Privacy Policy

1. Introduction

MAK Aviation, LLC (referred to as MAK Aviation, we, us, or our) is deeply committed to protecting the privacy and security of every individual who interacts with our services, website, and digital platforms. This comprehensive Privacy Policy describes how we collect, use, store, share, and safeguard your personal information when you access or use our website, mobile applications, and related aviation services. Our registered office is located at 351 E 1750 N, Vineyard, Utah 84059-8110, United States, and we operate under the development and technical direction of Dub J Holdings.

This policy applies to all users of our website, including visitors, customers, crew members, vendors, and any other individuals who interact with MAK Aviation. By using our website or providing your information to us, you acknowledge that you have read and understood the practices described in this document. We encourage you to read this policy carefully and contact us with any questions using the details provided in Section 15.

We have designed this Privacy Policy to be as transparent as possible, reflecting our core belief that your personal data belongs to you. We do not and will not sell your personal information to third parties for their own marketing purposes. Our data handling practices align with applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR) where applicable.

MAK Aviation, LLC operates in the highly regulated aviation industry, and we understand the sensitivity of operational and personal data. Our privacy framework is built on principles of data minimization, purpose limitation, and accountability. We regularly review and update our practices to ensure ongoing compliance and to reflect changes in our business, technology, and legal obligations.

This policy covers all information collected through our website, email communications, telephone calls, in-person interactions at our facilities, and through third-party platforms that we use to deliver our services. It also applies to information collected via cookies, web beacons, and similar tracking technologies deployed on our digital properties.

We recognize that privacy is not static; therefore we have established internal governance structures, including a dedicated data protection team, to oversee our compliance with this policy and applicable laws. Our employees and contractors receive mandatory privacy training on a regular basis, and we conduct periodic audits to verify that our practices align with our commitments.

MAK Aviation, LLC is the data controller for the personal information we collect. If you have any concerns about how your data is handled, you have the right to lodge a complaint with a supervisory authority, although we ask that you first contact us directly so that we can address your concerns promptly and fairly.

This Privacy Policy is an integral part of our Terms of Service. Capitalized terms used but not defined in this policy have the meanings assigned to them in the Terms of Service. We reserve the right to update or modify this policy at any time, and we will notify you of material changes as described in Section 14.

Our website may contain links to third-party websites, plugins, and services. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing any personal information. MAK Aviation is not responsible for the content or privacy practices of any external sites.

By using our services, you consent to the collection and processing of your information as described in this policy. If you do not agree with any part of this Privacy Policy, you must discontinue use of our website and services immediately. Your continued use after any modifications constitutes acceptance of those changes.

2. Information We Collect

We collect several categories of personal information from and about you, depending on the nature of your interaction with MAK Aviation. This includes information that identifies you personally, as well as data that relates to an identifiable individual. The types of data we collect include, but are not limited to, your full name, postal address, email address, telephone number, company affiliation, job title, and pilot or crew credentials.

When you engage with our services, we collect payment and financial information necessary to process transactions, such as credit or debit card numbers, bank account details, billing addresses, and invoice records. This data is processed securely and is never stored longer than required for business or legal purposes. We use PCI-compliant payment processors to safeguard your financial data.

We automatically collect certain technical information when you visit our website, including your Internet Protocol (IP) address, browser type and version, operating system, device identifiers, screen resolution, language preferences, and the referring URL. This usage data helps us diagnose technical issues, improve site performance, and understand user behavior in aggregate.

Cookies and similar tracking technologies (such as pixels, web beacons, and local storage) are used to enhance your browsing experience, remember your preferences, and analyze traffic patterns. We collect information about your interactions with our website, including pages viewed, links clicked, time spent on each page, and search queries. You can manage your cookie preferences through your browser settings.

If you communicate with us via email, phone, or through our contact forms, we retain records of those communications, including metadata such as time and date, subject matter, and any attachments you share. We may also record or monitor phone calls for quality assurance, training, and legal compliance purposes, with appropriate notice where required by law.

For aviation-specific services, we may collect information related to flight operations, including aircraft registration numbers, flight logs, maintenance records, crew schedules, and passenger manifests. This data is essential for the safe and efficient delivery of our services and is handled with the highest level of confidentiality.

We also collect information from job applicants, including resumes, cover letters, employment history, educational background, and references. This information is used solely for recruitment and hiring purposes and is retained in accordance with our data retention schedule.

In some cases, we collect information from third-party sources, such as credit reference agencies, background check providers, aviation authorities, and public databases. We combine this data with information you provide to us to maintain accuracy and to fulfill our legal and contractual obligations.

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data) unless required by law or with your explicit consent. If such data is necessary for a specific service, we will inform you and obtain your consent before processing.

Our website is not designed to collect information from children under the age of 16. If we become aware that a child has provided us with personal data without parental consent, we will take immediate steps to delete that information. Please see Section 12 for more details on children's privacy.

3. How We Collect

We collect personal information through direct interactions with you. This occurs when you fill out forms on our website, subscribe to newsletters, register for an account, request a quote, book a charter, or contact us via email or telephone. Every direct collection point is accompanied by a clear notice explaining what information is required and why.

Automated collection happens as you navigate through our website. We use cookies, server logs, and analytics tools (such as Google Analytics) to gather technical data and behavioral information. These technologies allow us to recognize your device, remember your preferences, and improve the functionality of our site. You have control over cookie settings through your browser.

We receive information from third-party sources that help us verify your identity, prevent fraud, and enhance our services. These sources include public databases, credit bureaus, aviation industry registries, and social media platforms (if you choose to log in or connect via those services). We ensure that any third-party data is obtained lawfully and in accordance with their privacy policies.

Cookies and tracking technologies are deployed both by us and by trusted third-party partners. We use session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted). We also use web beacons in our emails to track delivery and open rates, which helps us measure the effectiveness of our communications.

When you interact with our customer support team, we may collect information through recorded calls, live chat transcripts, and email correspondence. These records are used for training, dispute resolution, and service improvement. We will inform you at the beginning of any call if it is being recorded.

We collect information from your device automatically, including your IP address, browser fingerprint, operating system, and device type. This data is aggregated and anonymized for statistical analysis, but we may also use it to detect and prevent security threats, fraud, or abuse of our services.

If you attend events, webinars, or trade shows where MAK Aviation is present, we may collect your contact details and professional information through sign-up sheets, business card exchanges, or digital check-ins. We will always provide a notice of collection at the point of data capture.

We may also collect information from your interactions with our advertisements on third-party platforms, such as social media networks and search engines. This includes data about whether you clicked on an ad, viewed a page, or completed a conversion event. Such data is pseudonymous and used for campaign optimization.

In limited circumstances, we collect information from government agencies, law enforcement, or aviation authorities as required by law or for the safety and security of our operations. We will always ensure that such collection is proportionate and legally justified.

We do not use deceptive or misleading methods to collect personal information. All data collection is performed with your knowledge and, where required by law, your explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. Types of Information

Identity information includes your full legal name, date of birth, nationality, passport number, driver's license details, and any other government-issued identification numbers. This data is necessary for identity verification, security screening, and compliance with aviation regulations.

Contact details encompass your postal address, email address, telephone numbers (mobile and landline), and professional contact information. We use this data to communicate with you about your bookings, account updates, and service announcements, as well as to respond to your inquiries.

Financial data includes bank account numbers, credit or debit card information, billing addresses, transaction histories, and tax identifiers. This information is used solely for payment processing, invoicing, and fraud prevention. We do not store full payment card numbers after authorization; only tokenized references are retained.

Technical data comprises IP addresses, browser type and version, time zone settings, operating system, device identifiers, and other technology on the devices you use to access our website. This data helps us optimize our site for different platforms and diagnose technical issues.

Usage information includes details about how you use our website, products, and services. This includes page views, navigation paths, search terms, referral sources, and the duration of your visits. We analyze this data to improve user experience and to develop new features.

Marketing data covers your preferences for receiving marketing communications, your subscription status, and your engagement with our emails (opens, clicks, unsubscribes). We use this data to tailor our communications and ensure they are relevant to your interests.

Special categories of data (sensitive data) are processed only in exceptional circumstances, such as when required for medical emergencies during flights or for compliance with disability accommodations. We will always obtain your explicit consent before processing such data, unless otherwise permitted by law.

Aviation-specific data includes pilot licenses, medical certificates, flight hours, aircraft type ratings, and crew scheduling information. This data is essential for operational safety and regulatory compliance, and it is treated with the highest level of confidentiality.

Communication records include the content of emails, chat messages, and phone call transcripts (where permitted). We retain these records to maintain accurate records of our interactions, to resolve disputes, and to improve our customer service.

Inferred data is generated based on your usage patterns and preferences. For example, we may infer that you are interested in certain aircraft types or destinations based on your browsing behavior. This data is used to personalize your experience and recommend relevant services.

5. How We Use

We use your personal information primarily to deliver the services you have requested, including flight bookings, charter management, maintenance coordination, and crew scheduling. Without this information, we would be unable to fulfill our contractual obligations to you.

Communication is a core purpose: we use your contact details to send booking confirmations, service updates, safety notices, and account-related messages. We also respond to your inquiries, requests, and complaints. Marketing communications are sent only with your consent, and you can opt out at any time.

Continuous improvement of our website and services relies on usage data and analytics. We analyze trends, track user behavior, and measure the effectiveness of our content to enhance functionality, design, and user satisfaction. This processing is based on our legitimate interest in providing a high-quality digital experience.

Security is paramount in aviation. We use personal information to detect, prevent, and respond to fraud, unauthorized access, cyberattacks, and other security incidents. This includes monitoring network traffic, verifying identities, and conducting risk assessments.

Legal compliance drives many of our processing activities. We use your data to comply with applicable laws, regulations, court orders, and government requests. This includes tax reporting, anti-money laundering checks, sanctions screening, and aviation safety regulations.

Business operations such as accounting, auditing, insurance, and record-keeping require the use of personal data. We maintain accurate financial records, process payments, manage invoices, and conduct internal audits to ensure the integrity of our operations.

We use personal information to personalize your experience on our website, such as remembering your preferences, language settings, and previously viewed pages. This enhances your convenience and reduces the need to re-enter information.

Research and development activities may involve the use of anonymized or aggregated data to identify market trends, develop new services, and improve existing offerings. This data is never used to identify individuals.

In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the business transaction. We will notify you of any such change and ensure that your data continues to be protected under this Privacy Policy.

We also use your information to enforce our Terms of Service, protect our rights and property, and defend against legal claims. This includes using data as evidence in disputes or investigations.

6. Legal Basis

We process your personal information only when we have a valid legal basis under applicable data protection law. The most common bases are: your consent, the performance of a contract, compliance with a legal obligation, protection of vital interests, and our legitimate interests (provided they do not override your rights).

Consent is obtained for specific processing activities, such as sending marketing emails, placing non-essential cookies, and processing sensitive data. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Contract performance is the basis for processing necessary to fulfill our agreements with you, including booking flights, processing payments, and providing customer support. Without this processing, we cannot deliver the services you have requested.

Legitimate interests form the basis for many of our processing activities, including website analytics, fraud prevention, network security, direct marketing (where permitted), and business improvement. We conduct balancing tests to ensure that our interests do not infringe on your privacy rights.

Legal obligations require us to process certain data to comply with federal, state, and international laws. This includes tax reporting, record-keeping for aviation authorities, anti-money laundering checks, and responses to lawful requests from government agencies.

Vital interests are invoked in emergency situations where processing is necessary to protect someone's life or physical safety. For example, we may share passenger information with medical personnel during an in-flight medical emergency.

Public interest processing may occur when we are tasked with a function in the public interest, such as reporting safety incidents to the National Transportation Safety Board (NTSB) or other regulatory bodies.

We do not rely on consent as a blanket basis; where possible, we rely on legitimate interests or contract performance to minimize the burden on you. We document all legal bases in our records of processing activities.

If you are located in the European Economic Area (EEA) or the United Kingdom, we ensure that any transfer of your data outside those regions is subject to appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision.

We periodically review our legal bases to ensure they remain appropriate and up to date. If we intend to process your data for a new purpose that is incompatible with the original purpose, we will notify you and obtain consent if required.

7. Data Sharing

We share your personal information with trusted service providers who perform functions on our behalf, such as payment processing, cloud hosting, email delivery, analytics, customer relationship management, and background checks. These providers are contractually bound to protect your data and may not use it for any purpose other than the services we have engaged them for.

In the event of a business transfer, such as a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website of any such change and the choices you may have.

We may disclose your information to legal authorities, regulators, or law enforcement agencies when required by law, court order, subpoena, or government request. This includes compliance with aviation safety regulations, tax laws, and anti-fraud measures.

