Privacy Policy

FreelancePilots.uk is operated as a sole trader business based in England, United Kingdom. We are the data controller for personal data collected through this platform.

For data protection enquiries, contact us at: privacy@freelancepilots.uk

We collect the following personal data when you use FreelancePilots:

Account data (all users)

• Full name
• Email address
• Password (stored as a secure hash — we never see your plaintext password)
• Account type (pilot or operator)
• Date and time of account creation
• Date and version of Terms of Service acceptance

Pilot profile data

• Licence type (CPL/ATPL) and issuing authority
• Licence number (stored securely, shared only with operators who contact you)
• Base airport (ICAO code) and city
• Total flight hours and PIC hours
• Type ratings held
• Availability dates and availability status
• Day rate
• Professional biography

Communications data

• Messages sent between Pilots and Operators through the platform messaging system
• Message timestamps and read status

Technical data

• IP address (collected by our hosting and authentication provider)
• Browser type and device information (collected automatically by our infrastructure)
• Login timestamps and session data

We use your personal data for the following purposes and legal bases:

We do not use your personal data for automated decision-making or profiling.

We do not sell your personal data to third parties. We do not share your data with advertisers.

We share your data only with the following categories of third parties, and only where necessary:

• Supabase Inc. — our database and authentication provider. Data is stored on servers within the European Economic Area. Supabase processes data under a Data Processing Agreement compliant with UK GDPR.
• Vercel Inc. — our website hosting provider. Processes data in accordance with their data processing agreement.
• Stripe Inc. — payment processing for operator subscriptions. Stripe is PCI-DSS compliant. FreelancePilots does not store card details.
• Other users of the platform — your pilot profile (excluding your licence number and email) is visible to all logged-in users. Your licence number is shared only when an operator initiates contact.

We may disclose your data to law enforcement or regulatory authorities where required by law.

We retain your personal data for as long as your account is active. If you delete your account:

• Your profile and messages are deleted within 30 days
• Email address and terms acceptance records are retained for 7 years for legal compliance purposes
• Anonymised, aggregated usage data may be retained indefinitely

You can request deletion of your account and data at any time by emailing privacy@freelancepilots.uk

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — you can request a copy of all personal data we hold about you
• Right to rectification — you can correct inaccurate data, and most profile data can be updated directly in your account settings
• Right to erasure — you can request deletion of your data (subject to legal retention obligations)
• Right to restriction — you can request we restrict processing of your data in certain circumstances
• Right to data portability — you can request your data in a machine-readable format
• Right to object — you can object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email us at privacy@freelancepilots.uk. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take reasonable technical and organisational measures to protect your personal data, including:

• Passwords stored using industry-standard hashing (bcrypt via Supabase Auth)
• All data transmitted over encrypted HTTPS connections
• Row-level security policies on our database ensuring users can only access their own data
• Regular security updates to platform dependencies

No system is perfectly secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the ICO as required by UK GDPR.

FreelancePilots uses only essential cookies necessary for the platform to function:

• Authentication session cookie — keeps you logged in. Expires when you sign out or after 7 days of inactivity.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. We do not use Google Analytics or similar services.

FreelancePilots is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will delete it promptly.

For any data protection questions, requests, or concerns:

• Email: privacy@freelancepilots.uk

We aim to respond to all data protection enquiries within 5 working days.