Privacy Policy
Last updated: 9th November 2024
1. Introduction
Welcome to FlightTimeCalendar ("we," "our," or "us"). This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws.
2. Data Controller Information
FlightTimeCalendar is the data controller responsible for your personal data.
3. Personal Data We Process
3.1 Account Information
- Category of personal data: Email address
- Purpose: Account access and authentication
- Legal basis: Contract performance (Article 6(1)(b) GDPR)
- Retention period: Duration of account activity until account closure
3.2 Analytics Data
- Category of personal data: Usage data collected via PostHog
- Data processor: PostHog (EU servers)
- Purpose: Service improvement and user experience optimisation
- Legal basis: Legitimate interests (Article 6(1)(f) GDPR)
- Retention period: Duration of account activity until account closure
4. Data Processing Principles
We process your personal data in accordance with GDPR principles:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability
5. Your GDPR Rights
Under the GDPR, you have the following rights:
5.1 Right to Information (Articles 13 and 14)
You have the right to be informed about how we collect and use your personal data.
5.2 Right of Access (Article 15)
You can request a copy of your personal data and information about how we process it.
5.3 Right to Rectification (Article 16)
You can request correction of inaccurate personal data.
5.4 Right to Erasure (Article 17)
You can request deletion of your personal data in certain circumstances.
6. International Data Transfers
6.1 Data Transfer Mechanisms
For transfers outside the UK/EEA, we rely on:
- EU Standard Contractual Clauses (SCCs)
- UK International Data Transfer Agreement (IDTA)
- Adequacy decisions where applicable
6.2 PostHog Analytics
PostHog processes data within the EU. The transfer is covered by:
- Location: EU servers
- Legal basis: EU GDPR compliance
- Safeguards: Data Processing Agreement with PostHog
13. Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk
14. Contact Us
For privacy-related queries:
- Data Protection Contact:
- Email: [email protected]
For urgent matters, we aim to respond within 24 hours.