Who this notice applies to
This draft covers visitors to the LIFTGRID website, people who send a mission enquiry, client and supplier contacts, landowners, site contacts and other people whose details are needed to assess or deliver an operation.
Before public launch, this section must identify the incorporated controller by its full legal name, company number, registered office and privacy contact address.
Information we may collect
- Identity and business contact details
- Mission-enquiry details, including locations, cargo, dates and site contacts
- Client, supplier and contract administration records
- Website security, device and essential technical logs
- Operational records where a person is named in a site, crew or safety document
- Correspondence, complaints and rights requests
Why we use it and our lawful bases
We expect to use personal information to respond to enquiries and take steps towards a contract; perform and administer contracts; meet aviation, safety, insurance, tax and company-law obligations; and pursue legitimate interests in operating, securing and improving the business.
Consent will be used where the law requires it, including for optional marketing or non-essential cookies. We will record the applicable purpose and lawful basis before processing begins.
Who may receive information
- Website, email, cloud and business-system providers acting under contract
- Professional advisers, insurers and brokers
- Aviation authorities, airspace bodies and public authorities where required
- Clients, landowners, subcontractors and site operators where necessary for an operation
- Law enforcement, courts or regulators where disclosure is legally required
International transfers
Some technology providers may process information outside the UK. Before launch, LIFTGRID will identify those transfers and use an applicable safeguard, such as UK adequacy regulations or approved contractual clauses, where required.
Retention and security
Information will be kept only for as long as the purpose, contract, safety record, insurance or legal obligation requires. A retention schedule will be adopted before live operations.
Access control, multi-factor authentication, secure suppliers, backup, device management and an incident-response process will be proportionate to the information and operational risk.
Your rights
- Access your personal information
- Correct inaccurate or incomplete information
- Request erasure or restriction where the law allows
- Object to processing based on legitimate interests or direct marketing
- Receive portable information where applicable
- Withdraw consent without affecting earlier lawful use
- Complain to the UK Information Commissioner’s Office
Contact and complaints
Privacy questions and rights requests can be sent to hello@liftgrid.co.uk. The incorporated controller and postal address must be added before trading begins. You may also complain to the Information Commissioner’s Office at ico.org.uk if you believe your information has been handled unlawfully.