraud and ensure security: We may use your data to prevent fraud, unauthorised access, and other security breaches, and to comply with industry best practices for data security.
  • To analyse and improve our services: We may use anonymised and aggregated data to analyse how the Platform is used and to improve our services.
  • To comply with legal obligations: We may use your data to comply with applicable laws and regulations, such as responding to court orders or subpoenas, or for legal or regulatory reporting purposes.

Limited Use for New Purposes

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. For example, we may use your contact information to send you service updates related to the Platform, even though this wasn't the initial purpose of collecting that data. If you wish to understand how the processing for a new purpose is compatible with the original purpose, please contact us using the details provided in Section 13.

Exceptions for Legal Requirements

In rare situations, we may need to use your personal data for an unrelated purpose without your knowledge or consent, but only where this is required or permitted by law. This could include situations where we need to disclose data to comply with a court order or to prevent imminent harm.

Transparency is Key

We are committed to transparency in how we use your data. If we need to use your personal data for a purpose that is not compatible with the original purpose, or in a situation where we rely on an exception to legal requirements, we will notify you and explain the legal basis that allows us to do so.

Legal basis for processing your data

We process your personal data based on the following legal grounds:

  • Contract: When you use the Platform, you enter into a contract with us, and we need to process your data to fulfil our obligations under that contract.
  • Legitimate interests: We may process your data for our legitimate interests, such as improving the Platform, preventing fraud, and ensuring the safety and security of the Platform.
  • Consent: In some cases, we may ask for your consent to process your data for a specific purpose, such as sending you marketing communications.
  • Legal: We may also process your data where the processing is necessary to comply with a relevant legal obligation or regulatory obligation that we have (e.g., fraud prevention).

6. Sharing your personal data

We will only share your personal data with third parties in the following circumstances, all within the confines of applicable UK data protection laws and regulations:

  • With service providers and business partners: We may share your personal data with third-party service providers and business partners who assist us in delivering our services and operating the Platform.
  • For legal or regulatory reasons: We may disclose your personal data if required by law or regulation.
  • With your consent: We may also share your personal data with third parties with your express consent.
  • Business transactions: We may share your personal data as part of a merger, acquisition, or other business transaction.

We will never sell, rent, or trade your personal data to third parties for their marketing purposes without your consent.

7. Data security

We take reasonable steps to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission is completely secure, and we cannot guarantee the security of your data.

8. Data retention

We will retain your personal data for as long as it is reasonably necessary for achieving the purposes set forth in this Privacy Policy:

  • Providing the Platform services: We will retain your data for as long as you have an active account and use the Platform.
  • Complying with legal obligations: We may also retain your data for longer periods if required by law.
  • Resolving disputes: We may retain your data for a reasonable period to resolve any disputes or inquiries.
  • Enforcing our agreements: We may retain your data for a reasonable period to enforce our terms of use and other agreements.

Data Minimisation: We follow the principle of data minimisation and only retain the personal data that is necessary for the purposes outlined above.

Usage Data Retention: We typically retain usage data, such as anonymised data about your activity on the Platform, for shorter durations. We may retain this data for longer periods when necessary for:

  • Security: Maintaining the security of the Platform and preventing fraud.
  • Service improvement: Improving the functionality and performance of the Platform.
  • Legal compliance: Complying with requirements that mandate longer retention periods.

This approach enables us to analyse data, improve the user experience and maintain the security and integrity of the Platform. We will delete personal data when it is no longer reasonably necessary for the purposes outlined above, unless the law requires us to retain it for longer.

9. Your rights

Under UK data protection laws, you have a number of rights in relation to your personal data:

  • Right to be informed: You have the right to be informed about how we collect, use, and share your personal data.
  • Right of access: You have the right to access the personal data we hold about you.
  • Right to rectification: You have the right to request that we rectify any inaccurate or incomplete personal data we hold about you.
  • Right to erasure (Right to be forgotten): You have the right to request that we erase your personal data.
  • Right to restrict processing: You have the right to request that we restrict the processing of your personal data.
  • Right to data portability: You have the right to request that we transfer your personal data to another controller.
  • Right to object to processing: You have the right to object to the processing of your personal data.
  • Right to withdraw consent to processing: You have the right to withdraw your consent at any time.
  • Exercising Your Rights: To exercise any of these rights, please contact us using the details provided in Section 14. We will respond to your request within one month, unless your request is particularly complex.
  • Data Minimisation: We respect your privacy and are committed to data minimisation. We will only collect and retain the personal data that is necessary for the purposes outlined in this Privacy Policy.
  • Account Deletion: You can manage your personal data and privacy settings through your account on the Platform. You can also choose to disable or delete your account entirely. This will result in the permanent removal of all your content and data from the Platform.
  • Transparency and Communication: We are committed to transparency in how we handle your personal data. We will provide you with clear information about your rights and how to exercise them. We will also keep you informed about any changes to this Privacy Policy.
  • Your choices are important to us. We will always respect your decisions regarding the management of your personal information. There may be circumstances where we are unable to comply with your request, due to legal obligations or for reasons of security. If we are unable to comply with your request, we will explain why. There are no fees associated with exercising your rights under UK data protection law.

To exercise any of these rights, please contact us using the details provided in Section 14. There are no fees associated with exercising your rights under UK data protection law.

10. International Data Transfers

Core Aviation Network operates on a global scale and may transfer your personal data to third-party service providers located in countries outside the United Kingdom. These countries may have different data protection laws than the UK.

We will only transfer your personal data to countries that offer an adequate level of data protection. We achieve this through one or more of the following methods:

  • Transferring data to countries approved by the UK Information Commissioner's Office (ICO) as having adequate data protection laws.
  • Using Standard Contractual Clauses (SCCs) approved by the European Commission, which create legally binding obligations for the recipient to protect your personal data.
  • Obtaining your explicit consent to the transfer of your personal data.

We take steps to ensure that third-party service providers outside the UK provide adequate safeguards for your personal data. These safeguards may include contractual obligations, security measures and data minimisation practices.

11. Children's Privacy

Our Platform is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe your child has provided us with personal data, please contact us.

12. Third-Party Links

The Platform may contain links to websites or resources operated by third parties ("Third-Party Links"). These links are provided solely for your convenience and information, and we do not control the content, products, or services offered on these Third-Party Links.

Core Aviation Network does not endorse or sponsor any Third-Party Links. We recommend that you carefully review the privacy policies and terms of use of any Third-Party Link you visit, as they may differ from our own.

We are not responsible for the content, accuracy, or reliability of information presented on Third-Party Links. You access and use Third-Party Links at your own risk.

Security: We advise exercising caution and due diligence when accessing Third-Party Links. We cannot guarantee the security of information you provide to a Third-Party Link.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on the Platform.

14. Contact us

If you have any questions about this Privacy Policy or your rights, please contact us: