Privacy Notice

Who we are. This notice is issued by PK Safety and Training Services Ltd, registered in Scotland, company number SC159850, trading as Aerodrome Standards. We are the controller of the personal data described here. Queries: peter@aerodrome-standards.com — Peter handles these personally. We are not required to appoint a Data Protection Officer under Article 37 UK GDPR and have not appointed one.

What we collect, and the lawful basis for each

• Course signup (work email, role) — to create your access and deliver the course. Contract, Art. 6(1)(b): supplying the free course performs a contract even though no payment changes hands.
• Advisory enquiry (organisation, role, country, timing, email) — to assess fit and reply. Legitimate interests, Art. 6(1)(f): responding properly to a business enquiry you initiated. You can object at any time.
• Compliance calendar list (email) — Consent, Art. 6(1)(a) and reg. 22 PECR. Withdrawable at any time.
• Course purchase (name, email, payment confirmation, progress, results) — Contract, plus legal obligation for the accounting trail.
• Advisory engagements (material you supply for a readiness review) — Contract, plus legal obligation for accounting records.
• Cookies — Consent for anything beyond strictly necessary. See the Cookie Notice.

If you buy a course we may email you about similar courses under the soft opt-in at reg. 22(3) PECR, with an opt-out on every message. We do not buy lists. We carry out no automated decision-making with legal or similarly significant effects.

A note on work addresses. A named work address is still your personal data, and the PECR marketing rules apply to it as they would to a personal one.

How long we keep it

• Enquiries that don't become engagements — 24 months from last contact, which allows for slow procurement cycles without hoarding stale data
• Marketing list — until you unsubscribe; reviewed for inactivity every 24 months
• Purchase, invoicing and accounting records — 6 years from the end of the financial year (Companies Act 2006 ss.386–389; HMRC)
• Engagement files — 6 years [CONFIRM against the professional indemnity policy: aviation advisory work sometimes requires longer]
• Server and security logs — 12 months · cookie consent records — 12 months rolling

Who we share it with

We do not sell your data. Processors act on our instructions under a data processing agreement: the course platform (currently Teachable), its payment processor, our email service provider, the form handler, the website host, our accountant, and our mailbox provider. [CONFIRM each provider before publication.]

International transfers

Several processors sit outside the UK, most likely the United States. Transfers rely either on an adequacy regulation (including the UK extension to the EU–US Data Privacy Framework) or on the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. [CONFIRM which mechanism each provider relies on.]

Your rights

Access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20), objection — including an absolute right to object to direct marketing (21), and freedom from solely automated decisions (22). You may withdraw consent at any time without affecting what was lawful before. Email peter@aerodrome-standards.com; we respond within one month.

You can complain to the Information Commissioner's Office at any time — ico.org.uk/make-a-complaint · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.