EclipsoAir Website Data Protection & Privacy Statement

What is in this Privacy statement?

This Privacy Statement sets out the basis on which EclipsoAir process any Personal Data we collect from you, or that you provide to us, including that of your employees, customers and representatives. It also explains what rights you have in relation to the Personal Data we hold about you.

Who we are!

EclipsoAir is a Company incorporated in Jersey with registered number 158491 whose registered address is Stonehenge, Laa Vielle ,Charriere, Trinity, Jersey, JE3 5AT and it operates the Website www.eclipsoair.com . You can contact EclipsoAir by email at info@eclipsoair.com. Further details of who we are can be found under www.eclipsoair.com. For the purpose of Data Protection Law, the "controller" is EclipsoAir which processes your data, or as otherwise as notified to you at the time your data is collected.

Being the data controller means that EclipsoAir is responsible for deciding how we use the Personal Data we collect about you and ensuring that it is at all times processed in accordance with Data Protection Law. You can contact us using the details above or as set out in the final section of this Privacy Statement below or on our website.

What Personal Data do we collect and process from/about you?

Information you give us: You may give us information about you and/or third parties who you are acting on behalf of, (for example, if you are booking flights on behalf of passengers, or providing information on behalf of family members or corporate entities) by corresponding with us by phone, e-mail or otherwise (including in person), filling in forms on our website, apps or other platforms, at an assistance centre and/or as part of the response to any incident, or using any of our applications.

The information you give us includes information you provide when you: (i) make an enquiry about any of our services or products or carry out a search of our website; (ii) purchase services or products from us (either for yourself and/or on behalf of third parties); (iii) register for our newsletters and other electronic and postal communications; (iv) respond to a promotion or job vacancy notice or email a CV to us; and (v) report a problem with our website. The information you give us may include your own (or a third party's) Personal Data, including, but not limited to the following:

• Identity Data: name, profession or job, employer, personal description;
• Contact Data:address, e-mail address, phone number (including when you contact us by these means);
• Passenger Data: passport and visa information (or copies thereof), and travel preferences;
• Financial Data: bank account, and credit/ payment card information and other financial information;
• Transaction Data: details about your payments to and from you and other details of products services you have purchased from us;
• Marketing and Communications Data: your preferences in receiving marketing from us and our third parties and your communication preferences;
• Special Category Data: sensitive Personal Data relating to your race/ethnicity, religion, health and/or medical history, genetic data, and biometric data (for identification and security pass purposes, as below);
• Recruitment Data: qualifications, references, CV and application, interview and assessment data (in addition to Identity and Contact Data) and (for certain roles within the EclipsoAir) criminal records and other background check data); and
• CCTV and security pass Data: any data collected using CCTV or premises access points which our premises or partner premises are equipped with for security purposes.
• Career Data: ( for corporate members)

Accurate & current information: It is important that the Personal Data we hold about you is accurate and current. Please keep us informed if your Personal Data changes during your relationship with us. If you are providing Personal Data to us about someone else, for example passengers for whom you are arranging flights with us, corporate entities, family members and/or next of kin or your employees’ training records, you must have their prior permission to do this and make them aware of this Privacy Statement.

Children: Our website is not aimed at children and we do not knowingly collect Personal Data of children, unless it is provided by you on their behalf, or on behalf of someone else (for example passengers) and you have the required parental or guardian’s permission to share such data with us. In exceptional circumstances for the purposes of incident response we may need to take data from a child if no alternative family member or guardian can.

Information we collect about you: With regard to each of your visits to our website, Apps or other platform we may automatically collect the following information (including through use of cookies):

• Technical Data: technical information, including the Internet Protocol (IP) address used to facilitate your connection to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and
• Usage Data: information about your visit to or use of our websites, Apps or platforms and traffic patterns, including the full Uniform Resource Locators/URL clickstream to, through and from our websites or other platfoms (including date and time); services and/or products you viewed or searched for; length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.

Information we receive from other sources: We work closely with third parties (including, for example, flight operators, government departments, health practitioners, response agencies and law enforcement agencies, suppliers, business partners, sub-contractors in technical, payment and delivery services, analytics providers, credit reference agencies and search information providers) and may receive Personal Data about you from them and from public sources to supplement the information you have given to us.

What will we do with your Personal Data?

We will only use your Personal Data where Data Protection Law allows us to. Data Protection Law says we can collect and use Personal Data in the following (applicable) circumstances:

1. it is necessary for us to be able to perform a contract with you;
2. it is necessary for our legitimate interests (and your interests and fundamental rights do not override those interests);
3. if we have your consent (which you can withdraw at any time); or
4. to comply with a legal obligation (i.e. rules laid down by courts, statute or regulation).

