Privacy notice
Last updated
This explains what HQ Aviation Ltd does with personal data collected through hqaviation.com, and what you can ask us to do about it. It is written to be read, not to be got past.
Who we are
HQ Aviation Ltd is the data controller: we decide what happens to your data and we are answerable for it.
- Company number 07587658
- Registered office: 22 Wycombe End, Beaconsfield, Buckinghamshire, HP9 1NB
- Trading address: Denham Aerodrome, Uxbridge, London, UB9 5DF
- Contact: operations@hqaviation.com or 01895 833 373
What we collect, and why we are allowed to
We only collect data when you do something that needs it. Nothing on this list is gathered in the background.
| When you | We collect | Our lawful basis |
|---|---|---|
| Booking a discovery flight, trial lesson or tour | Name, email, phone, the flight you chose, and your payment through Stripe | Performance of a contract |
| Buying parts or merchandise | Name, email, phone, delivery address, order contents, and your payment through Stripe | Performance of a contract |
| Leaving items in a basket after giving us your email | Email and basket contents, so we can remind you | Legitimate interests: recovering an order you started. You can opt out in any reminder we send. |
| Enquiring about a part, an aircraft for sale, or selling one to us | Name, email, phone, and whatever you tell us about the aircraft or part | Steps taken at your request before entering a contract |
| Registering interest in an aircraft type or an event | Name, email, phone, and the type or event you asked about | Consent |
| Contacting us, or being added to our contacts records | Name, email, phone, and the history of our correspondence | Legitimate interests: running the business and answering you |
| Browsing the site after accepting cookies | Pages viewed, journey through the site, and a session recording | Consent |
We never see your full card number. Card details go straight to Stripe and we receive only a confirmation and the last four digits.
Cookies and tracking
Analytics, advertising measurement and session recording only run if you accept them. Until you do, and permanently if you decline, none of it happens. The full list of what is stored on your device, and a control to change your mind, is on our cookies page.
Who else sees it
We do not sell personal data and we do not share it for anyone else's marketing. We use these companies to run the business, and they may only act on our instructions.
| Company | What they do for us | Where |
|---|---|---|
| Google Cloud / Firebase | Hosting, database and file storage | UK and EU, with some support access from the USA |
| Stripe | Taking card payments | USA, under its UK and EU data protection commitments |
| Analytics and advertising measurement, only if you accept cookies | USA | |
| Microsoft | Clarity session recording and heatmaps, only if you accept cookies | USA |
| Our email provider | Sending booking confirmations, order updates and replies | See our contact address below if you need the current provider named |
Where data goes outside the UK, it is protected by the UK's approved transfer safeguards: an adequacy decision, or the International Data Transfer Agreement. We may also disclose data where the law requires it, for example to the Civil Aviation Authority or to HMRC.
How long we keep it
- Bookings, orders and anything with a payment: six years after the end of the financial year the booking or order falls in
- Enquiries that did not become a booking: 24 months from the last contact, unless it becomes a booking
- Analytics and session recordings: 14 months (Google Analytics)
- Marketing contacts: until you unsubscribe, then a suppression record kept indefinitely so we do not contact you again
Your rights
You can ask us to:
- give you a copy of the data we hold about you
- correct anything that is wrong
- delete it, where we do not need it for a legal or contractual reason
- stop or limit what we do with it
- send it to you or another provider in a portable format
- stop marketing to you, which we will always do, no reason needed
Where we rely on consent, you can withdraw it at any time, and doing so does not affect anything we did before you withdrew it. Where we rely on legitimate interests, you can object and we will stop unless we have compelling grounds not to.
Email operations@hqaviation.com. We answer within one month. There is no charge.
Complaints
If we have got something wrong, tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes
If we change how we use personal data, we will update this page and change the date at the top. If the change is significant, and particularly if it affects a choice you have already made about cookies, we will ask you again rather than assume your previous answer still stands.