Privacy Policy

Wiltshire Aircraft Maintenance Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our aviation maintenance services, or interact with us. We act as the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may collect and process the following categories of personal data:

• Identity Data: First name, last name, title, and signature.

• Contact Data: Billing address, delivery address, email address, and telephone numbers.

• Aircraft and Technical Data: Aircraft registration mark, serial numbers, make/model, ownership details, logbook records, and maintenance histories. (Note: While aircraft data is technical, it is linked to you as an owner/operator and is handled with the same high level of protection as your personal data).

• Transaction and Financial Data: Details about payments to and from you, bank account details (for processing payments), and details of services you have purchased from us.

• Technical Website Data: Internet protocol (IP) address, browser type and version, time zone setting, operating system and platform, and other technology on the devices you use to access our website.

We use different methods to collect data from and about you, including:

• Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms on our website, sending us emails, calling us, or speaking with our team in the hangar.

• Aviation Documentation: When you submit aircraft logbooks, airworthiness documents, or flight logs to us to enable us to perform maintenance and issue a Certificate of Release to Service (CRS).

• Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns via cookies and similar technologies.

We will only use your personal data when UK law allows us to. Most commonly, we will use your personal data in the following circumstances:

​

1. Customer Registration & Profile Setup

• Purpose & Activity: To register you as a new customer and set up your specific aircraft profile.

• Types of Data Processed: Identity, Contact, and Aircraft details.

• Lawful Basis for Processing: Performance of a contract with you.

2. Maintenance Services & Financial Management

• Purpose & Activity: To perform requested maintenance services, manage your payments, and recover any outstanding monies owed to us.

• Types of Data Processed: Identity, Contact, Aircraft, and Financial details.

• Lawful Basis for Processing: Performance of a contract with you, alongside our legitimate interests to recover outstanding debts.

3. Regulatory & Aviation Safety Compliance

• Purpose & Activity: To comply with strict aviation safety regulations, which includes maintaining Civil Aviation Authority (CAA) airworthiness records and issuing Certificates of Release to Service (CRS).

• Types of Data Processed: Identity, Contact, and Aircraft details.

• Lawful Basis for Processing: Legal obligation (specifically to comply with Aviation Safety Regulations and CAA requirements).

4. Relationship Management & Safety Updates

• Purpose & Activity: To manage our ongoing relationship with you. This includes notifying you of critical safety bulletins, service updates, or changes to our terms and conditions.

• Types of Data Processed: Identity, Contact, and Aircraft details.

• Lawful Basis for Processing: Performance of a contract, fulfilling a legal obligation, and our legitimate interests in keeping our customer records accurate and updated.

5. Business Administration & IT Security

• Purpose & Activity: To administer, run, and protect our business and website (including troubleshooting, data analysis, and ongoing system maintenance).

• Types of Data Processed: Technical, Identity, and Contact details.

• Lawful Basis for Processing: Our legitimate interests to run our business effectively, maintain robust IT security, and prevent fraud.

We do not sell your personal data. We may share your personal data with selected third parties only where necessary:

• Regulatory Authorities: The Civil Aviation Authority (CAA) or other relevant aviation safety regulators, where we are legally required to report or log maintenance actions.

• Professional Service Providers: Technical software providers (e.g., CAMO tracking platforms), IT and system administration services, and payment processors.

• Professional Advisers: Solicitors, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.

We store and process your data primarily within the United Kingdom. If we must transfer your data outside the UK (for example, if utilising an international aircraft manufacturer's tracking system based in the US or EU), we ensure a similar degree of protection is afforded to it by implementing approved safeguards, such as Standard Contractual Clauses (SCCs).

We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed in an unauthorised way. In addition, we limit access to your personal data to those employees, agents, and contractors who have a business need to know.

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

Important Aviation Compliance Note: Under UK aviation safety laws, certain technical aircraft records and maintenance logs must be retained for specific, legally mandated periods (often up to several years after an aircraft or component has been permanently withdrawn from service). We will retain corresponding personal data associated with those records to comply with our statutory aviation duties.

Under the UK GDPR, you have rights in relation to your personal data, including the right to:

• Request access to your personal data (a "data subject access request").

• Request correction of incomplete or inaccurate data we hold about you.

• Request erasure of your personal data (subject to legal or aviation regulatory obligations that may require us to keep it).

• Object to processing of your personal data where we are relying on a legitimate interest.

• Request restriction of processing of your personal data.

• Request the transfer of your personal data to you or a third party.

• Withdraw consent at any time where we are relying on consent to process your data.

If you wish to exercise any of these rights, please contact us using the details below. You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Full Name of Legal Entity: Wiltshire Aircraft Maintenance Ltd

• Email Address: wamltd@outlook.com

• Postal Address: Wiltshire Aircraft Maintenance Ltd, Popham Airfield, Coxford Down, Micheldever, Hampshire, SO21 3BD, United Kingdom

• Telephone: 07483 447 417