Privacy Policy

This Privacy Policy explains how HyFlux Aero Ltd ("we", "us", or "our") collects, uses, and protects your personal data when you visit our website and use our services. We are committed to ensuring your privacy is protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

HyFlux Aero Ltd is the data controller responsible for your personal data. If you have questions about this policy or our data practices, please contact us at: privacy@hyflux.aero

2. Information We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, job title, company name
• Contact Data: Email address, telephone number, postal address
• Account Data: Username, password, account preferences
• Project Data: Technical specifications, project requirements, engineering data shared through our platform
• Technical Data: IP address, browser type and version, time zone, operating system, device information
• Usage Data: Pages visited, links clicked, time spent on pages, navigation paths
• Marketing Data: Preferences for receiving communications from us

3. How We Collect Your Data

We collect personal data through:

• Direct interactions: Contact forms, account registration, project enquiries, email correspondence
• Automated technologies: Cookies, server logs, and analytics tools that collect technical and usage data
• Third parties: Analytics providers such as Google Analytics, and business partners

4. Lawful Basis for Processing

We process your personal data under the following lawful bases as defined by UK GDPR Article 6:

• Consent: Where you have given clear consent for us to process your data for specific purposes, such as marketing communications
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract
• Legitimate interests: Where processing is necessary for our legitimate business interests, such as improving our services, provided these are not overridden by your rights
• Legal obligation: Where processing is necessary to comply with applicable laws and regulations

5. How We Use Your Data

We use your personal data to:

• Provide and manage your account and access to our engineering consultation platform
• Respond to enquiries and provide technical support
• Deliver engineering consulting services and manage project collaborations
• Send relevant communications about our services, with your consent
• Analyse website usage to improve user experience and site performance
• Comply with legal and regulatory obligations

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to distinguish you from other users. This helps us provide a good browsing experience and improve our site. We use:

• Strictly necessary cookies: Required for the website to function
• Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• Functional cookies: Remember your preferences and settings

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect site functionality.

7. Data Sharing and Third Parties

We may share your personal data with:

• Service providers: Hosting, analytics, email, and IT service providers who process data on our behalf
• Professional advisers: Lawyers, auditors, and consultants where necessary
• Regulatory authorities: Where required by law or regulation

We require all third parties to respect the security of your data and process it in accordance with applicable law. We do not sell your personal data.

8. International Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including UK adequacy decisions, Standard Contractual Clauses, or other approved transfer mechanisms under UK GDPR.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Account data is retained for the duration of your account and for up to 24 months following closure. Contact form enquiries are retained for up to 12 months.

10. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request transfer of your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@hyflux.aero. We will respond within one month of receiving your request.

11. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (SSL/TLS), secure server infrastructure, access controls, and regular security assessments.

12. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Contact Us & Complaints

If you have questions, concerns, or wish to exercise your data rights, please contact us:

HyFlux Aero Ltd
Data Protection Officer
Email: privacy@hyflux.aero
Website: www.hyflux.aero

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection: ico.org.uk