Identity and contact data
Name, email address, delivery address, billing address, phone number (if provided).
Home · Privacy Policy
Legal
Privacy Policy.
What we hold, and why.
FlightAbove is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under UK data protection law.
Last updated: 4 October 2026
YOUR DATA
UK GDPR
Who is responsible
We are the data controller.
LLS Creations Ltd trading as FlightAbove is the data controller for personal data processed through this website. Our registered office is 66 Paul Street, London, England, EC2A 4NA, United Kingdom. Company number 17491307. We are subject to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
1. Data we collect
The categories, in plain cards.
We may collect the following categories of personal data.
Order and transaction data
Details of products purchased, order history, payment status. We do not store full card numbers. These are handled by Stripe.
Account data
Username, hashed password, account preferences, including whether you are opted in to newsletters.
Device data
Your FlightAbove device identifier, home location (latitude/longitude), tracking radius, and bearing preferences that you configure.
Usage data
Pages visited, time on site, referring URLs, device and browser type, collected via Google Analytics when you accept analytics cookies.
Advertising data
When you accept marketing cookies, Meta Pixel and Google Ads tags may record visits and conversions to measure ad performance.
Campaign attribution data
If you arrive via a tracked campaign link, we may store a short-lived reference so we can see which campaign led to a sign-up or order.
Communications data
Messages you send us via support tickets, contact forms, bug reports, or live chat.
Newsletter engagement data
When we send product newsletters, we may record whether a message was delivered and, using a small tracking image, whether it was opened.
2. How we collect your data
From you, from the site, and from Stripe.
Directly from you
When you create an account, place an order, register a device, subscribe preferences, or contact us.
Automatically
Through essential cookies needed to run the site, and through optional cookies or similar technologies only after you make a choice in our cookie banner.
From third parties
Stripe may share transaction confirmation data with us to fulfil your order.
3. How we use your data
Each purpose has a legal basis.
| Purpose | Legal basis |
|---|---|
| Processing and fulfilling your order | Contract performance |
| Sending order confirmations and shipping updates | Contract performance |
| Managing your account and device configuration | Contract performance |
| Providing customer support and live chat | Contract performance / Legitimate interest |
| Improving our website and services (analytics) | Consent (optional cookies) |
| Measuring advertising and campaign performance | Consent (optional cookies) / Legitimate interest for basic attribution where PECR allows |
| Sending product newsletters and similar updates to customers | Consent, or soft opt-in / legitimate interest for similar products where PECR allows, with an unsubscribe in every message |
| Understanding whether newsletters were opened | Legitimate interest in measuring product communications, with unsubscribe and privacy controls |
| Complying with legal obligations | Legal obligation |
5. Emails, newsletters, and open tracking
Order emails are not marketing. Newsletters can be measured.
Transactional email
We send transactional emails that are needed to run your account or order (for example verification, order confirmation, shipping updates, and support replies). These are not marketing and do not use newsletter open tracking.
Newsletters
We may also send product newsletters and similar updates about FlightAbove features to registered customers who have not unsubscribed. Every newsletter includes an unsubscribe link. You can opt out at any time. We keep a suppression record so we do not email you again for that purpose.
Open tracking
Newsletters may include a small tracking image (a pixel) that tells us when the email was opened, and how often. We use this to understand whether our updates are useful. Some email apps block images or load them automatically, so open data is approximate. Unsubscribing stops future newsletters.
6. Sharing your data
We do not sell personal data.
We may share it with the following categories of third party only where necessary.
Stripe
Payment processing. Stripe is PCI-DSS compliant and processes your card data on our behalf.
Google Analytics
Website usage analytics, when you accept analytics cookies.
Meta / Google Ads
Advertising measurement, when you accept marketing cookies and those tags are enabled.
Tawk.to
Live chat on the website, when you accept optional cookies.
Email delivery provider
To send account, order, and newsletter emails.
Delivery carriers
Your name and delivery address are shared with our shipping provider to fulfil your order.
Legal authorities
Where required by law or a valid court order.
7. International transfers
Some providers are outside the UK
Some of our third-party providers (including Google, Meta, Stripe, and Tawk.to) may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as standard contractual clauses or adequacy decisions.
8. Data retention
Only for as long as necessary
- Account data
- For the duration of your account, plus 2 years after closure.
- Order records
- 7 years to comply with UK tax and accounting obligations.
- Support communications
- 2 years from the date of the last correspondence.
- Newsletter preference and send records
- For as long as needed to honour unsubscribe requests and measure recent campaigns, then deleted or anonymised.
- Analytics data
- Retained per Google Analytics retention settings when analytics cookies are accepted.
- Campaign attribution cookie
- Up to 30 days.
9. Your rights
Under UK GDPR, and we reply within a month.
To exercise any of these rights, email us at [email protected]. We will respond within one calendar month.
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate data.
Right to erasure
Ask us to delete your data, subject to legal obligations.
Right to restriction
Ask us to restrict how we process your data.
Right to data portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interest, including direct marketing. Marketing objections are absolute.
Right to withdraw consent
Where processing is based on consent, including optional cookies, you may withdraw it at any time using Cookie settings or by contacting us.
10. Security
HTTPS, hashed passwords, access controls
We implement technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include encrypted connections (HTTPS), hashed passwords, and access controls. No method of transmission over the internet is completely secure. We cannot guarantee absolute security.
11. Children
Not directed at under 18s
Our website and products are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us so we can delete it.
12. Changes to this policy
Posted here, with a new date
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
13. Contact and complaints
Privacy queries, and the ICO if you are unhappy.
LLS Creations Ltd trading as FlightAbove
Company number 17491307
Registered in England and Wales
Registered office:
66 Paul Street
London
England
EC2A 4NA
United Kingdom
Email: [email protected]
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.