Privacy Policy

1 Introduction

Welcome to DroneFlightLog. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our drone flight logging service.

2 Information We Collect

2.1 Information You Provide

• Account Information: Email address, first name, last name, organisation (optional)
• Flight Data: Flight logs, drone information, locations, dates, times, weather conditions
• Uploaded Files: DJI drone flight log files you choose to upload
• Battery & Equipment Data: Battery information, maintenance logs, drone specifications
• Project Information: Project names, client details, site locations

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on the platform
• Device Information: Browser type, operating system, IP address
• Location Data: GPS coordinates when you log flights or arrive at sites

3 How We Use Your Information

We use your personal data for the following purposes:

• To provide and maintain our drone flight logging service
• To verify your identity and secure your account
• To store and organize your flight logs and drone information
• To automatically populate flight data (weather, location, date/time)
• To process DJI flight log uploads and provide analysis
• To send you important service updates and account notifications
• To improve our service and develop new features
• To comply with legal obligations and aviation regulations

4 Legal Basis for Processing (UK GDPR)

We process your personal data based on:

• Consent: You have given explicit consent for processing your data
• Contract: Processing is necessary to provide the service you've requested
• Legal Obligation: We may need to retain flight logs to comply with aviation regulations
• Legitimate Interest: To improve and secure our service

5 Data Sharing and Disclosure

• Service Providers: Third-party services that help us operate (e.g., hosting providers, email services)
• Payment Processing: Stripe for processing subscription payments
• Legal Requirements: When required by law or to respond to legal processes
• Aviation Authorities: If required to comply with aviation safety regulations (CAA, EASA)
• With Your Consent: When you explicitly authorize us to share your data

6 Third-Party Services

We use the following third-party services:

• Yr.no: To provide weather data for your flights
• Google Maps: For mapping and location services
• Stripe: For payment processing and subscription management
• TB-Hosting: For website hosting and database services (EU servers)

These services have their own privacy policies governing their use of your information.

7 Data Retention

We retain your personal data for as long as:

• Your account is active
• Needed to provide you with our services
• Required by law (aviation regulations may require flight log retention)
• Necessary to comply with UK CAA or EASA requirements

You can request deletion of your account and data at any time, subject to legal retention requirements.

8 Your Rights (UK GDPR)

Under UK GDPR, you have the following rights:

9 Data Security

We implement appropriate technical and organizational measures to protect your data:

• Password hashing using Argon2ID encryption
• Secure database connections with PDO prepared statements
• SSL/TLS encryption for data transmission (HTTPS)
• Regular security updates and monitoring
• Limited employee access to personal data
• Secure file upload validation and sanitization

10 Cookies and Tracking

We use essential cookies to:

• Maintain your login session
• Remember your preferences
• Ensure security and prevent fraud

11 Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12 International Data Transfers

Your data is stored on servers located in the European Union. If data is transferred outside the UK or EU, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

13 Flight Sharing

When you create a shareable flight link:

• You control what information is shared via the link
• Anyone with the link can view the shared flight data
• You can disable or delete share links at any time
• Shared data does not include your personal account information

14 Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by:

• Posting a notice on our website
• Sending you an email notification
• Updating the "Last updated" date at the top of this page

15 Contact Us

If you have questions about this privacy policy or wish to exercise your rights, contact us:

16 Supervisory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately: