Emirates Aerosports

Privacy policy

How we handle data submitted through this site.

Plain English first, then the clauses. This policy applies to the Emirates Aerosports website and any inquiry, attachment or correspondence routed through it.

Last updated 30 May 2026.

Who we are

Emirates Aerosports is the trading name used on this website and the controller for personal data submitted through it. We are based in Dubai, United Arab Emirates, and operate as an aviation solutions provider since 2008.

Contact: info@emiratesaerosports.com · +971 58 822 8074 · Dubai, United Arab Emirates.

What this policy covers

This policy describes how we collect, use and protect personal data submitted via the Emirates Aerosports website under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”). Where engagement letters, contracts or document-release flows kick in after an inquiry, those documents govern the data exchange and take precedence over this policy.

What we collect

We collect three categories of data, all minimal and tied to a specific purpose:

  • Form submissions. Name, email, phone (optional), company (optional), country (optional), the body of your enquiry, and the inquiry type (aircraft sales, parts, MRO, operational, or general).
  • Automatic collection. IP address, browser user-agent, referring page, the page you submitted from, and any UTM campaign parameters attached to your link.
  • Aviation-specific attachments. Where you reference a specific aircraft serial number, registration mark, part number, or technical document in your enquiry, that information is treated as confidential and handled per the “Confidentiality” section below.

Why we collect it (purposes and lawful basis)

Processing happens under the PDPL on these bases:

  • Service performance (PDPL Art. 5(2)). Replying to your enquiry, routing it to the right desk inside the business, issuing quotations, and arranging engagement letters, contracts, shipments or technical reviews.
  • Legitimate interests (PDPL Art. 5(7)). Preventing automated abuse and spam on our contact form (Cloudflare Turnstile + honeypot), measuring how visitors find and use the site at an aggregate level, and protecting the security of our infrastructure.
  • Legal compliance. Where UAE law or applicable aviation regulations require us to maintain records — for example transaction trails for aircraft sales or export-control screening — we retain the minimum necessary data for the period required.

Who we share it with

We do not sell or rent your personal data to anyone. Sharing is limited to the sub-processors we depend on to run the site and respond to enquiries:

  • Amazon Web Services, Inc. — hosting, file storage and transactional email (AWS Simple Email Service). EU region, Frankfurt (eu-central-1).
  • Cloudflare, Inc. — DNS, DDoS protection, and the Turnstile bot-protection used on our contact form.

Beyond sub-processors, we may disclose data to professional advisers (legal, audit) bound by confidentiality, or to UAE authorities where we are legally required to do so.

International transfers

Our primary hosting infrastructure runs in the European Union (AWS eu-central-1, Frankfurt). Where data is transferred outside the UAE for processing, the transfer is performed under the PDPL’s adequacy and safeguards framework, including transfers to jurisdictions with comparable protection or under appropriate contractual measures.

How long we keep it

  • Inquiry records (personal fields): up to 24 months from the last interaction, then automatically purged. Non-identifying metadata (inquiry type, status, UTM, timestamps) is retained for analytics.
  • Server logs and abuse-prevention metadata: 90 days, then deleted.
  • Contractual records (engagement letters, sale and purchase agreements, traceability documents): retained as required by aviation regulation and UAE commercial law.

Aviation confidentiality

Aircraft serial numbers, registration marks, owner identities and technical documents you provide via the form are treated as confidential by default. Private documents in our catalog (where present) are not made public — they are released to identified enquirers only after staff approval, via a time-limited signed link. We do not share confidential aviation data with third parties unless you have authorised the disclosure in writing.

Your rights

Under PDPL Article 6 you have rights to:

  • Know what personal data we hold and receive a copy.
  • Request correction or completion of inaccurate data.
  • Request deletion (subject to legal retention obligations).
  • Request restriction of processing.
  • Object to processing based on legitimate interests.
  • Request a portable copy of the data you provided.

To exercise any of these rights, write to info@emiratesaerosports.com with enough detail for us to identify the data concerned. We will reply within 30 calendar days. You also have the right to lodge a complaint with the UAE Data Office.

Children

The Emirates Aerosports website is directed to professional counterparties in the aviation industry, not to children under 18. We do not knowingly collect personal data from children.

Security

We protect personal data with industry-standard measures — TLS 1.2 or higher in transit, encryption at rest on managed databases and storage, role-based access controls for staff, audit logging on sensitive operations (document release, configuration changes), and regular vulnerability scanning. In the event of a breach affecting personal data, we will notify the UAE Data Office and affected individuals as required by the PDPL.

Changes to this policy

We post material changes here with an updated date at the top. Changes that materially affect how we use data you have already submitted will be communicated by email to the address on file before they take effect.