Privacy & Data Security Policy

1. Data Controller Contact Information

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise your legal rights, please contact us at:

2. Categories of Personal Data We Collect

We collect personal data that you provide directly to us, as well as information collected automatically when you navigate our site or interact with our services:

• Contact & Identification Data: Name, job title, business name, physical address, phone number, and email address.
• Transaction & Commercial Data: Parts inquiries, formal quote requests, sales orders, repair order histories, billing details, and customer account credentials.
• Technical & Device Data: IP address, browser type and version, operating system, network activity, pages visited, session duration, and referring URLs.
• Form Submissions & Support Requests: Information provided when submitting contact forms, requesting AOG (Aircraft On Ground) support, or inquiring about open positions/careers.

3. Business Purposes for Data Collection

We collect and use your personal information for the following operational and business purposes:

• Executing and managing quotes, parts distribution, repair services, and custom aircraft modifications.
• Managing customer accounts, providing technical support, and fulfilling warranty/repair documentation.
• Ensuring web application security, debugging, and maintaining IT network infrastructure.
• Meeting statutory obligations, export control requirements (e.g., ITAR/EAR), quality standards (AS9100D/ISO 9001:2015), and aviation authority regulations (FAA/EASA).
• Delivering relevant corporate communications and product/service updates (subject to applicable opt-in requirements).

4. Disclosure & Sharing of Personal Data

We do not sell your personal data for monetary or other valuable consideration. We may share personal information only under the following conditions:

• Service Providers & Contractors: Authorized third-party IT hosting, data analytics, software support, payment processing, and logistics vendors who process data strictly under our instructions.
• Regulatory & Aviation Authorities: Governmental agencies, export control entities, or aviation regulatory bodies (e.g., FAA, EASA, Dept. of State) where disclosure is mandated by law.
• Corporate Transactions: In the event of a merger, acquisition, reorganization, or sale of company assets, customer data may be transferred as part of standard business assets.

5. Cookies and Tracking Technologies

Our website uses essential, functional, and performance/analytics cookies.

• Essential Cookies: Necessary for website navigation, security, and access to core site functions. These are active by default.
• Non-Essential Cookies (Analytics/Marketing): Used to evaluate site traffic, optimize user experience, and measure site performance.

You can modify or withdraw your cookie preferences at any time via the Cookie Settings link located in our website footer.

6. International Data Transfers

Southeast Aerospace, Inc. operates from its headquarters in Florida, USA. Information collected globally, including from the EEA, UK, or other non-U.S. jurisdictions, is transferred to and processed in the United States. Where required, we utilize approved statutory mechanisms?such as Standard Contractual Clauses (SCCs)?to safeguard international data transfers.

7. Jurisdiction-Specific Disclosures & Rights

A. European Economic Area (EEA) & UK Residents (GDPR / UK GDPR)

If you reside in the EEA or UK, your data is processed under the legal bases defined in GDPR Article 6 (Contractual Necessity, Legitimate Interests, Compliance with Law, or Consent). You hold the following statutory rights:

• Access & Portability: Request access to or a machine-readable copy of your personal data.
• Rectification & Erasure: Request correction of inaccurate data or deletion of personal data ("Right to be Forgotten").
• Restriction & Objection: Restrict or object to our processing of your personal data based on legitimate interests.
• Withdrawal of Consent: Withdraw consent for non-essential cookies or direct marketing at any time.
• Supervisory Authority: Right to lodge a complaint with your local Data Protection Authority (DPA).

B. United States Residents (e.g., CCPA/CPRA, VCDPA, CPA)

For U.S. residents residing in states with consumer privacy legislation (such as California, Virginia, Colorado, etc.):

• Right to Know / Access: Request disclosure of personal information collected, sources, and third parties with whom it was shared.
• Right to Delete & Correct: Request deletion or correction of personal information held by us.
• No Sale / Sharing for Targeted Ads: We do not sell personal information or share personal data for cross-context behavioral advertising.
• Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

8. Data Security and Retention

We maintain administrative, technical, and physical safeguards?including encryption, access controls, and compliant database management?designed to protect personal data against accidental, unlawful, or unauthorized destruction, loss, alteration, or access.

We retain personal data for as long as necessary to fulfill the operational purposes outlined in this policy, complete contractual commitments, meet FAA/EASA documentation archive requirements, and satisfy statutory record-keeping laws.

9. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Updates will be posted on this page with an updated "Last Updated" revision date.