Buddiesmeadowrel Contact Desk
LEGAL COMPLIANCE // PRIVACY FRAMEWORK

Privacy Policy

Effective Date: January 1, 2026. This policy outlines how Buddiesmeadowrel Aviation Insights Ltd. processes, protects, and governs user information collected via buddiesmeadowrel.boats.

1. Data Controller Information

Buddiesmeadowrel Aviation Insights Ltd. ("Buddiesmeadowrel", "we", "us", or "our") acts as the Data Controller under the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We operate the engineering research resource located at buddiesmeadowrel.boats.

Corporate Identification:
Legal Entity: Buddiesmeadowrel Aviation Insights Ltd.
Company Registration Number: SC692144
Registered Address: 14 St. Andrew Square, Edinburgh, EH2 2AF, United Kingdom
Data Protection Officer Contact: [email protected]

2. Categories of Data Collected

We collect personal and technical telemetry strictly necessary to fulfill technical queries and maintain site security:

  • Direct Communications Data: When you submit an inquiry through our technical contact interface, we collect your full name, professional organization, email address, topic interest classification, and the verbatim contents of your message.
  • Technical Network Telemetry: Automated server logs capture IP addresses (pseudonymized at rest), browser user-agent tokens, referring URLs, operating system characteristics, and timestamped page request logs.
  • Consent Preferences: Local storage flags record user selections regarding cookie acceptance or refusal.

3. Legal Bases for Data Processing

We process personal data solely in accordance with Article 6 of the UK GDPR / EU GDPR under the following legal bases:

  • Contractual / Pre-Contractual Steps (Art. 6(1)(b)): Responding to user requests, technical specifications reviews, and engineering advisory correspondence initiated through our contact portal.
  • Legitimate Interests (Art. 6(1)(f)): Maintaining network integrity, debugging client-side rendering faults, preventing automated spam submissions, and assessing aggregated readership patterns across our documentation modules.
  • Consent (Art. 6(1)(a)): Executing non-essential browser analytics cookies where affirmative opt-in consent is recorded via our cookie consent banner.

4. Third-Party Data Processors

We do not sell, rent, or trade personal data. We utilize vetted third-party service providers bound by strict Data Processing Agreements (DPAs) for operational delivery:

  • Hosting & Content Delivery: Cloud infrastructure providers operating within the European Economic Area (EEA) and the United Kingdom under ISO 27001 certified security standards.
  • Email Routing Infrastructure: Secure SMTP relay vendors for routing technical inquiries directly to our Edinburgh engineering desk.

5. International Data Transfers

If technical logs or correspondence transit outside the UK or EEA, transfers are governed by UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses (SCCs), accompanied by rigorous transfer impact assessments to guarantee an essentially equivalent standard of protection.

6. Data Retention Protocols

Technical server access logs are retained on rotating 30-day schedules and permanently purged thereafter unless required for forensic investigation of malicious activity. Inquiries submitted through our contact form are stored in our secure email archive for a maximum of 24 months to maintain technical context for continuing engineering dialogues, after which they are irreversibly deleted.

7. Statutory User Rights (GDPR & CCPA)

Depending on your jurisdiction, you possess explicit statutory rights regarding your personal information:

  • Right of Access: You may request a confirmation of processing and a copy of your personal data.
  • Right to Rectification: You may demand correction of inaccurate or incomplete personal records.
  • Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal records where no overriding legal basis for retention persists.
  • Right to Restriction and Objection: You may restrict processing or object to processing carried out under legitimate interest grounds.
  • Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format.
  • California Consumer Privacy Act (CCPA): California residents hold the right to know the categories of data collected, request deletion, and opt out of any data sharing (we do not sell personal information).

To exercise any of these rights, submit your written request to our Data Protection Desk at [email protected]. We respond to all verified requests within thirty (30) calendar days without fee.

8. Supervisory Authority Inquiries

If you believe our data handling practices breach applicable data protection legislation, you hold the right to lodge a formal complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or your local European supervisory authority.