Accordingly, we lawfully use your Personal Data in the following ways:

Recruitment

We use Recruitment Data to recruit and select new employees of EclipsoAir. This processing is necessary to take steps at the applicant's request to enter a contract of employment.

This processing is also necessary for the purpose of the legitimate interests pursued by EclipsoAir. EclipsoAir considers that it has a legitimate interest in fully assessing applications for employment to ensure that only suitable and appropriate candidates are both assessed and selected. Candidates who are considered further will be provided with our Employee Privacy Notice which explains fully how EclipsoAir handles Recruitment Data and any additional Personal Data collected during the recruitment process (including criminal records and other background checks).

To deliver our services

To carry out our obligations arising from any contracts entered into between you and us we need your:

1. Identity and Contact Data to register you as a new passenger or customer, perform any background checks, manage our relationship with you, and provide the services requested and any related information.
2. Financial, Transaction and Passenger Data (as applicable) to process and deliver your request.
3. Special Category Data to the extent it is necessary (for example to enable us to accommodate dietary requirements, for the purposes of repatriation, personal effects processing and return and memorial planning, or your religious or other needs), to ensure that you receive the requested services.
4. and also process the Special Category Data when providing fatigue risk management, incident response and consultancy services. Therefore, we use this data on the basis that it is necessary for us to be able to perform our contract with you (i.e. the terms and conditions of the relevant services) and for our legitimate interests of delivering the services in this way. We use the Special Category Data on the basis that this is with your consent which you can withdraw at any time. If you do so however, we may not then be able to provide the services in the manner you request.

Business development

We use your Identity, Contact, Usage and Transaction Data in order to develop an understanding of the services and products that may be of interest to you including by reference to those that you have already purchased or enquired about. Therefore, we use this data on the basis that it is necessary for our legitimate interests in developing and improving our services and to inform our business strategy and provide you with relevant information.

On this basis we may inform you of products and services offered by other business entities of EclipsoAir which you may not have yet used and may be of interest to you from time to time. We also use certain Usage Data to measure and analyse the behaviour of visitors to our website and traffic patterns by using cookies, and we will seek your consent to such use where we are legally required to do so.

We use certain third-party applications to help us do this. For example, we use Google Analytics, a service which analyses website traffic data and webpage usage. Google Analytics does not identify individual users or associate your IP address with any other data held by Google.

Internet-based advertising

We may use Usage Data to provide you with advertising about products and services tailored to your individual interests. You may see certain ads on other websites or in your emails based on your visits to our websites and third-party sites because we participate in advertising networks administered by third-party vendors, such as Google Ads. Ad networks track your online activities over time by collecting information through automated means, including through the use of cookies. The networks use this information to show you advertisements that are tailored to your individual interests. We have a legitimate interest in delivering direct advertising but we will seek your consent to such use where we are legally required to do so (please refer to our Cookies Policy for more information about you choices in relation to ads).

Our websites may also offer you the ability to interact with plugins from social media sites like Facebook and LinkedIn. These services collect persistent identifiers through your browser or mobile operating system. If you have previously provided personally identifiable information to third-party sites, that third-party may recognise you here. Your use of social network plugins is subject to each social media site's privacy policy, which may be different from ours, so please read these policies to assess and understand your options. We have no control over or access to the information that is collected, stored, or used by third-party plugins. If you engage with our content on or through third-party social media sites, you may allow us to have access to certain information associated with your social media account (e.g., name, username, email address, profile picture) to deliver the content or as part of the operation of the plug-in or application.

Marketing and other communications

We may also wish to provide you, or permit selected and named third parties to provide you, with the information about services or products we feel may interest you. We will always give you the option to provide opt-in consent to receive different kinds of marketing communications from us or third parties or you can decide not to do so.

Opt-ing out

You can withdraw your consent or opt-out of any type of marketing communication from us at any time by following the instructions provided to you in the relevant communication (for example, the 'unsubscribe' link in an email) or you may contact us at Info@eclipsoair.com If you have chosen to receive marketing communications from another organisation, your relevant Personal Data will be passed onto that organisation and will be held in accordance with their privacy policies. You should contact the relevant organisation directly if you no longer want to receive their marketing communications.

Note that even if you do not provide your consent, or subsequently withdraw it, in respect of marketing communications we will still need to send you communications in respect of our services and your contracts with us (for example, booking terms and confirmations and emergency information).

Website/ business administration

We use Identity, Contact and Technical Data to maintain our website and for internal operations, including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data. We use this data on the basis that it is necessary: (a) for our legitimate interests: running our business, the provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise; and (b) to comply with a legal obligation.

We also use Technical and Usage Data to improve our website to ensure that content is presented in the most effective manner for you and for your computer and allow you to participate in interactive features of our service, when you choose to do so.

Data analysis & Google Analytics

We will sometimes analyse the Personal Data we have collected about you to serve advertisements and make suggestions which are more relevant to you. We may do this by determining your current location or evaluating the history of your interactions with us.

Our website uses Google Analytics to show relevant advertisements to users who have previously visited us as they browse the web. This enables us to tailor our marketing to better suit your needs and only display ads that are relevant to you. You may see our ads in search results pages (using Google Adwords), on YouTube, in banner adverts on Gmail and on other services run by Google.

Any information collected will be used in accordance with our own Privacy Statement and Google’s own privacy statement. If you do not wish to see advertisements, you can: (i) opt out of Google’s use of cookies through Google’s Ads Settings; or (ii) refuse the use of cookies by downloading and installing the Google Analytics Opt-out Browser Add-on.

Other purposes

We may have to use your Personal Data which we hold to protect your or someone's else's vital interests, for example, to make contact in rare emergency situations.

We could also have to use your Personal Data in connection with legal and regulatory or policy matters such as our maintenance of business records, compliance with our environmental policy, compliance with external reporting requirements and internal policies and procedures and responses to requests by government, law enforcement, regulators, courts, rights holders or other third parties including in respect of the use or misuse of intellectual property, such as our brand or media rights, or those of our licensees/ commercial partners or their parties.

Therefore, we use this data on the basis that it is necessary both for our legitimate interests in protecting, defending and enforcing rights and interests in this way and also so that we can comply with legal obligations.

If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to us at the address shown at the bottom of this website’s home page or emailing us at info@eclipsoair.com.

What Cookies does our website use?

Our website uses cookies to helps us improve our business, services and our website which also helps us to provide you with a good and tailored customer experience. For detailed information about cookies and the purposes for which we use them see our Cookies Policy.

Who will we disclose your Personal Data to?

We may share Personal Data with other parties in order to achieve our purposes (see What will we do with your Personal Data?):

Group companies

We may share your Personal Data with our group companies, any associated entity of EclipsoAir and, if necessary, with our business partners including Gama Aviation PLC and/or local agents outside the UK where those agents act on our behalf. Our headquarters and servers are primarily located in Jersey but your Personal Data may be transferred to or accessed by any of our offices or associated partner offices in other countries, including offices in or outside Jersey or the UK where we have a legal or contractual obligation to do so or to enable the provision of our services or products (see International Transfers below).

Third party service providers

We use third party organisations to provide services to us or to you on our behalf, including:

1. flight operators, handling agents, ground transport providers and other agents/ sub-contractors necessary for the performance of any contract we enter into with you;
2. analytics, social media platforms and search engine providers that assist us in the improvement and optimisation of our website;
3. providers of IT systems such as Microsoft and other systems, and or their administration or maintenance;
4. credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you; and
5. market research companies if we carry out marketing or client care surveys to gain feedback and improve our services and products.
6. Coroners, medical examiners, disaster victim identification teams, funeral directors, and other relevant response agencies.

In providing their services, they may access, receive, maintain or otherwise process Personal Data on our behalf (to the extent necessary). Our service providers only process Personal Data in accordance with our instructions and are not permitted to use your Personal Data for their own purposes.

Legally required: We may also disclose your Personal Data where we are under a duty to do so in order to comply with any legal obligation, or in order to enforce or apply the terms of a legal agreement; or to protect the rights, property, or safety of EclipsoAir, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Business sale: we may have to share certain Personal Data if we merge, transfer, sell or buy any business or assets, in which case we may disclose your Personal Data to the prospective seller or buyer of such business or assets.

Alternatively, we may seek to engage in a joint venture, acquire other businesses or merge with them at which point they may also gain access to your personal data. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Notice.

Notwithstanding anything else in this Privacy Statement, we may share aggregated or de-identified information with third parties for research, marketing, analytics and other purposes, provided such information does not identify a particular individual and individuals cannot be re-identified.

We will not sell, distribute, or lease your personal information to third parties unless we have your permission or are required by law to do so. We will also not share your information to other countries or allow application users from other countries to have access without your express written permission. It is important that you read below International Transfers carefully.

International Transfers

Some countries outside of Jersey, the UK and European Union (EU) do not have laws that protect privacy rights as extensively as Jersey, the UK and countries within the EU. Given the nature of our services, however, it is likely that at some point, Personal Data may need to be processed by staff operating outside the EU or the UK in such countries who work for us or for one of our suppliers (see Who will we disclose your Personal Data to?). Where possible, however, when we transfer your Personal Data outside of Jersey, the EU or the UK, to a territory for which an adequacy decision has not been made under the GDPR, we will try to ensure that your Personal Data is afforded a similar degree of protection, in accordance with Data Protection Law.

Security of your Personal Data

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to our website; any transmission is at your own risk.

