Privacy Policy

2. Data We Collect

We collect the following categories of personal data:

• Account information: email address, name, and authentication credentials
• Payment information: billing details processed securely by Paddle (our Merchant of Record). We do not store your full card details.
• Usage data: assessment scores, test progress, feature interactions, device type, browser type, and session data
• Communications: any messages or feedback you send to our support team

3. Purpose of Collection

We use your personal data for the following purposes:

• To provide and maintain your account and access to the platform
• To process payments and manage subscriptions via Paddle
• To personalise your learning experience and track your progress
• To communicate with you about your account, updates, and support requests
• To improve our platform, content, and services
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your data on the following legal bases:

• Contract performance: to deliver the services you have subscribed to
• Legitimate interests: to improve our platform and prevent fraud
• Consent: where you have opted in to non-essential cookies or marketing communications
• Legal obligation: to comply with applicable laws and regulations

5. Payment Processing — Paddle as Merchant of Record

All payments are processed by Paddle.com Market Limited, which acts as the Merchant of Record for all transactions. Paddle handles billing, payment processing, tax compliance, and invoicing on our behalf. When you make a purchase, your payment information is collected and processed directly by Paddle in accordance with their privacy policy. We do not have access to your full payment card details.

6. Data Retention

We retain your personal data for a maximum of 2 years from the date of your last account activity. After this period, your data will be securely deleted or anonymised. Payment records may be retained longer where required by tax or accounting regulations. You may request earlier deletion at any time (see Section 7).

7. Your Rights

Under the UAE PDPL and the EU GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to correction: request that we correct any inaccurate or incomplete data
• Right to deletion: request that we delete your personal data, subject to legal retention requirements
• Right to restrict processing: request that we limit how we use your data
• Right to data portability: receive your data in a structured, commonly used format
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time
• Right to object: object to processing based on legitimate interests

To exercise any of these rights, contact us at support@flightdeckiq.com. We will respond within 30 days.

8. Cookies

We use essential cookies to maintain your authentication session. Non-essential cookies are only set with your explicit consent. You can manage your cookie preferences at any time via the cookie consent banner. For more details, see the cookie information presented when you first visit the platform.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (TLS), secure authentication, and access controls.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the UAE or EEA. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with the GDPR (such as Standard Contractual Clauses) and the UAE PDPL.

11. Children's Privacy

FlightDeckIQ is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email where possible. Continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us at: support@flightdeckiq.com