PRIVACY POLICY

1. WHO WE ARE

Aerospace Ltd ("Aerospace", "we", "us", "our") is a company registered in England and Wales. We operate a car park comparison platform for Manchester Airport. Our registered office is in Manchester, United Kingdom.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Aerospace Ltd is the data controller. If you have questions about how we process your personal data, please contact us at privacy@aerospace.app.

2. WHAT DATA WE COLLECT

We collect and process the following categories of personal data:

Account & Booking Data

• Full name and email address
• Vehicle registration number
• Flight number and travel dates
• Terminal preference
• Payment information (processed securely via Apple Pay / Stripe — we do not store card numbers)
• Booking reference numbers

Partner Application Data

• Car park name and contact details
• Business email and phone number
• Number of parking spaces

Technical & Usage Data

• IP address and approximate location
• Browser type and version, device information
• Pages visited, time on site, referral source
• Cookie identifiers (see section 7)

3. HOW WE USE YOUR DATA

We use your personal data for the following purposes:

• To provide our services: Processing bookings, tracking flights, dispatching shuttles, generating QR codes, and managing ANPR barrier entry.
• To communicate with you: Booking confirmations, flight status updates, push notifications, and customer support responses.
• To process partner applications: Evaluating and onboarding car park operators.
• To improve our platform: Analysing usage patterns, fixing bugs, and developing new features.
• To comply with legal obligations: Tax records, fraud prevention, and regulatory requirements.

4. LEGAL BASIS FOR PROCESSING

Under UK GDPR, we rely on the following lawful bases:

• Performance of a contract: Processing necessary to fulfil your booking or partner agreement.
• Legitimate interests: Platform improvement, fraud prevention, and analytics (where not overridden by your rights).
• Consent: Marketing communications and non-essential cookies. You may withdraw consent at any time.
• Legal obligation: Where we are required to process data under applicable UK law.

5. WHO WE SHARE YOUR DATA WITH

We share personal data with the following categories of recipients:

• Car park operators: Your booking details (name, vehicle registration, flight number, dates) are shared with the car park you book to fulfil the service.
• Payment processors: Apple Pay and Stripe process payments on our behalf. They are independent data controllers for payment data.
• Flight data providers: FlightAware and AviationStack receive flight numbers to provide real-time tracking. No other personal data is shared.
• Cloud infrastructure: We use industry-standard hosting providers located in the UK and EEA.
• Analytics providers: Anonymised and aggregated usage data only, subject to your cookie preferences.

We do not sell your personal data to third parties.

6. DATA RETENTION

• Booking data: Retained for 6 years after the booking date for tax and legal purposes.
• Account data: Retained for the duration of your account, plus 2 years after deletion.
• Partner application data: Retained for 3 years or the duration of the partnership, whichever is longer.
• Technical data: IP addresses and session logs retained for 90 days. Analytics data anonymised after 26 months.

7. COOKIES

We use the following types of cookies:

• Essential cookies: Required for the website to function (session management, security). Cannot be disabled.
• Analytics cookies: Help us understand how visitors use the site. Only set with your consent.
• Preference cookies: Remember your settings (terminal preference, date formats). Optional.

We do not use advertising or tracking cookies. You can manage your cookie preferences via the banner that appears when you first visit the site, or by adjusting your browser settings.

8. YOUR RIGHTS

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your data (subject to legal retention requirements).
• Right to restriction: Request we limit processing in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email privacy@aerospace.app. We will respond within 30 days.

9. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data, including:

• TLS encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access controls
• Regular security audits and penetration testing
• Incident response procedures

10. INTERNATIONAL TRANSFERS

Your data is primarily processed within the United Kingdom and EEA. Where data is transferred outside these regions (e.g., to US-based flight tracking providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.

11. CHILDREN

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at privacy@aerospace.app.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. COMPLAINTS

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

14. CONTACT US

For any questions about this Privacy Policy or our data practices:

• Email: privacy@aerospace.app
• General enquiries: support@aerospace.app