Privacy notice

Last updated 19.10.2026 · Draft, to be reviewed before launch

This notice explains what Hangarside does with the personal data of engineers, people new to aviation and contacts at employers and agencies.

Who is responsible

Hangarside is a trading name of [company name, legal form, NIF/company number and registered address] (the "controller"). Contact for anything about your data: hello@hangarside.aero.

What we collect

Identity and contact details: name, email, phone, country.
Licence details: Part-66 licence number, categories, type ratings, validity.
Career records you send: authorizations, employment and experience letters, logbooks and experience reports, training certificates, CV.
What you are looking for: roles, locations, availability, rate or salary expectations.
Payment status (the card itself is handled by Stripe; we never see card numbers).

Why we use it, and on what legal basis

Purpose	Legal basis (GDPR art. 6)
Preparing the recency check, Career File, CV and letters you ordered	Contract (6(1)(b))
Keeping your file for up to 2 years so we can update it and present you for roles	Your consent (6(1)(a)), given with a separate checkbox
Sending your profile or dossier to a specific employer or agency	Your consent for that specific role, every time
Reminders and job alerts by email	Your consent (6(1)(a))
Invoices and accounting records	Legal obligation (6(1)(c))

Our recency assessments are prepared by people, using software to organise your records. No decision about you is made by automated means alone, and the final decision on any authorization belongs to the issuing organisation or authority.

Who receives it

Employers and agencies: only with your written OK for a specific role.
Service providers acting for us: Jotform (request form, EU data centre), Google (file storage), Stripe (payments), Zoho (email), Netlify (website hosting). [confirm the final list of providers]

Some providers are based outside the EU or UK. Where data leaves the EU or UK, it is protected by the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep it

Documents and CVs: deleted 30 days after we deliver your files, unless you ticked the box to keep them.
With that consent: kept for up to 2 years after our last contact with you. Each new order or contact restarts the period. One month before it ends we ask whether to renew; without an answer, we delete.
Invoices: for the period tax law requires.

Your rights

You can ask for access, correction, deletion, restriction, a copy of your data (portability), and object to its use. You can withdraw any consent at any time with one email, without affecting what was done before. We reply within one month. If you are not satisfied, you can complain to the Portuguese supervisory authority, the CNPD (cnpd.pt), or the authority where you live, such as the ICO in the UK.