Privacy Policy

This Privacy Policy explains how Aero Dynamic Drones ("Company," "we," "us," or "our"), located at 7901 4th St N, Suite 300, St. Petersburg, FL 33702, collects, uses, discloses, retains, and protects personal information when you visit this website, purchase products, request repair or diagnostic services, book flight training, communicate with us, or otherwise interact with us (collectively, the "Services"). For purposes of the EU/UK GDPR, the Company is the "data controller" of personal information described here. This Policy is incorporated into and forms part of our Terms and Conditions.

By checking the acceptance box on any form, submitting an order, booking, or message, or continuing to use the Services after being presented with this Policy, you acknowledge that you have read and understood it and, where consent is the applicable legal basis, you consent to the practices described. If you do not agree, please do not use the Services.

This Policy does not cover the practices of third parties we do not control, including manufacturers, payment processors, shipping carriers, social media platforms, and websites we link to; those are governed by their own policies.

In the preceding twelve (12) months we have collected, and we continue to collect, the following categories of personal information. We collect it directly from you, automatically from your device, and from our service providers (e.g., payment and shipping partners).

• Identifiers: name, postal address, email address, telephone number, IP address, device and online identifiers, and account credentials.
• Commercial information: products purchased or considered, order history, service and training bookings, repair intake data (aircraft make, model, serial number, described faults), quotes, invoices, and warranty claims.
• Financial information: payment method type, last four digits of card, billing address, and transaction amounts. Full payment card numbers are collected directly by our PCI-DSS-compliant payment processor and are never stored on our systems.
• Communications: contact-form submissions, emails, texts, call notes, support tickets, reviews, and testimonials.
• Training records: attendance, skill assessments, signed waivers, certifications claimed, and — for minors — parent or guardian identity and consent.
• Internet and electronic activity: browser type, operating system, referring/exit pages, pages viewed, clicks, timestamps, and cart contents (stored in your browser's local storage), collected via cookies and similar technologies.
• Approximate geolocation derived from IP address (we do not collect precise GPS location from your device).
• Audio/visual information: photographs or video taken at training sessions or events with notice; security camera footage at our premises.
• Equipment data: when you deliver an aircraft for service, technicians may access on-device flight logs, firmware data, and stored media strictly to the extent necessary to diagnose and repair the device.
• Inferences: general preferences derived from the above for the purpose of improving our Services and offers.
• Sensitive personal information: we do not intentionally collect sensitive information (such as government ID numbers, precise geolocation, biometrics, health, or religious data). If you provide government ID to verify ownership of equipment, it is reviewed and not retained beyond verification except as required by law.

We process personal information for the following purposes and, where the GDPR or UK GDPR applies, on the following legal bases:

• To perform our contract with you — processing orders, payments, shipping, repairs, training, and customer service (Art. 6(1)(b), contractual necessity).
• To comply with legal obligations — tax, accounting, consumer protection, FAA record-keeping, export controls, responding to lawful requests (Art. 6(1)(c)).
• For our legitimate interests — fraud prevention, network and information security, protecting the safety of customers, staff, and property, enforcing our Terms, defending legal claims, improving and analyzing our Services, and direct marketing to existing customers where permitted (Art. 6(1)(f)), balanced against your rights.
• With your consent — non-essential cookies and analytics, marketing emails and text messages, and photography at training sessions (Art. 6(1)(a)). You may withdraw consent at any time without affecting prior processing.
• To protect vital interests — for example, contacting emergency services in the event of an injury during training (Art. 6(1)(d)).

We use cookies, browser local storage, pixels, and similar technologies. Strictly necessary technologies (for example, those that maintain your shopping cart, remember your cookie preference, secure the site, and process checkout) are required for the Services to function and cannot be disabled. Analytics and marketing technologies are used only where you have consented via our cookie notice or where otherwise permitted by law, and you may change your choice at any time by clearing your browser storage, which will cause the notice to reappear, or through your browser settings.

