Privacy notice
Last updated: 26 September 2026
This notice explains what personal information Aerial Defence Ltd collects, why we collect it, who we share it with, how long we keep it and what your rights are. We have written it to be as clear and short as we can.
1. Who we are
Aerial Defence Ltd is the controller of the personal information described in this notice. We are registered in England and Wales under company number 13639749. Our registered office and principal place of business is Woodend Creative Workspace, The Crescent, Scarborough, North Yorkshire YO11 2PW.
We have applied to register with the Information Commissioner’s Office (ICO).
If you have any questions about this notice or your information, please contact us by email at info@aerial-defence.com, by phone on 07872 828379, or by post at the address above.
2. What this notice covers
This notice covers personal information we collect through our website and in the course of our business, including when you:
- visit our website
- contact us with an enquiry
- buy from our online shop
- apply for permission to fly a drone in an airspace restriction that we sponsor
- receive emails from us
3. What we collect, why, and our lawful basis
Data protection law requires us to have a lawful basis for each way we use personal information. The table below sets out what we collect, what we use it for and the basis we rely on.
| Who | What we collect | Why we use it | Lawful basis |
|---|---|---|---|
| Website visitors | IP address, browser and device type, pages visited and security information. | To run and secure the website, prevent spam and fraud, and see how many people use the site. | Legitimate interests in running a secure, working website. |
| People who contact us | Name, contact details and anything you tell us in your message. | To reply to you and deal with your enquiry. | Legitimate interests in responding to enquiries. If you are asking about buying from us, taking steps at your request before entering a contract. |
| Customers | Name, billing and delivery address, email, phone number, what you ordered and payment status. We never see or store your full card or bank details. | To take and deliver your order, provide our services, handle returns and queries, and keep financial records. | Performing our contract with you. Legal obligation for tax and accounting records. |
| Drone pilots applying for airspace permission | Name, email, phone, organisation, Operator ID, Flyer ID, qualification and certificate details, drone make, model, serial number, class and mass, operating category, Operational Authorisation reference, insurance details, flight date and times, take-off position and height, purpose of the flight, and any document you upload. We also record our decision, any conditions and our correspondence with you. | To assess your application, decide whether to grant access to the restricted airspace, set conditions, manage the restriction safely on the day, and keep a record of our decisions. | Legitimate interests in managing the airspace restriction safely and fairly, as the sponsor responsible for it under Civil Aviation Authority guidance (CAP 722C). Legal obligation where the law requires us to share information. |
| People receiving our emails | Name and email address. | To send news and information about our products and services. | Consent, or for existing customers our legitimate interests in telling you about similar products and services. You can unsubscribe at any time using the link in every email or by contacting us. |
We don’t use your information to make decisions about you by automated means. Every airspace permission decision is made by a person.
We don’t sell your personal information, and we don’t pass it to other organisations for their own marketing.
4. Who we share it with
Service providers who help us run our business and website, and who may only use your information on our instructions:
- IONOS, who host our website and email
- PayPal, who process payments for our shop. PayPal also acts as a controller in its own right for some payment information, under its own privacy notice
- Automattic (Jetpack and WooCommerce), who provide website statistics and content delivery
- Google, who provide reCAPTCHA spam protection and web fonts
- Cloudflare and DataTables, who deliver parts of the website’s code
- OpenStreetMap, whose map is shown on the airspace permission form
For airspace permission applications, we may share your details with the following, where this is needed for safety, security or operational purposes:
- the police and other emergency services
- the organiser of the event the restriction protects
- the Civil Aviation Authority
- aerodromes and the sponsors of other airspace restrictions, where your flight affects their airspace
Others, only where necessary:
- the police, courts or regulators where the law requires it, or to prevent or detect crime
- our professional advisers and insurers
- a buyer of our business, if we ever sell it, who would have to treat your information in line with this notice
5. Transfers outside the UK
Some of our service providers, including PayPal, Google and Automattic, may process information outside the UK, particularly in the United States. Where they do, the transfer is protected by UK adequacy regulations (including the UK-US data bridge) or by approved contract terms, such as the UK International Data Transfer Agreement or Addendum.
6. How long we keep it
| Information | How long we keep it |
|---|---|
| Airspace permission applications and uploaded documents | 12 months after the flight date, then deleted automatically. Longer only if needed for an incident, complaint or legal claim. |
| Orders and financial records | 6 years after the end of the financial year they relate to, as required for tax and accounting. |
| Enquiries | 2 years after our last contact with you, unless they become part of a customer record. |
| Email list | Until you unsubscribe. We then keep your email address on a suppression list so we don’t contact you again. |
| Website security logs | A short period set by our hosting provider, for security and troubleshooting. |
7. Keeping it secure
We use appropriate technical and organisational measures to protect your information. These include encrypted connections to our website, restricted access to personal information, and secure hosting. Documents uploaded with airspace permission applications are stored away from public access and can only be downloaded by our administrators.
8. Your rights
You have the right to:
- access the personal information we hold about you and receive a copy
- have inaccurate information corrected
- have your information deleted in some circumstances
- restrict how we use your information in some circumstances
- object to us using your information on the basis of legitimate interests, and to object to direct marketing at any time
- receive information you gave us in a portable format, in some circumstances (data portability)
- withdraw consent at any time where we rely on it. This doesn’t affect anything we did before you withdrew it
To use any of these rights, contact us using the details in section 1. It’s free, and we will normally respond within one month. We may ask for proof of identity if we need to be sure who you are.
Some rights don’t apply in every case. For example, we may need to keep an airspace permission record while an incident is being investigated. If so, we will explain why.
If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
9. Links to other websites
Our website links to other websites, such as legislation.gov.uk and news sites. We aren’t responsible for how they handle your information, so please read their privacy notices.
10. Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed. If we make significant changes that affect you, we will tell you.
Cookies
Cookies are small files that a website stores on your device. We only use cookies that are essential for the website to work, such as keeping your shopping basket and protecting our forms from spam. Because they are essential, the law doesn’t require us to ask for your consent, but you can still block or delete cookies in your browser settings. Some parts of the site, such as the shop, may not work properly if you do.
| Cookies | Set by | Purpose |
|---|---|---|
| WooCommerce | Remember what is in your basket and keep your checkout working. | |
| Google reCAPTCHA | Protect our shop forms from spam and abuse. | |
| WordPress | Keep our staff logged in to manage the website. Only set if you log in. |
The airspace permission form doesn’t set any cookies. If we ever add cookies that aren’t essential, such as for analytics or advertising, we will ask for your consent first and update this notice.
