Privacy Policy
This policy explains how Aircraft Program collects, uses, stores, and protects your personal data.
We are committed to being transparent about how we use your data and to protecting your privacy rights under UK GDPR and the Data (Use and Access) Act 2025.
1. Who We Are and How to Contact Us
Moon Jet Group Ltd t/a Aircraft Program ("Aircraft Program", "we", "us", "our") is the data controller for the personal data we process. We are registered in England and Wales.
| Detail | Information |
|---|---|
| Data Controller | Moon Jet Group Ltd (Company No. 15121199) trading as "Aircraft Program" |
| support@aircraftprogram.com | |
| Telephone | +44 7402 465 194 |
| Registered Office | Rmt Accountants & Business Advisors Ltd, Gosforth Park Avenue, Newcastle Upon Tyne, NE12 8EG |
| Data Complaints | support@aircraftprogram.com — we will respond within 30 days |
2. What Personal Data We Collect
We collect personal data in the following categories. We only collect what we genuinely need to provide the service.
2.1 Data you give us directly
| Category | Specific Data | When Collected |
|---|---|---|
| Identity | Full name, job title, company name | At enrolment or contact |
| Contact details | Email address, telephone number, postal address | At enrolment or contact |
| Credentials | Platform login email and password (stored encrypted) | At account creation |
| Aircraft data | Registration (tail number), type/variant, serial number, engine specifications and serials, year of manufacture, home airport, airframe hours, cycles, modifications or STCs | At enrolment and profile updates |
| Maintenance | AMO contact details, maintenance engineer contacts, emergency phone numbers | At enrolment — Stage 2 verification |
| Insurance | Hull insurance provider name and policy reference | At enrolment — Stage 2 verification |
| AOG case data | Fault description, ATA chapter, location, urgency level, part requirements, supporting files | At case submission |
| Payment data | Card details processed through Stripe. We do not store full card numbers locally. | At subscription checkout |
2.2 Data we generate about you
- Parts Passport: Sourcing history records including part numbers, serials, and documentation release files.
- Case records: Sourcing updates, supplier RFQs, pricing metrics, and outcomes.
- Platform activity: Log-in logs, download audits, and dashboard interactions.
- Fleet intelligence data: Anonymized and aggregated market signals for aggregate planning.
2.3 Data collected automatically
When you visit our site, our infrastructure may automatically collect your IP address, browser type, pages visited, referring URLs, and device type. This is processed under the analytics exception introduced by the Data (Use and Access) Act 2025.
3. Why We Use Your Data and Our Legal Basis
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| AOG desk operations | Identity, contacts, aircraft specifications, cases | Contract performance (Art. 6(1)(b)) |
| Billing & payments | Identity, contacts, billing details via Stripe | Contract performance (Art. 6(1)(b)) |
| Parts Passport | Aircraft details, case files, certifications | Contract performance (Art. 6(1)(b)) |
| Supplier RFQs | Aircraft tail, part request specs | Contract performance / Agency (Art. 6(1)(b)) |
| Security auditing | IP addresses, activity logs | Legitimate interests (Art. 6(1)(f)) |
4. Who We Share Your Data With
We share details only to the minimum extent required. We do not sell your personal data.
| Recipient | What we share | Why |
|---|---|---|
| Parts Suppliers | Aircraft registration, engine type, part details, airport location | To source parts as your disclosed agent |
| Stripe | Transaction metadata | Secure payment processing |
| Freight providers | Delivery address, part weight/dims | Logistics & shipping dispatch |
4.1 International Data Transfers
When sourcing parts globally (particularly from the US), this may constitute a transfer of data to a third country. We manage this via the UK International Data Transfer Agreement (IDTA) and the UK-US data bridge arrangement.
5. How Long We Keep Your Data
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Identity | 7 years from end of subscription | UK tax and statutory record-keeping |
| Aircraft profiles | 7 years from end of subscription | Financial and verification audits |
| AOG Case files | 7 years from date of case closure | Limitation period for potential claims |
| Parts Passport | 12 months after subscription ends | Airworthiness trace availability |
6. Your Rights Under UK GDPR
You have the right to request access to, rectification of, or erasure of your personal data. You can also request data portability.
| Your Right | What it means | How to exercise it |
|---|---|---|
| Right of Access | Receive a copy of the data we hold (Subject Access Request) | Email support@aircraftprogram.com with "Subject Access Request" |
| Right to Rectify | Request corrections to inaccurate records | Edit inside your profile or email us |
| Right to Erasure | Ask us to delete your data (subject to legal retentions) | Email support@aircraftprogram.com |
6.1 Data Protection Complaints
From 19 June 2026, under the Data (Use and Access) Act 2025, you may submit a formal complaint by emailing support@aircraftprogram.com with the subject line "Data Protection Complaint". We will acknowledge within 5 working days and respond substantively within 30 days. You also maintain the right to complain to the ICO (ico.org.uk).
7. How We Protect Your Data
- Encryption in transit: All data is encrypted using TLS (HTTPS).
- Encryption at rest: Databases are encrypted on our platform infrastructure.
- Access controls: Restricting access to authorized operations controllers only.
- Stripe processing: Payment card details are handled entirely by Stripe (PCI DSS Level 1).
8. Cookies and Website Technologies
In line with ICO guidance, we operate cookies as follows:
- Strictly Necessary: Session management and security. Cannot be turned off.
- Analytics: Aggregate, non-identifying traffic patterns under the Data (Use and Access) Act 2025 exception.
- Preference: Remembering your UI theme and selections.
9. General Provisions
9.1 Children's Data
We do not knowingly collect personal data from children under the age of 18.
9.2 Policy Changes
We will notify subscribers of any material changes to this policy by email at least 30 days before they take effect.
9.3 Contact Information
For any privacy-related queries, email support@aircraftprogram.com or call +44 7402 465 194.