Once we have received your Personal Data, we will use strict procedures and security features to try to prevent your Personal Data transmitted, stored or otherwise processed from being accidentally or unlawfully destroyed, lost, altered, disclosed or accessed (a Data Security Breach). In addition, we limit access to your Personal Data to those employees, contractors and other third parties who have a business need to know. They will only use your Personal Data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected Data Security Breach and will notify you and any applicable regulator where we are legally required to do so.

Where we have given you (or where you have chosen) a username and/or password which enables you to access certain parts of our website, you are responsible for keeping your username and password confidential. Please do not share your username or password with anyone.

Any data provided or shared by email will be held in an email security and compliance service and online. In addition, data may be recorded and held in our internal on-premises Windows server environment and in external SaaS systems as appropriate.

We comply with the standard procedures and requirements as laid down by applicable law to ensure that your personal information is transmitted securely using the latest in Secure Server Technology to ensure that all your personal and transactional information is protected to the highest standards.

We will take all steps reasonably necessary including through the terms of the applicable sub-contracts to ensure that your personal information is treated securely and in accordance with this Privacy Statement and applicable law.

How long do we keep your Personal Data?

We will only keep and retain your Personal Data for as long as strictly necessary to fulfil the purposes we collected it for (see What will we do with your Personal Data?), including for the purposes of satisfying any legal, accounting, disaster victim identification, long term storage and return of personal effects, memorial planning or reporting requirements.

To determine the appropriate retention period, we review - in addition to the purposes of use and how we can achieve them - other relevant factors such as the nature and scope of the Personal Data, the potential risks to the individuals to whom the information relates from a Data Security Breach, and the applicable legal requirements, for example the limitation period for which legal claims can be made in court. For example, we need to keep basic information about our customers (including identity, contact, financial and transaction information) for at least six years after they cease to be customers.

We will also retain your email address on our internal suppression list after you have opted-out of receiving communications from us to ensure that we do not contact you again (in accordance with good industry practice).

In some circumstances we may anonymise your Personal Data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

Your Rights

Under Data Protection Law, you have certain rights (depending on the circumstances) in connection with your Personal Data:

• Request access to your Personal Data via a data subject access request. This enables you to receive a copy of the Personal Data we hold about you and to check that we are using it lawfully, provided always that this does not adversely affect the rights and freedoms of other people.
• Request correction of the Personal Data that we hold about you. Where any of the information we hold about you is incorrect or incomplete we will act promptly to rectify this, including where you have requested us to do so.
• Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to use it. You also have the right to ask us to delete or remove your Personal Data where you have exercised your right to object to our use (see below).
• Object to use of your Personal Data where we are relying on our legitimate interests (see above section What will we do with your Personal Data?) and there is something about your particular situation which makes you want to object to our use on this ground.
• Withdraw your consent to our use of your Personal Data where we do so in reliance on your consent. Once we have received notification that you have withdrawn your consent, we will no longer process your Personal Data for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
• Request the restriction of use of your Personal Data. This enables you to ask us to suspend the use of Personal Data about you, for example if you want us to establish its accuracy or the reason for using it.
• Request the transfer of the Personal Data you have provided, on the basis of consent or for a contract with us, to you or a third party where technically feasible.

If you would like a copy of your Personal Data, believe that any Personal Data we are holding on you is incorrect or incomplete, or have any other queries in relation to any other rights, please contact us at info@eclipsoair.com. We will comply with your request within a reasonable period unless we have a lawful reason not to do so. To exercise your rights, we may ask you to verify your identity and cooperate with us in our effort. We will use this information solely to verify your identity before we process your information request. Please note that requests must be made in writing (including email). In responding to such requests, we will explain the impact of any objections, restrictions or deletions requested.

Please note that we may need certain information to enable us to provide you with the services and/or information you ask for, so changes you make to your preferences or restrictions you ask us to make on how we use your Personal Data may affect what services and information we can provide.

You also have the right to complain to the relevant data protection regulator in your country if you believe we have not handled your request in an appropriate manner, for example the Information Commissioner Office (ICO) in the UK (www.ico.org.uk). However, we would appreciate you contacting us in the first instance via our Data Protection Officer at the address detailed below or the email info@eclipsoair.com, so that we may seek to resolve any complaint or query.

Is there a fee to exercise your rights?

We will not charge you a fee to exercise your rights unless your request is clearly unfounded or excessive, in which case we may charge you a reasonable fee. Alternatively, we may refuse to comply with the request in such circumstances.

Links to other websites

Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates (Other Sites). The owners and operators of those Other Sites are responsible for their collection or use of your Personal Data and you should check their respective privacy policies/ notices if you follow a link to any of these Other Sites.

Changes to this privacy notice

This privacy notice was last updated in July 2025. Any changes we may make to this privacy notice in the future will be posted on our website. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you access our website or use our services.