Starflight Aviation Limited (Starflight) is an aircraft charter service provider based in Farnborough in the UK, and New York, Florida, Washington DC, Arizona and Ohio in the United States. Starflight creates unique and bespoke air transport for individuals and businesses to more than 7000 destinations worldwide. We take the protection of the personal data that we process extremely seriously. This Privacy Policy explains how we do this in relation to the operation of our business, as well as your rights under the UK GDPR.
Our head office and Contact Details are as below:
Starflight Aviation Limited
Company number: 02394668
Address: Business Aviation Centre, Farnborough Airport
Farnborough, Hampshire, GU14 6XA
United Kingdom
Telephone: +44 1252 540444
Email: compliance@flystarflight.com
Website: www.flystarflight.com
Starflight is committed to protecting and respecting your privacy.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (known as “anonymous data”).
In order to carry out various activities with you, we process different personal data for different purposes. The personal data we process about you includes:
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain our grounds which allows us to do so.
We may collect, use, store, transfer, and otherwise process the following data about you:
This is information about you that you give us by filling in forms on our website or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you apply or contract for our services, request marketing to be sent to you, when you report a problem with our site, and when you give us feedback. The information you give us may include your first name(s), last name, address, e-mail address, phone number, gender, marital status, date of birth, financial information, identity documentation, information about your physical health or disabilities, and activity information in connection with your engagements with us and your use of our services.
With regard to each of your visits to our website we may also automatically collect technical information including the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version.
Where relevant, we also process information about payments to or from you, and products and / or services you purchase from us.
We may receive personal data about you from various third parties including, for example, your organisation by which you are employed, parties managing your travel details or itinerary, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers.
The personal data we may receive from sources other than you directly includes: first name(s), last name, address, e-mail address, phone number, gender, marital status, date of birth, financial information, identity documentation, information about your physical health or disabilities, and activity information in connection with your engagements with us and your use of our services.
We do not expect to need to collect any information about criminal convictions and offences. If we are obliged to do so at any time, we will only process such data to the minimum extent and for the minimum duration necessary, and as authorised by law, providing such safeguards for your rights and freedoms as may be legally required.
This website is not intended for children, and we do not knowingly collect data relating to children.
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.
This privacy notice sets out the basis on which any personal data is collected about you, or that you provide to us, when you engage with our services, visit our website or otherwise contact us.
We are the controller of the personal data we process. This means that we are responsible for deciding how we collect, use and store information about you.
We are registered with the Information Commissioner’s Office (ICO) under number Z1252421.
How we collect and use your personal data will depend on how you interact with us or the services you use. To better understand how we use your data, please see the role that best describes you.
If you are just browsing our website, we may collect your data using cookies or other tracking technology.
Cookies are small text files that are placed on your device, such as your computer, phone or tablet, when you view pages on our website. These cookies allow us to track some of your browsing preferences and optimise how our website works.
While we are not looking to identify you using cookies as the focus on your device, it may be possible for us to identify you or infer information about you. Unless the cookies are “strictly necessary” to make our website function, we will ask for your consent before they are placed on your device.
For more information on the cookies we use, please read our cookie notice.
| Purpose your data is used | Type of data used | Legal basis |
|---|---|---|
| When you contact us via our website to enquire about our services, we need some information to be able to respond to you. | Name, contact number, email address, company name, details in your message to us | Legitimate interests of responding to your request for information |
| To register you as a new customer. | Name, contact number, email address, company name (where applicable), details in your message to us | Performance of a contract when engaging with private individuals, as well as Legitimate Interests of managing your details as a new customer. Legitimate Interests when engaging with businesses or individuals in their professional capacity, for the purpose of managing new customer data. |
| When you engage our services, we will need some personal data about you to manage our relationship with you and provide our services. | Name, contact number, email address, company name, passport details, DOB, address, health-related or disability information, financial data, details in your message to us | Performance of a contract when engaging with private individuals, as well as Legitimate Interests of managing your details to offer our service. Legitimate Interests when engaging with businesses or individuals in their professional capacity, for the purpose of managing our service with you. |
| When we communicate with you about services you have booked, we need some of your information to manage the communication and service. | Name, email address, contact number | Legitimate interests of informing you about updates in relation to your booked services. |
| When we send you marketing communications to advertise our services, we use some of your data in line with the preferences you have provided in order to send these communications to you. You can object to receiving such marketing communications at any time. | Name, email address, company name (where applicable) | Business individuals: Legitimate Interests of advertising our business and available services. Private individuals: Soft-opt in, in line with UK privacy requirements. |
| If you make a complaint, we will need some information about you to manage and respond to your complaint. | Name, contact number, email address, company name (where applicable) | Legitimate interests of managing your complaint and finding a resolution, in line with our business objectives around the delivery of our services. |
| When you give us feedback about our services, we process some of your data to manage your feedback. | Name, contact number, email address, company name (where applicable), details in your message to us | Legitimate interests of understanding your satisfaction around or services so that we can improve or better manage our operations. |
| When administering or managing the security of our website, some information may be gathered about you. | Identity information, contact details, technical data | Legitimate interests of managing the administration, operation, and security of our website. |
| Purpose your data is used | Type of data used | Legal basis |
|---|---|---|
| When you submit an application for a job opening, or to enquire about a role, we will process your CV and data provided in your application to review your suitability for a role. This includes legally required checks such as right to work checks, and includes various pre-employment activities such as interviews with you. | Name, contact number, email address, CV/resume, right to work status, nationality, details in your message to us | Performance of a contract where we intend to enter into an employment contract with you. Legal obligation where we are required to perform right to work checks or other reviews. |
| If you make a complaint, we will need some information about you to manage and respond to your complaint. | Name, contact number, email address, details in your message to us | Legitimate interests of managing and responding to your complaint. |
We are only able to use your personal data when the law allows us to. This is called the legal basis. Regarding the above purposes for using your data, the legal basis listed for each are explained below:
Consent to You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. To do so please contact us.
