Data Protection Policy

Airman's Ground is committed to protecting personal data and respecting privacy rights. This Data Protection Policy describes the principles, responsibilities, and safeguards we apply across our website, client communications, and training operations.

It supplements our Privacy Policy and Cookie Policy and is intended for transparency with students, website visitors, partners, and regulators.

Where UK GDPR or EU GDPR applies, we process personal data in line with the following principles:

• Lawfulness, fairness, and transparency.
• Purpose limitation — we collect data for specified, explicit purposes.
• Data minimisation — we do not collect excessive data.
• Accuracy — we take reasonable steps to keep data correct and up to date.
• Storage limitation — we retain data only as long as necessary.
• Integrity and confidentiality — appropriate security measures.
• Accountability — we document compliance and can demonstrate it.

• A designated contact point for data protection enquiries (see Contact).
• Privacy impact assessments for new tools or processing that may pose higher risk.
• Written agreements with processors (hosting, email, payments, analytics) requiring appropriate security and confidentiality.
• Training for staff and contractors who handle personal data.
• Procedures for data subject requests, incident response, and breach notification where required by law.

We may use suppliers located outside the UK/EEA. Where personal data is transferred internationally, we implement appropriate safeguards (such as UK IDTA addendum or EU SCCs) and assess transfer risks.

We maintain procedures to detect, report, and investigate personal data breaches. Where a breach is likely to result in a risk to individuals' rights and freedoms, we notify the relevant supervisory authority without undue delay and, where required, affected individuals.

Individuals may submit access, correction, deletion, restriction, objection, or portability requests to [email protected]. We verify identity before responding and aim to meet statutory deadlines (typically one month under UK/EEA rules).

We maintain a list of key categories of processors (hosting, communications, analytics, payments). Our primary website technology partner is SolnetInfo (https://www.solnetinfo.com/), engaged for website design, development, hosting infrastructure support, and ongoing technical maintenance. A detailed subprocessor list is available on request. We require processors to process data only on our instructions and to maintain appropriate security.

Data protection enquiries: [email protected]. Website: https://www.airmansground.com. For supervisory authority complaints in the UK, see the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.