Privacy Policy
1. Data Controller Identification
The data controller for personal information collected through elite-aircraft.net is:
- Operator: Elite Aircraft
- Contact email: privacy@elite-aircraft.net
- Mailing address: Elite Aircraft, c/o Privacy Office, 548 Market Street, #64123, San Francisco, CA 94104, USA
- Data Protection Officer: Not required; privacy inquiries are handled by the address above.
2. Categories of Data Collected
| Category | Examples | Source |
|---|---|---|
| Identifiers | Full name, email address, phone number | Contact form submissions |
| Commercial information | Aircraft interest (listing slug, inquiry notes) | Contact form submissions |
| Internet activity | IP address, browser type, pages viewed, referring URL, timestamp | Server logs & cookies |
| Geolocation data | Approximate city/region derived from IP address | Server logs |
| Device information | User-agent, operating system, screen resolution | Browser |
We do not knowingly collect payment card data or sensitive personal information (e.g., SSN, biometric, health, precise geolocation). Transactions are closed off-platform with licensed aviation brokers and escrow agents.
3. Purposes of Processing & Legal Basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Respond to inquiries about aircraft | Identifiers, commercial information | Contract (pre-contractual steps at your request) |
| Operate and secure the Service | Internet activity, device info | Legitimate interest (security, fraud prevention) |
| Site analytics (aggregate) | Internet activity, approximate geolocation | Consent (where required) / legitimate interest |
| Comply with legal obligations | Any of the above | Legal obligation |
| Marketing emails (if opted-in) | Identifiers | Consent (revocable at any time) |
4. Third-Party Sharing
We share personal information only with:
- Aircraft sellers and their brokers — contact details from inquiries you submit, only for the listing you inquired about.
- Service providers under contract — web hosting (currently self-hosted / provider to be disclosed on request), email delivery (SMTP provider), and error monitoring. These providers process data only on our instructions.
- Legal and regulatory authorities — when required by law, subpoena or to protect our rights, users or the public.
We do not sell or share personal information for cross-context behavioral advertising.
5. International Data Transfers
Our primary data processing is located in the United States. If you access the Service from outside the United States, your personal information will be transferred to, and processed in, the United States. Where transfers involve jurisdictions with data-protection requirements different from your own, we rely on appropriate safeguards (including Standard Contractual Clauses where applicable).
6. Retention Periods
- Contact form submissions: retained for 24 months after last contact, then deleted or anonymized.
- Server access logs: retained for 90 days, then deleted.
- Email correspondence: retained for 36 months after the last exchange.
- Marketing subscription records: retained until you unsubscribe, plus 24 months for proof-of-consent.
7. CCPA / CPRA Rights (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:
- Right to Know — request categories and specific pieces of personal information we have collected about you.
- Right to Delete — request deletion of your personal information, subject to limited legal exceptions.
- Right to Correct — request correction of inaccurate personal information.
- Right to Opt-Out of Sale or Sharing — we do not sell or share for cross-context behavioral advertising; you can confirm this at any time.
- Right to Limit Use of Sensitive Personal Information — we do not knowingly collect sensitive PI.
- Right to Non-Discrimination — we will not deny service, charge different prices or provide a different level of service for exercising your rights.
To exercise any of these rights, email privacy@elite-aircraft.net with "CCPA Request" in the subject line. We will verify your identity using information you have previously provided (email address on record) and respond within 45 days.
8. Children's Data (COPPA)
The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information through the Service, contact privacy@elite-aircraft.net and we will delete it promptly.
9. "Do Not Sell or Share My Personal Information"
We do not sell or share personal information as defined by the CCPA/CPRA. A permanent opt-out is therefore effectively in place by default. If this practice ever changes, a conspicuous "Do Not Sell or Share" link will appear on every page and at this anchor.
10. Security Measures
We use industry-standard administrative, technical and physical safeguards to protect personal information, including HTTPS/TLS in transit, access-controlled backend systems, the principle of least privilege for staff access, and periodic review of third-party processors. No internet system is 100% secure; we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Version" and "Last Updated" fields at the top of this page will reflect any change. Material changes will be highlighted on the homepage for at least seven (7) days.
12. Contact
Privacy questions and CCPA requests: privacy@elite-aircraft.net · or submit via the contact form.
See also: Terms of Use · Cookie Policy