Privacy Policy for British Aviation Archive (BritishAviationArchive.com)

Last Updated: [Date]

Effective Date: [Date]

Welcome to the British Aviation Archive ("we," "our," "us"). We operate the website BritishAviationArchive.com (the "Site"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site, use our services, or interact with us.

This policy is designed to comply with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this Privacy Policy carefully. By using the Site, you agree to the collection and use of information in accordance with this policy.

1. Data Controller

The data controller responsible for your personal data is British Aviation Archive. If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@britishaviationarchive.com
Postal Address: [Insert Registered/Business Address]

2. The Information We Collect

We collect several types of information from and about users of our Site, including:

2.1. Personal Information You Provide Voluntarily

Contact Data: Such as your name, email address, and postal address when you contact us, sign up for a newsletter, create an account, or make an enquiry.
Account Data: If you create an account, we collect your username, password, and profile preferences.
Communication Data: Includes any correspondence when you contact us via email, contact forms, or post.
Transaction and Financial Data: If you make a purchase (e.g., for archival copies, prints, or donations), we collect details about the transaction. Payment processing is handled by third-party providers (e.g., Stripe, PayPal); we do not store full credit card numbers on our servers.
User Contributions: Information you post or submit for publication on the Site, such as comments, forum posts, or contributed historical materials.
Survey and Research Data: Information you provide when participating in surveys or historical research projects.

2.2. Information Collected Automatically

As you navigate through the Site, we may use automatic data collection technologies to collect certain information:

Usage Data: Details of your visits to our Site, including traffic data, location data (at country/city level), logs, pages viewed, time spent on pages, and other communication data.
Technical Data: Your internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Site.
Cookies and Tracking Technologies: Please see our Cookie Policy (Section 9) for detailed information.

2.3. Information from Third Parties

We may receive limited personal data about you from third parties, such as analytics providers (like Google Analytics), advertising networks, and publicly available historical records or archives that we are digitising (where lawful to process).

3. How We Use Your Information (Purposes and Legal Bases)

We will only use your personal data when the law allows us to. Under UK GDPR, we rely on the following legal bases:

Purpose of Processing	Type of Data	Legal Basis for Processing
To operate, maintain, and provide the features of the Site.	Technical Data, Usage Data	Legitimate interests (to administer and improve our Site and services).
To respond to your enquiries, comments, or requests.	Contact Data, Communication Data	Legitimate interests (to respond to user queries) / Performance of a potential contract.
To manage your account and provide you with access to member-only features.	Account Data, Contact Data	Performance of a contract with you.
To process and fulfil any orders, donations, or transactions.	Contact Data, Transaction Data, Financial Data	Performance of a contract with you / Necessary for compliance with a legal obligation (e.g., tax).
To send you administrative information, such as updates to our terms or policies.	Contact Data	Necessary for compliance with a legal obligation / Legitimate interests (to inform of material changes).
To send newsletters, updates, and promotional communications (where consented).	Contact Data	Consent (you can withdraw at any time).
To conduct historical research, analysis, and archiving in the public interest.	User Contributions, Survey Data, potentially Contact Data	Legitimate interests (historical, scientific, or statistical research) / Public interest archiving.
To moderate user contributions and ensure Site security.	User Contributions, Technical Data	Legitimate interests (to keep our Site safe and secure, prevent fraud).
To analyse Site usage and improve our content, services, and user experience.	Technical Data, Usage Data	Legitimate interests (to study how users interact with our Site, develop it, and inform our strategy).

4. How We Share Your Information

We may share your personal data in the following situations:

Service Providers: With trusted third parties who provide services on our behalf, such as hosting, payment processing, email delivery, analytics, and marketing assistance. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
Legal Obligations: If required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
Protection of Rights: To enforce our Terms of Service, protect the security of the Site, or defend the rights, property, or safety of the British Aviation Archive, our users, or others.
Academic & Historical Research: Anonymised or pseudonymised data may be shared with academic institutions or research partners for historical research purposes. Personal data will only be shared in identifiable form where necessary and with appropriate safeguards, or with your explicit consent.
Business Transfers: In connection with a merger, sale of assets, financing, or acquisition of all or a portion of our organisation to another company.
With Your Consent: We may disclose your information for any other purpose with your explicit consent.

We do not sell, rent, or trade your personal data to third parties for their commercial marketing purposes.

5. International Data Transfers

Our servers are located within the United Kingdom (UK) and the European Economic Area (EEA). However, some of our third-party service providers may be based outside the UK/EEA. If we transfer your personal data outside the UK/EEA, we will ensure a similar degree of protection is afforded to it by using one of the following safeguards:

Transferring data to countries deemed to provide an adequate level of protection by the UK.
Using specific contracts approved for use in the UK which give personal data the same protection it has in the UK (e.g., UK International Data Transfer Agreement).

Please contact us if you want further information on the specific mechanism used when transferring your personal data.

6. Data Security

We have implemented appropriate technical and organisational security measures designed to protect the security of your personal data from accidental loss, unauthorised access, use, alteration, and disclosure. These include encryption, access controls, and secure server infrastructure. However, please note that no electronic transmission or storage method is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

7. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this policy, and to comply with our legal, accounting, or reporting obligations. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.

For example, we may retain:

Account data for as long as your account is active.
Transaction data for 7 years for tax and accounting purposes.
Contact data for newsletters until you unsubscribe.
Historical research data may be retained indefinitely in our archive for the public interest, but it will be anonymised where possible.

We will securely delete or anonymise your data when it is no longer needed.

8. Your Data Protection Rights (UK GDPR)

Under data protection law, you have rights including:

Right of Access: You can request a copy of the personal data we hold about you (a "subject access request").
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): You can request deletion of your data, subject to certain legal exceptions (e.g., where we need it for legal compliance or archiving in the public interest).
Right to Restrict Processing: You can request we suspend processing of your data in certain scenarios.
Right to Data Portability: You can request transfer of your data to another service provider in a structured format.
Right to Object: You can object to processing based on our legitimate interests. You have an absolute right to object to direct marketing.
Rights related to automated decision-making: We do not currently use fully automated decision-making that produces legal effects.

To exercise any of these rights, please contact us using the details in Section 1. We may need to verify your identity before responding. You will not have to pay a fee, but we may charge a reasonable fee if your request is clearly unfounded or excessive.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) (ico.org.uk).

9. Cookies and Similar Tracking Technologies

Our Site uses cookies and similar tracking technologies to distinguish you from other users. This helps us provide you with a good experience and allows us to improve the Site.

What are cookies? Cookies are small data files placed on your device. We use the following types:

Essential/Strictly Necessary Cookies: Required for the Site to function (e.g., login, security).
Analytical/Performance Cookies: Allow us to count visits and traffic sources to measure and improve performance.
Functionality Cookies: Enable enhanced functionality and personalisation (e.g., remembering preferences).
Targeting/Advertising Cookies: May be set by our advertising partners to build a profile of your interests.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the Site may become inaccessible or not function properly. For more detailed information, please see our separate Cookie Policy.

10. Third-Party Links

The Site may contain links to other websites operated by third parties (e.g., museums, historical societies, aviation organisations). This Privacy Policy applies only to our Site. We are not responsible for the privacy practices of other sites. We encourage you to read the privacy policy of every website you visit.

11. Children's Privacy

Our Site is not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with data, please contact us. If we learn we have collected data from a child under 16, we will delete that information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last Updated" date at the top. We encourage you to review this policy periodically. Material changes will be communicated to you via email or a notice on the Site.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Controller at:

Email: privacy@britishaviationarchive.com
Postal Address: [Insert Registered/Business Address]