Privacy Policy

Last updated: 9th November 2024

1. Introduction

Welcome to FlightTimeCalendar ("we," "our," or "us"). This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws.

2. Data Controller Information

FlightTimeCalendar is the data controller responsible for your personal data.

3. Personal Data We Process

3.1 Account Information

  • Category of personal data: Email address
  • Purpose: Account access and authentication
  • Legal basis: Contract performance (Article 6(1)(b) GDPR)
  • Retention period: Duration of account activity until account closure

3.2 Analytics Data

  • Category of personal data: Usage data collected via PostHog
  • Data processor: PostHog (EU servers)
  • Purpose: Service improvement and user experience optimisation
  • Legal basis: Legitimate interests (Article 6(1)(f) GDPR)
  • Retention period: Duration of account activity until account closure

4. Data Processing Principles

We process your personal data in accordance with GDPR principles:

  • Lawfulness, fairness, and transparency
  • Purpose limitation
  • Data minimization
  • Accuracy
  • Storage limitation
  • Integrity and confidentiality
  • Accountability

5. Your GDPR Rights

Under the GDPR, you have the following rights:

5.1 Right to Information (Articles 13 and 14)

You have the right to be informed about how we collect and use your personal data.

5.2 Right of Access (Article 15)

You can request a copy of your personal data and information about how we process it.

5.3 Right to Rectification (Article 16)

You can request correction of inaccurate personal data.

5.4 Right to Erasure (Article 17)

You can request deletion of your personal data in certain circumstances.

6. International Data Transfers

6.1 Data Transfer Mechanisms

For transfers outside the UK/EEA, we rely on:

  • EU Standard Contractual Clauses (SCCs)
  • UK International Data Transfer Agreement (IDTA)
  • Adequacy decisions where applicable

6.2 PostHog Analytics

PostHog processes data within the EU. The transfer is covered by:

  • Location: EU servers
  • Legal basis: EU GDPR compliance
  • Safeguards: Data Processing Agreement with PostHog

13. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: www.ico.org.uk

14. Contact Us

For privacy-related queries:

For urgent matters, we aim to respond within 24 hours.