Privacy Policy

1. Introduction

Airside Labs ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at airsidelabs.com and use our aviation AI testing and compliance services.

We are registered with the UK Information Commissioner's Office (ICO) under certificate number ZC023940. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account on our platform
• Subscribe to our newsletter or email updates
• Request a demo or consultation
• Contact us through our website forms
• Download our white papers or resources

This information may include:

• Name and job title
• Email address
• Company or organization name
• Phone number (if provided)
• Account credentials

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• Browser type and version
• Operating system
• IP address (anonymized where possible)
• Pages visited and time spent on pages
• Referring website or source
• Device type and screen resolution

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Process and manage your account registration
• Send you relevant product updates, newsletters, and marketing communications (with your consent)
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve our website and services
• Comply with legal obligations and protect our rights
• Detect and prevent fraud or security incidents

4. Legal Basis for Processing (GDPR)

Under the UK GDPR and EU GDPR, we process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: Where processing is necessary to comply with a legal obligation

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your browsing activity. These include:

• Essential Cookies: Required for the website to function properly
• Analytics Cookies: Help us understand how visitors interact with our website (Google Analytics)
• Functional Cookies: Remember your preferences and settings

You can control cookies through your browser settings. However, disabling certain cookies may affect your experience on our website.

6. Data Sharing and Third Parties

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (hosting, email services, analytics)
• Business Partners: With your consent, for joint marketing initiatives
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Employee training on data protection

We hold UK Cyber Essentials certification, demonstrating our commitment to cybersecurity best practices.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, it is securely deleted or anonymized.

9. Your Rights

Under applicable data protection laws, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another organization
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided below.

10. International Data Transfers

Your information may be transferred to and processed in countries outside the UK and European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by relevant authorities.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.