Third-party analytics and advertising partners may set their own cookies subject to their own policies. Depending on the jurisdiction, the use of certain third-party advertising cookies may be considered a "sale" or "sharing" of personal information or "targeted advertising"; see the Your Rights section for how to opt out. We honor Global Privacy Control (GPC) signals where required by applicable law. We do not otherwise respond to "Do Not Track" signals, for which no industry standard exists.

We do not sell personal information for money. We may disclose each category of personal information listed above to the following categories of recipients for the business purposes described in this Policy:

• Service providers and processors acting on our behalf under written contracts restricting their use of your data: payment processing, fraud screening, shipping and logistics, cloud hosting and database services, email and SMS delivery, website analytics, scheduling, accounting, and customer support tools.
• Manufacturers and authorized distributors, solely as necessary to process warranty claims, product registrations, recalls, or replacement parts you request.
• Professional advisors — attorneys, accountants, auditors, and insurers — under duties of confidentiality.
• Law enforcement, regulators (including the Federal Aviation Administration), courts, and other authorities when required by law, subpoena, court order, or legal process; when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of the Company, our customers, or the public; to investigate fraud, theft, or unlawful or unsafe drone operation; or to enforce our Terms.
• A buyer, successor, or investor in connection with any merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, subject to customary confidentiality protections.
• Other parties at your direction or with your express consent.

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption of data in transit (TLS), access controls and role-based permissions, use of reputable hosting and payment providers with independent security certifications, and staff confidentiality obligations. Payment card data is handled exclusively by our PCI-DSS-compliant processor.

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, WE CANNOT GUARANTEE ITS ABSOLUTE SECURITY, AND, TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, WE DISCLAIM LIABILITY FOR UNAUTHORIZED ACCESS, USE, DISCLOSURE, ALTERATION, OR DESTRUCTION OF INFORMATION RESULTING FROM CIRCUMSTANCES BEYOND OUR REASONABLE CONTROL, INCLUDING CRIMINAL ACTS OF THIRD PARTIES. You are responsible for keeping any account credentials confidential and for using secure devices and networks. In the event of a breach of security affecting your personal information, we will notify you and the appropriate authorities as required by the Florida Information Protection Act (Fla. Stat. § 501.171) and other applicable law.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to satisfy legal, tax, accounting, warranty, and record-keeping requirements, to resolve disputes, to enforce our agreements, and to defend legal claims. As a general rule: transaction, invoice, and warranty records are retained for seven (7) years; signed training waivers are retained for the applicable statute of limitations plus, for minors, until the participant reaches the age of majority plus the limitations period; marketing consents are retained until withdrawn; website analytics data is retained in aggregated or de-identified form; and equipment data accessed during repair is not retained beyond completion of the service except where needed for warranty or legal purposes. When information is no longer needed, we securely delete or anonymize it.

Depending on where you live, you may have some or all of the following rights regarding your personal information, subject to legal exceptions: (1) to know/access the categories and specific pieces of information we have collected, the sources, the purposes, and the categories of third parties to whom it was disclosed; (2) to correct inaccurate information; (3) to delete information; (4) to obtain a portable copy; (5) to opt out of the "sale" or "sharing" of personal information, targeted advertising, and certain profiling; (6) to limit the use of sensitive personal information; (7) to restrict or object to processing, including for direct marketing; (8) to withdraw consent; and (9) not to receive discriminatory treatment for exercising your rights.

United States: These rights are provided under the Florida Digital Bill of Rights, the California Consumer Privacy Act as amended by the CPRA, and comparable laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, and other states, to the extent applicable to us. To opt out of the sale or sharing of personal information or targeted advertising, decline non-essential cookies in our cookie notice, enable Global Privacy Control in your browser, or submit a request through our Contact page with the subject line "Do Not Sell or Share." We do not knowingly sell or share the personal information of consumers under sixteen (16). We do not offer financial incentives in exchange for personal information. If we deny a request, residents of states that provide an appeal right may appeal by replying to our decision, and we will respond within the statutory period; if the appeal is denied you may contact your state Attorney General.

