LEGAL

PRIVACY POLICY

last updated: 21 JULY 2026

1. Definitions

Personal Data (or “Data”): any information relating to an identified or identifiable natural person; an “identifiable natural person” is one who can be identified, directly or indirectly.

Avia Oversight (“we,” “us,” “our”): publisher of the Site and data controller for the processing operations described below.

Site: the Avia Oversight website (aviaoversight.com and related subdomains).

User (or “you”): any person who visits the Site and uses its services.

2. Processing Activities on the Site

We implement the following personal data processing activities:

a. Contact Form Management

Purpose: to enable users to send inquiries to Avia Oversight departments
Legal basis: consent of the data subject
Data collected: name, email address, phone number, company/organization, subject, and message. Fields marked with an asterisk (*) are required
Recipients: authorized personnel in relevant Avia Oversight departments
Retention period: messages are retained for 24 months and then deleted

To submit a message, you must read and accept this Privacy Policy by checking the confirmation box on the contact form. You undertake to provide complete, accurate, and legitimate information.

b. Consultation Scheduling

Purpose: to enable users to schedule consultations with Avia Oversight advisors
Legal basis: consent of the data subject
Data collected: name, email address, phone number, company, sector, service area of interest, preferred meeting time, and any additional context provided
Recipients: authorized personnel in the business development and delivery teams
Retention period: consultation records are retained for 24 months from last interaction, then deleted unless the engagement continues

c. Career Applications

Purpose: to process employment applications submitted through the Careers section
Legal basis: consent of the data subject; legitimate interest in evaluating candidates
Data collected: name, contact details, resume/CV, work history, qualifications, and any additional application materials submitted
Recipients: authorized personnel in Human Resources and hiring managers for the applicable role
Retention period: application data is retained for 24 months from submission, after which it is deleted unless the applicant is hired or has consented to extended retention

d. Information System Security

Purpose: to protect the information systems that support the Site
Legal basis: legitimate interest — Avia Oversight has implemented appropriate security and confidentiality measures to protect personal data against loss, alteration, or unauthorized disclosure
Data collected: connection logs, IP addresses, browser type, device information, and other data strictly necessary to secure the Site
Retention period: connection logs are retained for 12 months
Recipients: site administrators and the IT security team

e. Cookies and Similar Technologies

A cookie is a small file placed on your device by the sites you visit, used to enable navigation, remember preferences, and analyze usage.

Cookies used on this Site do not identify individuals by name and relate to pages visited, time spent per page, browsing equipment (operating system, browser, resolution), IP address (used for approximate geographical grouping), and similar metrics.

A cookie preference module is available on the Site to allow you to manage cookie deposits. Cookies from third-party providers are used only for specific functions and only if you have consented. You can withdraw consent at any time via the “Privacy Settings” link at the bottom of each page.

3. Data Transfers Outside the User's Region

The Site’s data is primarily hosted in [HOSTING LOCATION — e.g., United States or United States and European Union]. If you are located outside the hosting jurisdiction, your Personal Data may be transferred internationally. Where required by applicable law (including the EU GDPR and UK GDPR), such transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

4. Data Sharing

Avia Oversight never sells or transfers Personal Data to third parties for commercial or advertising purposes. We share data only:

With authorized internal personnel on a need-to-know basis
With trusted service providers (hosting, email, analytics) under contractual data protection obligations
Where required by law, regulation, court order, or governmental request
In the event of a corporate transaction (merger, acquisition, asset sale), subject to confidentiality

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your Personal Data:

Right of access — obtain confirmation of processing and a copy of your data
Right of rectification — correct inaccurate or incomplete data
Right of erasure — request deletion of your data (subject to legal retention requirements)
Right to restriction — limit how we process your data
Right to portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interest
Right to withdraw consent — where processing is based on consent

For California residents: you have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale/sharing of Personal Data (Avia Oversight does not sell or share your data).

For EU/UK residents: you have rights under the GDPR/UK GDPR, including the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact:

Data Protection Contact: [team@aviaoversight.com]

If we have reasonable doubt about your identity, we may request proof before responding. We will respond within 30 days of receiving a verifiable request.

If you do not receive a satisfactory response, you may file a complaint with the relevant data protection authority in your jurisdiction.

6. Data Security

We implement industry-standard technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit, access controls, security monitoring, and regular reviews. Despite these measures, no online transmission is 100% secure; you provide your data at your own risk.

7. Children's Privacy

The Site is not directed to children under 13 (or under 16 in the EU/UK), and we do not knowingly collect Personal Data from minors. If you believe we have inadvertently collected such data, please contact us immediately for deletion.

8. Modifications to This Privacy Policy

This Privacy Policy may be modified to reflect changes in our practices or applicable regulations. Material changes will be communicated via the Site.

Date of last modification of this Privacy Policy: [21 JULY 2026]

9. Contact

For questions about this Privacy Policy or our data practices:

Email: [team@aviaoversight.com]
Postal address: Avia Oversight LLC, 77 Sugar Creek Center Blvd, Suite 600, Sugar Land, TX 77478