Privacy notice

This notice explains what personal data AeroParts Network Limited collects when you visit this website, contact us, or use AeroParts Network, why we collect it, and what rights you have.

1Who we are

AeroParts Network Limited operates AeroParts Network, a platform that helps UK Part-145 maintenance organisations source components and verify airworthiness documentation.

We have not appointed a Data Protection Officer. Given our size and the nature of our processing we do not believe one is required under Article 37 of the UK GDPR, and this position will be reviewed as we grow.

2When we are the controller, and when we are not

We are the controller for personal data about website visitors, people who contact us, and individual users who hold accounts on the platform. We are a processor for personal data that a customer organisation puts into the platform, including names and authorisation references of certifying staff that appear on release certificates uploaded by that customer.

3What we collect

When you visit this website

Nothing that identifies you, by design. This site sets no cookies, runs no analytics, and loads no third-party trackers or advertising pixels. Our hosting provider keeps standard server logs for security and fault diagnosis.

When you contact us

Your name, work email address, organisation, job role if you give it, and whatever you choose to put in your message.

When you use the platform

• Account data - name, work email, organisation, role and permissions, and authentication records.
• Activity records - requirements viewed, proposed, approved or rejected, and when. These form the audit trail.
• Content you upload - including release certificates. A UK CAA Form 1, EASA Form 1 or FAA 8130-3 may contain the name and authorisation number of an authorised signatory in Block 14. We process it on your instruction as your processor.

4Why we process it, and our lawful basis

Where we rely on legitimate interests we have considered whether our interest is overridden by your rights. You can ask us for that assessment and you can object at any time.

5Who we share it with

We do not sell personal data, share it with advertising networks, or disclose one customer's data to another customer. We use a small number of service providers who process data on our behalf and are listed in Annex 3.

We may disclose data where legally required, for example to the UK Civil Aviation Authority, a court, or a regulator acting within its powers.

6Where your data is held

Platform data is intended to be hosted in the United Kingdom, London region. If a provider outside the UK is ever needed, an appropriate transfer mechanism will be put in place first and Annex 3 will be updated.

7How long we keep it

8Automated decision-making

AeroParts Network ranks and routes candidate components using a scoring process applied to components and organisations, not individuals. No decision producing legal or similarly significant effects concerning an individual is taken solely by automated means. A human remains in the loop for acceptance of any component for fitment.

9Your rights

Under the UK GDPR you have the right to be informed; obtain a copy of your data; have inaccurate data corrected; have data erased in certain circumstances; restrict processing; data portability; object to processing based on legitimate interests; and withdraw consent where consent is the basis.

To exercise any of these rights, email founder@aeropartsnetwork.com. We will respond within one month.

10Complaints

Please raise any concern with us first. You also have the right to complain to the Information Commissioner's Office at any time.

11Changes to this notice

If we make a material change we will update the version and date at the top and, for changes affecting platform users, tell customers by email at least 30 days before the change takes effect.