European Economic Area, United Kingdom, and Switzerland: You may exercise rights under the GDPR / UK GDPR / FADP by contacting us. You also have the right to lodge a complaint with your local supervisory authority. We are not required to appoint an EU or UK representative because we do not target or systematically monitor individuals in those jurisdictions; if you access our Services from there, you do so on your own initiative.

Exercising your rights: Submit requests through the Contact page or by mail to our St. Petersburg address. We must verify your identity, typically by matching information you provide to information in our records, and may request additional information; we will not require you to create an account. An authorized agent may submit a request on your behalf with written, signed authorization and proof of the agent's identity. We will respond within forty-five (45) days (or as otherwise required by law), extendable once with notice. We may decline requests that are manifestly unfounded, excessive, or that would require us to violate the law or infringe the rights of others.

Marketing choices: Unsubscribe from marketing emails using the link in any email; reply STOP to opt out of marketing texts. Transactional, safety, recall, and legal notices are not marketing and cannot be opted out of while you remain a customer.

The Services are not directed to children under thirteen (13), and we do not knowingly collect personal information online from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). Flight training participants under eighteen (18) may be enrolled only by a parent or legal guardian, from whom we collect the minor's information with verifiable consent, and only to the extent necessary to provide the training safely. If you believe a child under 13 has provided us information without consent, contact us and we will promptly delete it.

Drones sold or serviced by us can capture images, video, audio, and other data of people and property. The Company does not collect, receive, store, or control media or data captured by customers using their own aircraft (except transiently, as strictly necessary, during a repair you request), and has no responsibility or liability for it. You are solely responsible for complying with all privacy, surveillance, wiretap, trespass, and data protection laws when operating any aircraft and for obtaining any consents required from persons you record. You must not deliver equipment for service that contains media you are not lawfully entitled to possess.

At training sessions and events we may take photographs or video for instructional, safety, or promotional purposes. You will be given notice, and you may opt out of promotional use by informing your instructor before the session or contacting us afterward. Security cameras operate on our premises for safety and loss prevention; footage is retained for a limited period and disclosed only as described in this Policy.

We are located in and operate from the United States, and our service providers may be located in the United States and other countries. If you access the Services from outside the U.S., your information will be transferred to, stored, and processed in the U.S., whose laws may not provide the same level of protection as your home jurisdiction. Where required, we rely on appropriate safeguards for such transfers, such as standard contractual clauses or your explicit consent. By using the Services you acknowledge and, where consent is required, consent to such transfer.

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Our payment processor may apply automated fraud-screening to transactions; if a transaction is declined for that reason you may contact us for manual review.

The Services may contain links to, or integrate with, third-party websites, applications, and services, including manufacturers, social media platforms, mapping and airspace tools, and payment processors. We do not control and are not responsible for their content, privacy practices, or security, and their inclusion does not imply endorsement. Review their privacy policies before providing any information.

We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Effective date" indicates the latest revision. Material changes will be posted prominently on this page and, where required by law or where we have your contact information, communicated to you directly before they take effect. Your continued use of the Services after the effective date constitutes acceptance of the revised Policy; where consent is required for a new use, we will obtain it.

To exercise your rights, ask questions, raise a concern, or make a complaint about this Policy or our data practices, contact Aero Dynamic Drones through the Contact page on this website, by telephone at (208) 441-8070, or by mail at 7901 4th St N, Suite 300, St. Petersburg, FL 33702, Attention: Privacy. We take every inquiry seriously and will respond within the time required by applicable law. If you are not satisfied with our response, you may contact your state Attorney General, the U.S. Federal Trade Commission, or, if applicable, your local data protection authority.