Privacy Policy

Last updated: 23 October 2026

1. INTRODUCTION

This Privacy Policy explains how Flight Deck Wingman Limited collects and uses your personal data, and the rights you have in relation to it. It applies to our websites, services, products and online learning platform (the Academy), across the Flight Deck Wingman, Flight School Wingman and SkyChaser brands. We handle your personal data in line with the UK GDPR and the Data Protection Act 2018. Please read it alongside our Terms and Conditions.

2. ABOUT US (WHO CONTROLS YOUR DATA)

Flight Deck Wingman Limited (“we”, “us”, “our”) is the data controller responsible for your personal data. We are a company registered in England and Wales (company number 14621843), with our registered office at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF. Flight School Wingman and SkyChaser are trading names of Flight Deck Wingman Limited.

Our point of contact for data protection is Andrew Neofytou. You can contact us about this notice or about your personal data at .

3. HOW WE COLLECT YOUR PERSONAL DATA

We collect personal data when you enquire about or book our services, create an Academy account, complete our booking and intake forms, upload documents such as your CV, attend a session with us, or contact us by email, phone or message. We may also receive information from flight schools or other third parties who refer you to us, and from publicly available sources.

4. THE PERSONAL DATA WE HOLD

Depending on the services you use, we may hold:

  • your name and contact details;
  • information you give us on our booking and intake forms, such as your experience, background, training stage, the role or course you are applying for, and any specific requirements;
  • documents you upload, such as your CV or application answers;
  • recordings of one-to-one online sessions, where these are made (see “Recording of sessions”);
  • where a service involves someone under 18, limited information about that young person and their parent or guardian, provided on our consent form;
  • records of your bookings, the services you have received, and your correspondence with us;
  • payment information, which is handled by our payment providers (we do not store full card details).

5. HOW WE USE YOUR PERSONAL DATA AND OUR LAWFUL BASES

We use your personal data to provide and manage our services, communicate with you, keep our services safe, improve what we do, and meet our legal obligations. We rely on the following lawful bases, depending on the processing:

  • Contract: to deliver the services you book and to manage your booking and account.
  • Legitimate interests: to run and improve our services (including recording adult sessions for quality and training, which you may object to) and to safeguard children and young people.
  • Consent: where a parent or guardian consents to a service and its recording for someone under 18, and where you opt in to SMS booking reminders (sent via Acuity). You can withdraw consent at any time.
  • Legal obligation: where we must process or share data to comply with the law.
  • Vital interests: where processing or sharing is necessary to protect someone from harm.

6. RECORDING OF SESSIONS

Some of our one-to-one online sessions may be recorded.

For clients aged 18 and over, a session may be recorded for our internal quality and training purposes. If we intend to record, we will tell you at the start of the session, and you can ask us not to at any time. These recordings are used only within Flight Deck Wingman Limited, are not shared outside the business, and are kept for up to 6 months and then deleted. Our lawful basis is our legitimate interests in maintaining and improving the quality of our services, and you have the right to object.

For anyone under the age of 18, one-to-one online sessions are recorded as a safeguarding measure. This is explained to the parent or guardian and forms part of the consent they give before the session takes place. These recordings are stored securely, are not shared with anyone else, and are deleted within 90 days, unless a safeguarding concern is raised, in which case a recording is kept only until the matter is resolved and may be shared with the appropriate authorities or support services.

7. CHILDREN AND YOUNG PEOPLE (UNDER 18)

We occasionally provide services to people under the age of 18. Where a service involves someone who will be under 18 on the date of the service, we require a parent or guardian to complete a consent form before it takes place. We collect only the information we need to deliver the service safely, and we treat young people’s data with particular care.

One-to-one online sessions with anyone under 18 are recorded as a safeguarding measure, as described above. Our full approach to keeping under-18s safe is set out in our Safeguarding Policy, which is available on request. If you are under 18, please involve a parent or guardian when you book a service with us.

8. SAFEGUARDING

We have a duty of care towards everyone we work with. Where we believe that a client, or anyone else, may be at risk of harm, we may need to share information with the appropriate people or services. This can include a parent or guardian, the relevant authorities, or professional support services. Wherever possible we would discuss this with you first. This may involve setting aside the usual confidentiality of a session. Our lawful basis is the protection of someone’s vital interests and our legitimate interests in safeguarding, and we may also be acting to comply with a legal obligation.

9. WHO WE SHARE YOUR DATA WITH

We share personal data with trusted third parties who help us run our business, including:

  • our booking and scheduling provider (Acuity Scheduling, part of Squarespace);
  • our online learning platform provider (Kajabi), which hosts our Academy;
  • our payment providers;
  • our email, IT and hosting providers;
  • professional advisers, such as accountants and lawyers;
  • regulators, authorities or support services, where we are required to by law or where it is necessary to safeguard someone.

These providers act on our instructions and are required to keep your data secure. We do not sell your personal data.

10. HOW LONG WE KEEP YOUR DATA

We keep different types of data for different periods, and we review what we hold once a year so that we can delete data we no longer need. In particular:

  • recordings of one-to-one online sessions with anyone under 18 are deleted within 90 days, unless a safeguarding concern is raised;
  • recordings of adult sessions made for quality and training are kept for up to 6 months and then deleted;
  • client records, including booking and intake forms and any CV or documents you provide, are kept for up to 6 years from your last booking or contact with us, and are then securely deleted. This also allows us to meet our legal and accounting obligations and to deal with any query or claim;
  • we also keep anonymised statistical information, such as the total number of clients we have supported, indefinitely. This contains no names or other identifying details, is not personal data, and we use it to understand and describe our business, including to substantiate the claims we make in our advertising.

11. TRANSFERRING DATA OUTSIDE THE UK

Some of the providers we use (such as our booking, learning-platform, recording and email providers) are based outside the UK, including in the United States. Where your personal data is transferred outside the UK, we take steps to make sure it is protected by appropriate safeguards, such as the UK’s International Data Transfer Agreement or equivalent protections.

12. DATA SECURITY

We take appropriate technical and organisational measures to keep your personal data secure, we limit access to those who need it, and we have procedures to deal with any suspected data breach. Documents such as CVs are kept in access-restricted folders available only to the people who need them.

13. YOUR RIGHTS

You have the right to access the personal data we hold about you, to ask us to correct it if it is wrong, to ask us to delete it in certain circumstances, to object to or restrict our processing, to receive your data in a portable form, and to withdraw consent where we rely on it. To exercise any of these, contact us at . We will not usually charge a fee, and we may need to verify your identity. You also have the right to complain to the Information Commissioner’s Office (see “Contact us”).

14. COOKIES AND ANALYTICS

Our website uses cookies. Some are essential for the site to work. We also use analytics cookies, including Google Analytics, which help us understand how visitors use our site. You can control or block cookies at any time through your browser settings.

15. CHANGES TO THIS NOTICE

We may update this notice from time to time. The version that applies is the one published on our website, and the date it was last updated is shown at the top. Where changes are significant, we will take reasonable steps to let you know.

16. CONTACT US AND COMPLAINTS

For any question about this notice or your personal data, please contact Andrew Neofytou at . If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.