Privacy Policy

Effective Date: September 16, 2025
Last Updated: September 16, 2025

SkyForgeLabs (“we”, “our”, “us”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our website, place an order, or engage with our services. It also describes your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

When you use our website or rent equipment from us, we may collect the following categories of information:

1.1 Personal Identification Data

  • Full name, date of birth, and contact details (email address, phone number, residential or billing address).
  • Government-issued identification documents (if required for verification).
  • Civil Aviation Authority (CAA) Flyer ID and related licensing details.

1.2 Insurance and Eligibility Data

  • Proof of insurance policy details, including provider, coverage limits, duration, and insured name.
  • Information linking your Flyer ID, insurance details, and order name for compliance purposes.

1.3 Payment and Transaction Data

  • Billing information (collected and processed securely through third-party providers such as card processors).
  • Transaction history of rentals, deposits, fees, and refunds.

1.4 Technical and Website Usage Data

  • IP address, browser type, device type, operating system, and access times.
  • Pages visited, time spent on the site, and referral URLs.
  • Cookies or similar technologies (see Section 7: Cookies and Tracking).

1.5 Communication Data

  • Records of correspondence when you contact us by email, web form, or phone.
  • Customer support inquiries and any documents you provide to resolve an issue.

2. How We Use Your Information

We process your personal data only where lawful and necessary. Uses include:

  • To Provide Services: Process and fulfill rental orders, confirm bookings, arrange delivery/collection, and manage returns.
  • To Verify Eligibility: Ensure compliance with UK drone operation laws by checking Flyer IDs, Operator IDs, and insurance policies.
  • To Manage Payments: Process deposits, payments, refunds, and apply late/damage fees where applicable.
  • To Communicate With You: Send order confirmations, rental reminders, return instructions, and important updates.
  • To Improve Our Website: Monitor usage patterns to improve design, functionality, and security.
  • To Meet Legal Obligations: Retain necessary records for tax, insurance, and compliance with UK aviation regulations.
  • To Prevent Misuse: Detect and prevent fraud, unauthorized use, or illegal activities involving drones.

We will not use your information for unrelated marketing purposes without your explicit consent.

3. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

  • Contractual necessity: Processing data to fulfill your rental agreement.
  • Legal obligation: Retaining records as required by law (e.g., financial, insurance, aviation compliance).
  • Legitimate interests: Fraud prevention, service improvement, and ensuring safe drone operations.
  • Consent: For optional uses such as newsletters or promotional communications (if you choose to opt in).

4. Sharing Your Information

We do not sell or trade your personal information. We may share your data only with:

  • Service Providers: Couriers, IT support, cloud storage, and payment processors who assist in providing our services.
  • Insurance Providers: If needed for claim verification in case of damage, loss, or liability.
  • Legal and Regulatory Bodies: If required by law or to enforce our Terms and Conditions.
  • Professional Advisors: Accountants, auditors, or legal counsel for business compliance and protection.

All third parties are required to handle your information securely and only for the agreed purposes.

5. Data Retention

We keep your personal data only as long as reasonably necessary:

  • Rental records, insurance verification, and invoices: 6 years (for accounting and legal purposes).
  • ID verification documents: 90 days post-rental, unless required longer for ongoing disputes.
  • Communications (emails, support): Up to 2 years for service history and dispute resolution.
  • Technical/cookie data: Retained in line with our cookie policy (see Section 7).

Once retention periods expire, data is securely deleted or anonymised.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data where it is no longer necessary.
  • Restriction: Limit processing under certain conditions.
  • Data Portability: Request transfer of your data to another provider.
  • Objection: Object to processing based on legitimate interests.
  • Withdrawal of Consent: Where consent is relied on, you can withdraw it at any time.

To exercise these rights, contact us at [Insert Contact Email]. We may require identity verification before fulfilling requests.

If you are unsatisfied, you may lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

7. Cookies and Tracking

SkyForgeLabs uses cookies to improve site performance and user experience. Cookies help us:

  • Keep you signed in during the booking process.
  • Remember your rental preferences.
  • Collect analytics on site usage.

You can disable cookies in your browser settings, but some features of our site may not function properly.

8. Data Security

We implement strong technical and organisational measures to protect your data, including:

  • SSL encryption for data transmission.
  • Secure third-party payment gateways (we do not store full card details).
  • Restricted access to customer information within our systems.
  • Regular backups and monitoring of IT infrastructure.

While we work hard to protect your data, no system is 100% secure, and you use our services at your own risk.

9. International Transfers

Your data is generally stored and processed in the UK. If we use service providers located outside the UK (e.g., cloud storage or payment processors), we ensure your data is protected by appropriate safeguards such as Standard Contractual Clauses or UK adequacy decisions.

10. Children’s Privacy

SkyForgeLabs services are not intended for individuals under 18. We do not knowingly collect data from minors. If we become aware of such collection, we will delete the data immediately.

11. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, business practices, or technology. Updates will be posted on this page with the date of revision. Significant changes may also be communicated directly by email.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

SkyForgeLabs
Email: info@skyforgelabs.co.uk
Phone: +44 749 330 2778
Address: 16A Brook Parade, High Road, Chigwell, Essex IG7 6PQ