UK FLIGHT SAFETY COMMITTEE (UKFSC)
Privacy Policy & GDPR / DUAA Compliance Statement

Version 1.2 — January 2026

1. Introduction

The UK Flight Safety Committee (“UKFSC”, “we”, “us”) is committed to protecting the privacy and personal data of our members, partners, course attendees, and all individuals we interact with.

We comply with:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)
• Data (Use and Access) Act 2025 (DUAA) — which introduces targeted updates to UK data protection law while maintaining strong individual protections.

This Privacy Policy explains what personal data we hold, how we use it, how we protect it, and the rights of individuals whose data we process.

2. Purpose of Processing

UKFSC holds and processes personal data solely to support and enhance aviation safety, including:

• Contacting individuals or organisations with an interest in UKFSC’s work
• Managing membership and contractual relationships
• Delivering UKFSC services, including courses, SIE meetings, events, newsletters, and publications
• Providing access to the protected Members’ Area and other digital platforms
• Coordinating safety?related collaboration between bona fide members
• Sharing relevant safety updates, insights, and operational information

We do not use personal data for unrelated commercial activity, marketing unrelated to UKFSC activities, or profiling.

3. Legal Framework & Lawful Bases

3.1 Applicable Law

UKFSC processes personal data in accordance with:

• UK GDPR
• Data Protection Act 2018
• DUAA (which amends parts of the above to simplify compliance and support innovation while preserving rights)

3.2 Lawful Bases Under UK GDPR & DUAA

Our lawful bases for processing are:

Legitimate Interests
For contacting members, event participants, and safety professionals to fulfil UKFSC’s purpose of improving aviation safety.

Contractual Necessity
For individuals with a membership, course booking, or other engagement requiring communication.

Consent
Where individuals explicitly opt into UKFSC communications, newsletters, or platform access.

Legal Obligation
Where aviation safety or regulatory conditions require limited data retention or communication.

4. What Personal Data We Collect

We collect only what is necessary, including:

• Name
• Organisation & role
• Professional contact details
• Communication preferences
• Membership / course participation details
• Access credentials for member platforms

We do not collect:

• Special category data (unless explicitly provided for safety/course logistics)
• Personal data from third parties
• Data for automated decision?making under DUAA provisions

5. How We Use Your Data

Personal data is used for:

• Communicating with members and prospective members
• Delivering courses, SIE meetings, and safety?related services
• Providing access to UKFSC digital platforms
• Circulating safety publications (FOCUS, Safety News)
• Facilitating member?to?member safety collaboration
• Maintaining organisational records

UKFSC does not:

• Share data commercially
• Profile individuals
• Conduct automated decision?making

6. Data Sharing

We maintain a strict non?sharing policy:

• We never sell or trade personal data.
• Email addresses of UKFSC members who have been granted Members’ Area access
  may be shared with other bona fide UKFSC members,
  strictly for aviation?safety purposes.
• No other sharing occurs unless required by law or with explicit consent.

7. Data Security

We use appropriate technical and organisational measures, including:

• Restricted access to authorised personnel
• Password?protected and encrypted systems
• MFA?protected digital environments
• Secure SharePoint / Office 365 infrastructure
• Regular access reviews
• Annual internal data audits

In case of a data breach, we will notify affected individuals promptly.

8. Data Retention

Personal data is retained only as long as necessary:

• Membership and operational data: held while membership is active + 24 months
• Course attendee data: retained for administrative, safety, or certification purposes
• Mailing list data: held until consent is withdrawn
• Individuals may request deletion at any time

9. Your Rights

Under UK GDPR and DUAA provisions, individuals have the right to:

• Access their personal data
• Request correction or deletion
• Restrict or object to processing
• Withdraw consent at any time
• Request a copy of the information we hold
• Complain to the ICO if concerns are not resolved

10. Withdrawal of Consent

You may withdraw consent to be contacted by UKFSC at any time, without giving a reason.
You may also request specific contact preferences or opt out entirely.
We maintain a list of individuals who have asked not to be contacted.

11. DUAA Specific Clarification

The Data (Use and Access) Act 2025 introduces targeted updates to UK data law, including:

• Clearer rules on legitimate interests
• New flexibilities in research and data reuse
• Changes to automated decision?making safeguards
• Easier management of some cookie/analytics functions

These changes do not materially alter UKFSC’s processing activities.
We continue to apply the same high standards of transparency, confidentiality, and safety?focused data handling.

12. Contact for Data Queries

Chief Executive
UK Flight Safety Committee
Email: [email protected]
Please include “GDPR/DUAA Enquiry” in the subject line.

You may also contact the Information Commissioner’s Office (ICO):
https://ico.org.uk/concerns/
Telephone: 0303 123 1113