Privacy Policy

Last updated: 29 January 2026

1. Introduction

OALO ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital pilot logbook service.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

OALO is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@oalo.net.

3. Information We Collect

We collect information that you provide directly to us:

• Account Information: Email address, name, crew code, base location, nationality, and country of residence
• Flight Data: Flight records including dates, times, airports, aircraft registrations, flight numbers, and crew roles
• Usage Data: How you interact with our service, including login times and feature usage
• Communications: When you contact us for support or feedback

Important: We do NOT collect or store sensitive airline operational data such as fuel figures, passenger numbers, delay information, or any other commercially sensitive airline data.

4. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our logbook service
• Process and store your flight records
• Generate EASA and UK CAA compliant logbook exports
• Send you service-related notifications
• Respond to your enquiries and support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

5. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary to provide you with our service
• Consent: Where you have given explicit consent (e.g., marketing communications)
• Legitimate Interests: For service improvement and security purposes
• Legal Obligation: Where required by law

6. Data Storage and Security

Your data is stored on secure servers located within the European Economic Area (EEA). We implement appropriate technical and organisational measures to protect your personal data, including:

• AES-256 encryption for sensitive data at rest
• TLS/SSL encryption for data in transit
• Regular security assessments and updates
• Access controls and authentication measures
• Regular data backups

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Flight records may be retained in anonymised form for statistical purposes.

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Receive your data in a portable format (CSV/PDF export)
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at privacy@oalo.net.

9. Data Sharing

We do not sell your personal data. We may share your data with:

• Service Providers: Third parties who assist in operating our service (hosting, email delivery)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

10. Cookies and Analytics

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Understand how you use our service (via Google Analytics)

You can control cookies through your browser settings.

11. International Transfers

Your data is primarily stored within the EEA. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in compliance with UK GDPR.

12. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

• Email: privacy@oalo.net

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk