Privacy notice

Last updated 16 October 2026.

• Who we are
• What we collect and why
• Lawful bases
• If you link to a flying school
• Sharing alerts
• Certificates
• Who else handles your data
• Transfers outside the UK
• How long we keep it
• Your rights
• Questions and complaints
• Cookies and storage
• If you’re under 18
• Changes

Who we are

AeroBase UK PPL (“AeroBase”, “we”) is a trading name of Bravo Lima Aviation Limited, a company registered in England and Wales (company number 15993361). Bravo Lima Aviation Limited is the controller of the personal data described here: we decide what is collected and how it is used.

• Contact: Kristen Dodds, director
• Email: admin@aerobase.uk
• Phone: 07943 061981

What we collect and why

Data	Why
Your name, email address and password (stored only in scrambled, hashed form by our hosting provider)	To create your account and log you in.
Membership details: status (pending, active, expired), plan, start and end dates, your linked school (if any), and your age group if you tick “I’m under 18”	To give you the access you’ve paid for, and to apply extra privacy settings for under-18s.
Study progress: slides viewed, question bank results and scores, subjects passed, weakest topics	To show your progress on your dashboard, work out certificates and, if you link to a school, show it to your school.
Certificates: ID, subject, date and your name	To issue certificates and let people check them (see Certificates).
Ask an Instructor questions: your name, email, the subject and your question	So an instructor can answer you by email.
Sharing-alert signals (see Sharing alerts)	To spot accounts being shared, which protects paying members and the service.
Messages you send us by email or phone	To reply and help you.
Basic server logs kept by our hosting provider (such as IP address and pages requested)	To run the website securely and see overall visitor numbers. These statistics don’t use cookies.

We don’t sell your data, we don’t use advertising or tracking cookies, and we don’t make any decision with legal or similarly significant effects about you by automated means.

Please don’t put sensitive information (such as health or medical details) into Ask an Instructor or other messages. We don’t need it.

Lawful bases

• Contract: your account, access, progress, weakest topics, certificates, Ask an Instructor, and showing your progress to the school you chose to link to. We need these to provide the service you signed up for.
• Legitimate interests: sharing alerts (preventing account sharing and misuse), keeping the site secure, and replying to people who contact us. We keep this data to a minimum and you can object (see Your rights).
• Legal obligation: keeping business and tax records.

We don’t send marketing emails. If that ever changes, we’ll follow the law on electronic marketing and every message will let you opt out.

If you link to a flying school

If you enter a school code (at sign-up, on your dashboard or on your account page), or your school invites you, your account is linked to that school. The school’s admin can then see: your name and email address; your membership status (for example active or pending, but no payment details); when you joined and when you last logged in; how much of the presentations you have seen, how many subjects you have started and when you last studied; your question bank results (subjects passed and passes towards each subject); your weakest question bank topics; and your completion certificates.

Your school can’t see your password, your individual answers, your Ask an Instructor questions, your sharing-alert data or any payment details.

You can unlink yourself at any time from your dashboard or account page, and the school can unlink you too. After unlinking, the school no longer sees your progress. Your own account and progress stay as they are.

Each school uses what it sees as a separate controller, for your training, under our school terms. If a school shows its own logo and colours on your pages, that’s just branding: it doesn’t change who sees your data.

Sharing alerts

Each account is for one person. When you open members’ content, we record:

• the time;
• a short scrambled code for your network (made from part of your IP address; we never store the IP address itself);
• your country, plus the approximate city and location (to about 10 km). If you’ve told us you’re under 18, we record your country only;
• a rough device type, such as “iPhone Safari”.

These records are deleted after 7 days (and we keep at most 60 per member). If the pattern looks like several people are sharing one login, our director gets an email and checks it by hand. Nothing is blocked automatically, and we’ll contact you before taking any action.

Certificates

Each certificate has an ID. Anyone who has the ID can check it on our website and see the name, subject and date. For members who’ve told us they’re under 18, the check shows initials only. To withdraw a certificate from public checking, email admin@aerobase.uk.

Who else handles your data

We use these service providers (“processors”). They handle data only on our instructions:

• Netlify (USA): website hosting, accounts and logins, forms, server functions and storage.
• Google Workspace (Google): our email at admin@aerobase.uk, including Ask an Instructor questions and alerts.
• Stripe: card payments, if and when we start taking payments online. Your card details would go to Stripe, not to us.
• Tawk.to: live chat, if and when we add it. We’ll update this notice, and ask for your consent where needed, before it goes live.

Your school (if you link to one) sees the data listed above as a separate controller. We may also share data if the law requires it.

The website’s fonts are hosted on our own site, so loading a page doesn’t send your details to a font provider.

Transfers outside the UK

Some of our providers are in the USA or store data there. Where a provider is certified under the UK–US data bridge (the UK extension to the EU–US Data Privacy Framework), we rely on that. Otherwise we rely on the UK’s International Data Transfer Agreement or Addendum in the provider’s data processing terms. Email us for more details.

How long we keep it

• Your account and progress: while you’re a member, then up to 24 months after your membership ends (so your progress is still there if you come back). After that we delete it. You can ask us to delete it sooner.
• Sharing-alert signals: 7 days.
• Ask an Instructor questions and other emails: up to 2 years.
• Payment and invoice records: 6 years (needed for tax).
• The certificate register: for as long as we offer certificate checking, unless you ask us to withdraw a certificate.

Your rights

You have the right to:

• get a copy of your data;
• have wrong data corrected;
• have your data deleted;
• restrict how we use it;
• object to our use of it under legitimate interests (for example sharing alerts);
• get the data you gave us in a format you can reuse.

To use any of these, email admin@aerobase.uk from your account email. The account page has links that open a pre-written email. We reply within one month. We may ask you to confirm who you are.

Questions and complaints

Please contact us first: admin@aerobase.uk or 07943 061981. We’ll acknowledge a data protection complaint within 30 days and look into it without undue delay.

You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

Cookies and storage

We use only what’s strictly necessary for the site to work, so there’s no cookie banner:

• nf_jwt cookie: keeps you logged in (lasts up to 30 days).
• Local storage in your browser: your login session and the progress and question bank results saved on your device.
• Session storage: short-lived things, such as where to go after logging in and your school’s branding.

We don’t use analytics or advertising cookies. If we ever add something that isn’t strictly necessary (for example live chat), we’ll ask for your consent first.

If you’re under 18

Changes

We’ll update this page if anything changes and show the date at the top. If a change is important, we’ll tell members by email.