How WingbookHQ collects, uses, and protects personal data in line with UK GDPR.
The data controller is WingbookHQ, a privately owned business managed by Daniel Sinitsky in England and Wales (referred to as “WingbookHQ”, “we”, “us”, or “our”).
We process the information you and your organisation provide when using the platform, including member details, contact information, booking and flight records, maintenance data, and payment or accounting entries associated with running your club or aircraft.
We use personal data solely to operate the WingbookHQ platform and enable management/participation in your club or aircraft. Processing takes place under the lawful bases of contract (providing the services you request) and legitimate interests (ensuring platform security, availability, and accurate records). Where optional notifications are enabled we rely on your consent, which you can withdraw at any time.
Data is stored on secure cloud infrastructure located within reputable hosting providers. We apply technical and organisational safeguards, including encrypted transport, access controls, and audit logging, to reduce the risk of unauthorised access.
We do not sell personal data. Information is shared only with: (a) your organisation’s authorised members; (b) service providers who host or support the platform under contractual confidentiality; or (c) authorities where required by law.
Data is retained for as long as your organisation maintains an active account plus a reasonable period to comply with legal obligations, resolve disputes, or enforce agreements. Administrators may request deletion of specific records, subject to any legal retention requirements.
You have the right to request access, correction, deletion, restriction, portability, or to object to processing where applicable. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO). We aim to respond to verified requests within one month.
If data is transferred outside the UK or EEA, we ensure appropriate safeguards such as standard contractual clauses with our service providers.
To exercise your rights or raise privacy questions, please contact us via the contact page. We may ask for additional information to verify your identity before fulfilling a request.
We may update this notice to reflect changes in law or our services. Material changes will be highlighted on this page, and continued use of the platform signifies acceptance.