Privacy Policy

Account details: name, email, phone number and password (stored only as a cryptographic hash — we cannot read it).

Booking details: route, dates, passenger numbers and any notes you add.

Message content when you use the contact or emergency form, along with the IP address and browser the message came from, which we keep for abuse prevention.

The operator you select receives the details needed to fly you: name, contact number, passenger count, dates and any relevant notes. They cannot see your account or your other bookings.

We do not sell personal data, and we do not share it with advertisers.

Medical information you provide in an emergency request is shared with the operators and medical responders needed to action it. This is the point of sending it.

Booking records are retained for seven years to meet accounting and aviation record-keeping expectations. Contact messages are kept for two years.

You can ask for a copy of your data or ask us to delete it by writing to hello@heli.example. Where a booking record must be retained for legal reasons, we will tell you which parts we cannot delete and why.

We set one cookie, to keep you signed in. It is httpOnly, meaning scripts in your browser cannot read it. We run no advertising or third-party analytics trackers.