Contract to We need to use your data to fulfil a contract you have with us. Alternatively, it’s necessary to use your data because we have asked you to, or you have taken yourself, specific steps before entering that contract.
Legal Obligation to We need to use your data to comply with the law.
Vital Interests to Processing your data is necessary to protect your vital interests or of another person. For example, to prevent you from serious physical harm.
Public Task to Using your data is necessary for the performance of a task carried out in the public interest, or because it is covered by a task set out in law, for example, for a statutory function.
Legitimate Interests to Processing your data is necessary to support a legitimate interest we or another party has, only where this is not outweighed by your own interests.
We are committed to only keeping your personal data for as long as is reasonably necessary to fulfil the purposes for which it was collected, including to provide our services, meet operational requirements, and comply with applicable legal, regulatory, or contractual obligations. We may also retain personal data as necessary to resolve disputes, enforce our agreements, and protect our legal rights. In some cases, longer retention periods may be required by law.
When determining the appropriate retention periods, we take into account factors such as the nature, volume, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which the data is processed, whether those purposes can be achieved by other means, and applicable legal requirements.
When the personal data is no longer required, we will securely delete or anonymise it. Where deletion is not immediately possible (for example, due to backup or archival systems), the personal data will be securely stored and isolated from any further processing until deletion can be carried out. In certain circumstances, you may request that we delete your personal data. Further information about your rights and how to exercise them is set out in this privacy notice.
As with most organisations, we use service providers to help us deliver our services and keep your data secure. When we use these service providers, it is necessary for us to share your personal data with them. This includes the following third parties:
We have agreements in place with all our providers that oblige them to protect your data. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Where we work with our affiliated entity and offices in other locations, some personal data may be shared with employees of these entities where they assist in the fulfilment of services for Starflight Aviation Limited. This is only with employees who are required to know the information to perform their duties.
If we choose to sell, transfer or merge parts of our business or our assets with other parties, this may also involve the sharing of some personal data. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
Our website includes links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy notices. When you leave our website, we encourage you to read the privacy notice of each website you visit.
We may transfer personal data to recipients located outside the United Kingdom and the European Economic Area (“EEA”), including the USA where we have our group company, or where service providers operate.
Where we transfer personal data outside the UK or EEA, we ensure that appropriate safeguards are in place to protect that data in accordance with applicable data protection laws. Depending on the destination and circumstances, this may include one or more of the following mechanisms:
We may transfer personal data to countries or territories that have been recognised by the UK Government or the European Commission (as applicable) as providing an adequate level of protection for personal data.
Where personal data is transferred to a country that has not been deemed to provide an adequate level of protection, we implement appropriate safeguards designed to ensure a level of protection essentially equivalent to that provided in the UK or EEA. These safeguards may include:
You may contact us using the details set out below if you would like further information about the specific safeguards applied to international transfers of your personal data.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered or disclosed in an unauthorised way. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Under applicable data protection laws, including the UK GDPR and EU GDPR, you have certain rights in relation to your personal data. Depending on the circumstances, you may request that we take the following actions:
To exercise any of the rights described above, please contact us at compliance@flystarflight.com
We may ask you to provide additional information where necessary to verify your identity and ensure the security of your personal data.
Whether we are required to fulfil a request will depend on the nature of the request, and why and how we are processing personal data. If we are unable to comply with a request, in whole or in part, we will explain the reasons for our decision, subject to applicable legal restrictions.
You will not usually be required to pay a fee to exercise your rights. However, where a request is manifestly unfounded, repetitive, or excessive, we may charge a reasonable administrative fee or refuse to act on the request.
We aim to respond to all valid requests without undue delay and, in any event, within one month of receipt. If a request is particularly complex or involves multiple requests, we may extend this period in accordance with applicable law, in which case we will inform you and keep you updated on progress.
If you have any questions, comments or requests regarding this privacy notice or the processing of your personal data, please contact us:
Starflight Aviation Limited
Company number: 02394668
Address: Business Aviation Centre, Farnborough Airport
Farnborough, Hampshire, GU14 6XA
United Kingdom
Telephone: +44 1252 540444
Email: compliance@flystarflight.com
Website: www.flystarflight.com
We have also engaged an external Data Protection Officer who assist us with our compliance obligations under UK privacy laws. If you would like to contact our Data Protection Officer directly, please reference Starflight Aviation Limited and use the following details:
DataCo International UK Limited
Suite 1, 7th Floor, 50 Broadway
London, United Kingdom
SW1H 0BL
If you are unhappy with any aspect of this privacy notice, or how your personal data is being processed, please contact us at a first instance. We take our privacy obligations seriously and value your feedback or concerns. When you contact us, we will confirm receipt of your complaint without undue delay and in line with our legal obligations and will investigate and inform you of any outcomes. See our Complaints Procedure available on our website.
If you are still not happy, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
By post: Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF