AERLO Privacy Policy

AERLO Limited (“AERLO”, “we”, “our” or “us”) is committed to protecting your privacy and handling personal information fairly, transparently and securely.

This Privacy Policy explains what personal information we collect, how and why we use it, when it may be shared, how long we keep it and the rights you have in relation to your information.

AERLO is a platform for the General Aviation community, connecting people, aircraft, businesses, organisations, services, events and opportunities through listings, member accounts, Business Workspaces, communications and related services.

This Privacy Policy applies whenever you visit or use AERLO, create or manage an account, profile or listing, use a Business Workspace, communicate through the Platform, purchase a service or otherwise interact with us.

AERLO Limited, trading as AERLO, is the Data Controller responsible for personal information processed through the Platform where AERLO determines how and why that information is used.

Our details are:

Website: www.aerlo.co.uk
Email: support@aerlo.co.uk
ICO Registration Reference: ZC040874

The information we collect depends on how you use AERLO. We aim to collect only information reasonably necessary to operate, secure and improve the Platform.

When you create or manage an account or profile, we may process your name, username, email address, authentication information, profile photograph, biography, preferences and other information you choose to provide, including aviation-related interests, experience, qualifications, licences, ratings or affiliations. Authentication credentials are handled through secure authentication systems and passwords are not stored by AERLO in readable plain-text form.

When you create, claim or manage a listing or Business Workspace, we may process information associated with that content, including aircraft, share or syndicate information, aircraft parts, prices, descriptions, photographs, documents, business or organisation information, locations, websites, social links, flight school information, services, event information, contact details, authorised users and Workspace permissions.

When you contact or communicate through AERLO, we may process your contact details, message, enquiry information, attachments and relevant correspondence history. Private communications are not routinely read by AERLO, although we may access or review them where reasonably necessary to investigate a report, fraud, abuse, a security incident, a suspected breach of our Terms or a legal obligation.

Where you purchase a paid service, we may process transaction information such as the service purchased, amount, payment status, date and transaction reference. Payments may be handled by specialist payment providers and AERLO does not store complete payment card details.

When you use the Platform, limited technical information may also be generated, including device, browser, operating system, session, referring page, Platform interactions, approximate location derived from technical information, diagnostics and security events.

You are not required to provide personal information simply to browse public areas of AERLO. However, certain information is necessary to provide features such as accounts, listings, Business Workspaces and paid services. Information identified as optional does not have to be provided.

AERLO operates in part as a public marketplace, directory and discovery platform.

Information you deliberately publish through a public profile, aircraft listing, aircraft share or syndicate listing, aircraft part listing, Business Profile, flight school page, event page or another public area of AERLO may be visible to anyone, including people who are not registered members.

Depending on the feature and the information you choose to provide, public information may include your username, business or organisation name, photographs, listing information, location, aircraft details, prices, descriptions, website and other information associated with the relevant page.

You should only publish information that you are comfortable making publicly available.

Public pages may be indexed by search engines such as Google or Bing. If information is later removed from AERLO, copies or references may temporarily remain in search-engine indexes, browser caches or other third-party systems outside our control.

As part of operating a useful General Aviation directory and discovery service, AERLO may create or maintain pages concerning relevant businesses, organisations, flight schools, services or aviation events using information already made publicly available.

This may include information from an organisation’s official website, public business or event information and other legitimate publicly accessible sources. We aim to use only information reasonably necessary to identify and describe the relevant organisation, service or event and, where personal data is involved, process it only where an appropriate lawful basis exists.

AERLO may display publicly available business logos or event imagery for identification and directory purposes where appropriate and permitted by law. Intellectual property rights in third-party material remain with their respective rights holders.

If information concerning you, your business, organisation or event is incorrect, outdated or you believe it should be removed, contact support@aerlo.co.uk. We will consider legitimate correction, replacement and removal requests within a reasonable period.

We use personal information where reasonably necessary to operate AERLO and provide the services you choose to use. This includes creating and securing accounts, authenticating members, maintaining profiles and listings, providing Business Workspaces, enabling communications, processing transactions, responding to enquiries and providing support.

We may also process information to protect the safety, security and integrity of AERLO, including preventing spam, scams, fraud and unauthorised access; investigating misuse or reports; enforcing our Terms; diagnosing technical problems; maintaining security records; and protecting AERLO and its users.

Limited usage and analytics information may be used to understand how the Platform is used and to improve its navigation, performance, functionality and member experience.

We may send service communications such as account verification, security notices, password resets, listing or submission notifications and important information affecting your account or use of AERLO. These are different from marketing communications and may be necessary while your account or relevant service remains active.

Marketing communications will only be sent where permitted by law. You may unsubscribe from marketing communications at any time.

UK data protection law requires AERLO to have a lawful basis for processing personal information. The basis we rely upon depends on the purpose of the processing.

We may rely on contract where processing is necessary to provide a service you have requested or take steps at your request before entering into a contract, including operating accounts, listings, Business Workspaces and paid services.

We may rely on legitimate interests where processing is reasonably necessary to operate, secure, develop and protect AERLO and those interests are not overridden by your rights and interests. This can include operating an effective General Aviation marketplace and directory, maintaining relevant public business and event information, preventing fraud and abuse, responding to enquiries and improving the Platform.

We may rely on legal obligation where processing is necessary to comply with applicable legal, regulatory, accounting, tax or law-enforcement requirements.

We rely on consent where required, including for certain non-essential cookies and forms of electronic marketing. Where processing relies on consent, you may withdraw it at any time.

More than one lawful basis may apply in some circumstances.

Where AERLO provides business email verification, that verification confirms control of the submitted email address only unless we expressly state otherwise.

It does not establish or guarantee a person’s identity, ownership of a business or aircraft, professional competence, licensing, regulatory approval, insurance, financial standing or endorsement by AERLO.

Where additional verification features are introduced, we will explain what has and has not been verified.

Where AERLO offers paid services, payments may be processed by specialist payment providers. AERLO may retain transaction information necessary to administer the service, deal with disputes or refunds and meet accounting, tax and legal obligations, but does not store complete payment card details.

AERLO uses cookies and similar technologies where necessary to operate and secure the Platform, including authentication, session management, necessary preferences and abuse prevention.

We may also use analytics technologies to understand how AERLO is used. Non-essential cookies or similar technologies will only be used where permitted by law and, where consent is required, after you have made the appropriate choice through our cookie controls.

Further information is available in our Cookie Policy.

We do not sell your personal information.

We may share personal information with trusted organisations where reasonably necessary to operate AERLO, including providers of hosting and infrastructure, authentication and data storage, email delivery, payments, analytics, security and other technology services. Appropriate data-protection arrangements are used where required.

Information you deliberately publish in a public area of AERLO is, by its nature, available publicly and may also become accessible through search engines and other services.

We may disclose information to professional advisers, insurers, regulators, courts, law-enforcement agencies or other competent authorities where reasonably necessary or legally required.

If AERLO Limited or substantially all of its business or assets is sold, reorganised or transferred, relevant information may form part of that transaction subject to appropriate confidentiality and data-protection safeguards.

Some organisations that help us operate AERLO may process information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure the transfer complies with UK data protection law. Depending on the destination and circumstances, this may include transfers to countries recognised as providing an adequate level of protection or the use of approved contractual safeguards and other measures required by law.

We take the security of personal information seriously and use appropriate technical and organisational measures designed to protect information against unauthorised access, alteration, disclosure, loss or misuse. These include appropriate access controls, secure authentication, encrypted connections, monitoring and operational measures designed to limit access to personal information.

We may process limited account, technical, communication and activity information where reasonably necessary to identify and prevent fraud, spam, scams, malicious activity, unauthorised access or breaches of our Terms. Short-lived technical controls may also be used to protect Platform features from automated abuse.

No internet service can guarantee absolute security. We therefore review the measures appropriate to the nature of AERLO and the information we process.

If you believe your account or information has been compromised, contact support@aerlo.co.uk promptly.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing AERLO services, maintaining appropriate records, resolving disputes, enforcing agreements and meeting legal, accounting or regulatory requirements.

Account information is generally retained while an account remains active. Following closure, information that is no longer required will be deleted or anonymised within an appropriate period, subject to any legitimate or legal reason for continued retention.

Public listings may be retained while active or relevant. Removed, withdrawn or expired content may be retained for a limited period where reasonably necessary for security, fraud prevention, moderation, dispute resolution, record keeping or legal purposes.

Support and communication records may be retained for a reasonable period to manage enquiries and disputes. Financial records may be retained for longer where required by law. Security and technical records are retained only for periods reasonably appropriate to their purpose.

Backup copies may remain for a limited period after information has been removed from active systems and will expire through normal backup processes.

Depending on the circumstances, UK data protection law may give you the right to request access to personal information we hold about you, correct inaccurate or incomplete information, request deletion, restrict certain processing, receive certain information in a portable format or object to particular uses of your information.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Where we rely on legitimate interests, you may have the right to object to that processing. We will consider whether there are compelling legitimate grounds for it to continue.

You may object at any time to the use of your personal information for direct marketing, in which case we will stop using it for that purpose.

These rights are not absolute and may be subject to exemptions or other legal requirements. You will not normally have to pay a fee to exercise them, although we may request information reasonably necessary to confirm your identity.

Requests can be sent to support@aerlo.co.uk and will be handled within the period required by applicable law.

AERLO does not currently use solely automated decision-making that produces legal effects, or similarly significant effects, on individuals. Automated technology may support ordinary functions such as security, spam prevention, categorisation or moderation. If this changes materially, we will update this Privacy Policy as required.

AERLO is not designed as a service for children. Member services are intended for people who have the legal capacity to use the relevant services and enter into any agreements required for their use. If we become aware that personal information has been collected from a child in circumstances where it should not have been, we will take appropriate steps to investigate and, where necessary, remove it.

AERLO may contain links to third-party websites, booking services, payment providers, social media pages and other external services. Those organisations are responsible for their own privacy practices, and AERLO does not control how they process information after you leave our Platform.

We may update this Privacy Policy to reflect changes to AERLO, applicable law, regulatory guidance or our processing activities. The latest version will be published on our website with its last-updated date. Where a material change significantly affects registered members, we will take reasonable steps to bring it to their attention where appropriate or required by law.

If you have questions about this Privacy Policy, wish to exercise a data-protection right or have concerns about how your information has been handled, please contact:

Email: support@aerlo.co.uk
Website: www.aerlo.co.uk
ICO Registration Reference: ZC040874

We take privacy concerns seriously and will try to resolve them promptly.

You also have the right to complain to the Information Commissioner’s Office (“ICO”), the UK’s independent data protection regulator. Information about making a complaint is available from the ICO.

Information Commissioner’s Office
Website: www.ico.org.uk
Telephone: 0303 123 1113

You may contact the ICO at any time, although raising the matter with AERLO first may allow us to resolve your concern more quickly.