Privacy Policy

Introduction

This website, www.globalairtraining.com, is published and operated by Global Air Training Ltd (GAT), a limited company registered in England and Wales with registered office at Harthill Road, Burwardsley, Cheshire, CH3 9NU, UK. Contact us at ops@globalairtraining.com or +44 (0)1829 771334.

This privacy policy explains how we collect, use, disclose, and protect your personal information when you visit our website, register with us, place an order, request information, or engage with our services (e.g., booking training courses). We act as the data controller for your personal data.

We are registered with the Information Commissioner's Office (ICO) under the Data Protection Register, registration reference: ZA141262. We have not appointed a Data Protection Officer as our processing activities do not require one under the UK General Data Protection Regulation (UK GDPR).

This policy applies to all users of our website and services, including clients and delegates from the UK and internationally.

Personal Data We Collect

We collect the following types of personal data about you when you interact with our website or services:

• Contact Information: Name, email address, phone number, company name, and address (e.g., when registering, placing an order, or requesting information).
• Booking and Delegate Details: Delegate names, emails, job roles, and any prerequisites or notes related to training courses (e.g., aviation-specific details like CRM Recurrent).
• Payment Information: Billing details, such as payment method and currency, processed securely (we do not store full card details).
• Technical Data: IP address, browser type, and device information from server logs (anonymized where possible).
• Marketing Preferences: Opt-in choices for receiving updates.

We do not collect personal data from other sources unless you provide it directly (e.g., no third-party data purchases).

Lawful Basis for Processing

Under the UK GDPR, we process your personal data on the following bases:

• Legitimate Interests: To provide and improve our services, manage inquiries, and ensure website functionality (e.g., processing registrations or orders where not strictly contractual). We have conducted a legitimate interests assessment to ensure this balances with your rights.
• Contract Performance: To fulfill bookings, deliver courses, issue certificates, and manage accounts (e.g., processing delegate details for a training course).
• Consent: For marketing communications, such as emailing you about products or services (you can withdraw consent at any time).
• Legal Obligation: For tax, accounting, or regulatory compliance (e.g., aviation authority requirements).

We do not process special category data (e.g., health or ethnicity) unless explicitly required for a course and with your consent.

How We Use Your Information

We use your personal data for the following purposes:

• Processing Orders and Bookings: To confirm, manage, and deliver training courses, including sending confirmations and materials (basis: contract performance).
• Account Management: To create and maintain user accounts (basis: contract performance or legitimate interests).
• Customer Support: To respond to inquiries or requests (basis: legitimate interests).
• Marketing: If you consent, to email you about relevant products, services, or updates (basis: consent). We do not use your data for marketing without explicit consent.
• Website Improvement: To analyse usage via anonymized logs (basis: legitimate interests).
• Compliance and Security: To meet legal obligations and protect against fraud (basis: legal obligation or legitimate interests).

We do not engage in automated decision-making or profiling that produces legal effects or significantly affects you.

Sharing Your Information

We do not sell or rent your personal data. We may share it with:

• Service Providers: Payment processors (e.g., for secure transactions), IT hosts (e.g., Zoom for online courses), or certificate issuers, under strict data processing agreements ensuring UK GDPR compliance.
• Legal Authorities: If required by law, regulators (e.g., aviation bodies), or to protect our rights.
• No Third-Party Marketing: We do not share data for others' marketing purposes.

Data Retention

We retain personal data only as long as necessary:

• Order and Booking Data: 7 years for tax and legal purposes.
• Marketing Data: Until you opt out, plus 2 years for audit trails.
• Inquiry Data: 1 year unless converted to a booking.
• Technical Logs: 6 months, anonymized.

Data is securely deleted or anonymized when no longer needed.

Data Security and Protection

We ensure the security of your personal information using encryption (e.g., HTTPS), access controls, firewalls, and regular security audits. Our methods comply with UK GDPR requirements.

In the event of a data breach likely to risk your rights, we will notify you and the ICO within required timelines (e.g., 72 hours to ICO).

Cookies and Similar Technologies

This website does not use cookies or similar technologies (e.g., pixels or trackers). We only collect standard server log information, which does not require consent under the Privacy and Electronic Communications Regulations (PECR).

Marketing

We may send you information about products and services that may interest you, based on your consent. All email marketing complies with UK GDPR and PECR, including clear unsubscribe links in every message.

You can withdraw consent, manage preferences, or update your information at any time via the unsubscribe link or by contacting us.

Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of your data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure ("Right to be Forgotten"): Delete data in certain circumstances (e.g., if no longer needed).
• Restriction: Limit processing while we verify accuracy or address objections.
• Objection: Object to processing based on legitimate interests or for marketing.
• Portability: Receive your data in a structured, machine-readable format.
• Withdraw Consent: For consent-based processing.

To exercise these rights, email ops@globalairtraining.com or write to our address. We respond within one month (extendable if complex), free of charge unless the request is manifestly unfounded or excessive. We may require identity verification.

International Transfers

If we transfer personal data outside the UK (e.g., to non-UK clients or service providers like Zoom, which may involve US servers), we ensure adequate safeguards such as UK International Data Transfer Agreements (IDTAs), Standard Contractual Clauses, or reliance on adequacy decisions.

Children's Data

Our services are not directed at children under 16, and we do not knowingly collect their data. If we become aware of such collection, we will delete it promptly.

Other Websites

Our website may contain links to third-party sites. This policy applies only to our website; please review their privacy policies for external sites. We are not responsible for third-party practices.

Complaints

If you are unsatisfied with how we handle your data, contact us first. You also have the right to complain to the ICO at www.ico.org.uk, helpline 0303 123 1113, or your local supervisory authority if outside the UK.

Changes to Our Privacy Policy

We review this policy regularly and post updates here. Material changes will be notified via email or website notice. This policy was last updated on 03 January 2026.