Privacy Policy

Updated October 2026.

This Privacy Policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

DZ Aviation, a trading name of DZ Creative & Consultancy Ltd

(Registered Number 15500250. Registered in England and Wales. Registered Office: 128 City Road, London, United Kingdom, EC1V 2NX) is the data controller for personal data processed via Breez.aero, except for the member information described in section 5.

Registered with the UK Information Commissioner's Office (ICO), registration reference ZB774869.

Contact: support@breez.aero

2. Data We Collect

We may collect and process:

Name and email address
Account and authentication data
Group membership and administrative data, including bookings you make
Profile details you or your group choose to store, such as a licence and medical certificate type and expiry dates, nationality and emergency contacts
Documents and images you upload
Usage and activity logs, including internet addresses used to sign in
Subscription and billing status (via Stripe)
Mailing list details (see section 13)
Communications sent to us

Payment card data is handled directly by Stripe and is not stored by Breez.aero.

Breez.aero is not intended for use by anyone under 18, and we do not knowingly collect personal data from children.

3. How We Use Your Data

We process personal data to:

Create and manage user accounts
Provide core platform functionality
Manage subscriptions and billing
Communicate service-related messages
Send news, updates and offers, where you have agreed
Improve performance, reliability, and security
Meet legal and regulatory obligations

4. Lawful Bases for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on:

Contract – to provide the Service
Legal obligation – accounting, tax, and compliance
Legitimate interests – include maintaining platform security, preventing misuse, and improving service reliability.
Consent – marketing communications such as news and offers (given by ticking a box and, for the mailing list, confirming your email address). You can withdraw it at any time.

5. Group Administrators and Member Information

Group administrators decide what information to hold about their members (for example contact details, licence and medical certificate dates, and emergency contacts) and why. For that information Breez.aero acts as a processor on the group’s behalf, stores it securely and handles it only on the group’s instructions. Group administrators are responsible for having a lawful reason to hold it and for telling their members how it is used. If you are a member and want to see or change your information, you can do so in your profile or ask your group administrator; you can also contact us.

6. Third-Party Processors

We use trusted third parties, including:

Our hosting provider (UK data centre) – application hosting and database
SendGrid – sending emails (service messages and, where you have agreed, news and offers)
Google Analytics – usage and performance monitoring (only with your consent)
Stripe – payment processing

Stripe may use cookies or similar technologies to support payment processing, fraud prevention, and security. These cookies are strictly necessary for the provision of payment services.

All processors act under contractual obligations to protect personal data.

7. International Data Transfers

Some of our providers, such as our email delivery provider and Google, are based in or process data in the United States. Where data is transferred outside the UK, we rely on UK adequacy decisions (including the UK-US data bridge) or appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to EU Standard Contractual Clauses.

8. Data Retention

Account data is retained for the duration of the account and for up to 90 days after account closure unless earlier deletion is requested.
If a free trial ends without a plan being chosen, the group's data is kept for 90 days and then deleted.
If you are removed from a group, or leave it, the group keeps a record of your membership and your past bookings. The personal details the group holds about you (for example its own member fields) are deleted 12 months later, and your past bookings then show as “Former member”. You can still see and download your own booking history from your account.
Billing records: retained as required by UK law.
Operational and security logs (including audit records of important actions) are retained for up to 12 months unless required for security or legal purposes. Other logs are kept for up to 90 days.
Backups are kept for up to 30 days and then overwritten.
Mailing list sign-ups that are not confirmed are deleted after 7 days. If you unsubscribe, we keep only your email address on a “do not email” list so that we never email you by mistake.

You may request deletion of your account, subject to legal retention requirements.

9. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion
Restrict or object to processing
Data portability
Withdraw consent at any time

Requests should be sent to support@breez.aero. We will respond within one month.

10. Cookies

Breez.aero uses cookies and similar technologies to operate the Service.

Essential cookies
These cookies are necessary for the Service to function and cannot be switched off. They are used for:

Authentication and login sessions (if you choose “Keep me signed in on this device”, the sign-in cookie lasts up to 30 days of use, and up to 90 days at most; otherwise it ends when you close your browser)
Security and fraud prevention
Core site functionality and performance

These cookies do not require consent under UK law.

Analytics cookies
We use Google Analytics to collect aggregated information about how users interact with the Service, such as pages visited, time spent on pages, and general usage patterns. This information helps us understand how the Service is used and improve performance and usability.

Analytics cookies are only set where valid consent has been provided via our cookie banner.

Google Analytics is provided by Google LLC, which may process data as an independent data controller and may process data outside the UK. Where this occurs, appropriate safeguards are used, including UK adequacy decisions or approved contractual mechanisms.

You can manage or withdraw your cookie consent at any time via the cookie settings available on the Service.

11. Security

We apply appropriate technical and organisational measures, including:

Hosting in the United Kingdom
Personal details such as addresses, dates of birth, licence, medical certificate and emergency contact details are encrypted when stored
Two-factor sign-in, which you can switch on
Access controls and the principle of least privilege
Encrypted connections
Audit records of important actions
Regular backups

No system is completely secure, but we take reasonable steps to protect data.

12. Support Access

Our support team can view your account to help you only with a documented reason, in a time-limited session, and every such access is recorded. Where you have the option, you can allow or withdraw this in your account security settings.

13. The Mailing List and Email

If you join our mailing list from the website we collect your first name and email address and, only if you choose to give them, your telephone number and home airfield. We use them to send news about Breez.Aero, new features and introductory offers. Our lawful basis is your consent, given by ticking the box and confirming your email address. We keep a record of when and how you agreed (the date, the wording and the internet address used).

Every news or offers email contains an unsubscribe link. If you later create an account you will not receive duplicate emails, and you can choose which optional emails you receive in your account settings. Emails the Service needs in order to work (such as sign-in and security messages, booking confirmations, invitations, billing messages and important changes to the Service) are always sent.

14. Complaints

You may lodge a complaint with the UK Information Commissioner’s Office (ICO): https://www.ico.org.uk

We would appreciate the opportunity to address your concerns before you contact the ICO.

15. Policy Updates

We may update this Privacy Policy from time to time.

Material changes will be notified via the Service or email.