JET TEAM Privacy Policy

Privacy Policy Ver 2.0, Reviewed April 2026

This Privacy Policy explains how JET TEAM Ltd (“JET TEAM” or “we” or “us”) collects and uses the personal data that you provide to us as part of the JET TEAM service.

JET TEAM is the Controller of your personal data when you provide it directly to us. Where we are given your personal data from an intermediary then Jet Team is the Data Processor. Should you have any questions about this Privacy Policy do contact us. Contact details are included at the bottom of this Policy.

1. Who We Are

Data Controller: JET TEAM Ltd

Registered address: 71–75 Shelton Street, London, WC2H 9JQ, United Kingdom

Company registration: 09789252

ICO Notification number: ZA762797

Contact for data protection enquiries: privacy@jet-team.co.uk

JET TEAM Ltd (‘we’, ‘us’, ‘our’) is registered with the UK Information Commissioner’s Office (ICO) as a data controller. We are committed to protecting the personal data we collect and process in connection with the provision of aviation trip support, flight planning, fuel procurement, and related services.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Client and contact data

  • Names, job titles, and business contact details (email, phone, postal address)
  • Company and aircraft operator information
  • Billing and invoicing details
  • Communication records and correspondence

Crew and passenger data

  • Names and nationalities of flight crew and passengers
  • Passport and travel document details (as required for permit and customs applications)
  • Crew licences and ratings (where required for regulatory filings)

Operational data

  • Aircraft registration, type, and operator details
  • Flight routing, schedule, and fuel uplift information
  • Ground handling and FBO contact details

Website and communications data

  • Name, email address, and message content submitted via website contact forms
  • Standard server log and analytics data (IP addresses, browser type, pages visited) — see Section 8

3. Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR Article 6:

Performance of a contract (Article 6(1)(b)): Processing necessary to deliver our trip support services, including flight planning, permit applications, fuel procurement, and ground handling coordination.

Legitimate interests (Article 6(1)(f)): Processing necessary for our legitimate business interests, including client relationship management, service improvement, security, fraud prevention, and debt recovery, where these interests are not overridden by your rights.

Legal obligation (Article 6(1)(c)): Processing required to comply with regulatory obligations, including those imposed by aviation authorities, HMRC, and other competent bodies.

Consent (Article 6(1)(a)): Where we rely on consent (for example, for non-essential website cookies), we will ask for it separately and clearly. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where we process passport or travel document data (special category-adjacent sensitive data), this is done strictly on the basis of contractual necessity and regulatory compliance.

4. How We Use Your Data

  • Delivering trip support, flight planning, and operational services
  • Processing permit and overflight applications with aviation authorities
  • Coordinating with ground handlers, FBOs, and fuel suppliers on your behalf
  • Sending operational updates, invoices, and service-related communications
  • Managing and recovering outstanding accounts receivable
  • Complying with legal and regulatory requirements
  • Improving our services and internal processes
  • Responding to enquiries submitted via our website

5. International Data Transfers

The nature of aviation trip support means we routinely share operational data (including crew and passenger passport, visa, travel and address information where required) with third-party ground handlers, FBOs, fuel suppliers, and aviation authorities in countries outside the UK. These transfers are necessary for the performance of services you have contracted us to provide, and limited to that deemed absolutely necessary to achieve the task.

Transmitting operational data internationally is an inherent and unavoidable requirement of aviation trip support. Crew lists, passenger manifests, and permit documentation must reach the relevant authorities and handling agents before an aircraft arrives — there is no practical alternative. We work with a worldwide network of agents and partners and it is not operationally feasible to audit every recipient jurisdiction against UK GDPR adequacy standards. We rely upon those agents and partners to comply with the data protection laws applicable in their own countries. Where a transfer is necessary for the performance of services you have requested, we rely on Article 49(1)(b) UK GDPR as the lawful basis for that transfer.

We do not sell personal data to third parties or share it for third-party marketing purposes.

6. How Long We Keep Your Data

Client and operational records: 7 years from the end of the relevant engagement, to comply with HMRC requirements and to defend potential legal claims.

Crew and passenger travel documents: Deleted or securely destroyed once the flight operation is completed and any regulatory reporting obligations are satisfied, unless the client relationship requires ongoing retention.

Website enquiry data: 12 months from the date of the enquiry, unless a client relationship is established.

Unsuccessful business leads: 12 months from last contact.

We review retention periods periodically and will delete data that is no longer needed.

7. Your Rights

Under UK GDPR you have the following rights:

  • Right of access — to request a copy of the personal data we hold about you
  • Right to rectification — to ask us to correct inaccurate data
  • Right to erasure (‘right to be forgotten’) — to ask us to delete your data in certain circumstances
  • Right to restriction — to ask us to restrict processing in certain circumstances
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to object — to object to processing based on legitimate interests or direct marketing
  • Right to withdraw consent — where consent is the basis, you may withdraw it at any time

To exercise any of these rights, please contact us at privacy@jet-team.co.uk. We will respond within one calendar month of receiving your request. We may need to verify your identity before processing the request.

8. Data Protection Complaints

If you have a concern about how we handle your personal data, please contact us first:

Email: privacy@jet-team.co.uk

Post: Data Protection, JET TEAM Ltd, 71–75 Shelton Street, London, WC2H 9JQ

We will acknowledge your complaint within 5 working days and aim to resolve it within 30 days. We will keep a record of all complaints and the actions taken in response.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

9. Cookies and Website Analytics

Our website may use cookies and similar tracking technologies. We will ask for your consent before placing any non-essential cookies (such as analytics or preference cookies) on your device.

Essential cookies necessary for the website to function are placed without consent. You can manage or withdraw cookie consent at any time using the cookie settings on our website.

For full details of the cookies we use, please refer to our Cookie Notice [link].

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These include secure email practices, access controls, and staff awareness of data protection obligations.

We will notify you and the ICO without undue delay if a personal data breach is likely to result in a risk to your rights and freedoms, as required by UK GDPR Article 33.

11. Updates to This Policy

We review this policy at least annually and whenever there are material changes to our processing activities or applicable law. We will bring any significant changes to your attention before they take effect. The version number and effective date at the top of this document indicate when it was last updated.