Professional advisors such as lawyers, auditors, insurers, and consultants may have access to your personal information when necessary for the provision of their services. They are subject to strict confidentiality obligations and may not use your data for any other purpose.

With your explicit consent, we may share your information with third parties for purposes not covered by this policy. For example, if you request that we introduce you to a partner company for a specific service, we will share only the necessary information with your permission.

We share aggregated, anonymized data with third parties for research, marketing, or analytical purposes. This data does not identify individuals and cannot be used to reconstruct personal information.

Our website may include social media features, such as the Facebook Like button or Twitter share button. These features may collect your IP address and set cookies to enable proper functioning. Your interactions with these features are governed by the privacy policies of the respective social media platforms.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We are committed to maintaining your trust and will never monetize your data in that way.

In some cases, we may share information with aviation authorities, such as the Federal Aviation Administration (FAA), to comply with regulatory requirements. This sharing is limited to what is legally necessary and is done with appropriate safeguards.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not authorize them to use your data for their own purposes, and we hold them accountable for any breaches of confidentiality.

8. International Transfers

MAK Aviation, LLC operates primarily in the United States, but we may transfer your personal information to countries outside your country of residence, including to jurisdictions that may have different data protection laws. We ensure that any such transfer is subject to appropriate safeguards to protect your data.

For transfers from the European Economic Area (EEA) or the United Kingdom to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or the UK Information Commissioner's Office. These clauses provide contractual guarantees that your data will be protected to a standard equivalent to that in the EEA or UK.

We also rely on adequacy decisions where the European Commission has determined that a third country provides an adequate level of data protection. For transfers to countries without an adequacy decision, we implement supplementary measures such as encryption and pseudonymization.

Our service providers may store or process data in data centers located in the United States, Canada, Ireland, or other regions. We conduct due diligence on all providers to ensure they maintain robust security and privacy practices.

If you are located in a jurisdiction with specific transfer restrictions, we will ensure that your data is transferred only to countries that provide an adequate level of protection or under mechanisms that safeguard your rights.

We have implemented data transfer agreements with all material sub-processors that include SCCs where required. These agreements are reviewed and updated regularly to reflect changes in law and business relationships.

In limited circumstances, we may transfer data to countries without adequate safeguards if it is necessary for the performance of a contract with you, for important reasons of public interest, or with your explicit consent after being informed of the potential risks.

We maintain a register of all international transfers and the safeguards applied. You can request a copy of the relevant safeguards by contacting us using the details in Section 15.

We participate in the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework where applicable, and we comply with the principles of those frameworks for transfers of personal data from the EEA, UK, and Switzerland to the United States.

Our commitment to protecting your data knows no borders. We apply the same high standards of privacy and security to all personal information, regardless of where it is processed.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The specific retention periods depend on the type of data and the context of processing.

Account and profile information is retained for the duration of your active relationship with us, plus a reasonable period afterward to allow for re-activation or to comply with legal obligations. If your account is inactive for seven years, we will delete or anonymize your data.

Transaction and financial data is retained for a minimum of seven years to comply with tax and accounting regulations, as well as aviation record-keeping requirements. After this period, the data is securely deleted or anonymized.

Communications records (emails, chat logs, call recordings) are retained for three years from the date of the interaction, unless a longer retention is required for legal or regulatory purposes. We periodically purge older records to minimize data storage.

Usage data and analytics are retained in aggregated form for up to 26 months. Individual-level data is pseudonymized and retained for a maximum of 12 months, after which it is either deleted or converted to aggregate statistics.

Cookies and tracking data are retained according to the lifespan of each cookie, as described in our Cookie Policy. Session cookies expire at the end of your browsing session, while persistent cookies may last up to two years.

Job applicant data is retained for 12 months after the hiring decision, unless the applicant consents to longer retention for future opportunities. After that period, the data is securely destroyed.

We apply specific retention criteria for aviation operational data, such as flight logs and maintenance records, which are governed by FAA regulations. These records may be retained for the life of the aircraft plus an additional period as required by law.

When retention periods expire, we securely delete or anonymize the data using industry-standard methods, including cryptographic erasure and physical destruction of storage media where appropriate.

We regularly review our retention schedules to ensure they remain compliant with evolving legal standards and business needs. If you believe we are retaining your data for longer than necessary, you have the right to request deletion as described in Section 11.

10. Data Security

We implement a comprehensive set of technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our security program is based on industry standards such as NIST and ISO 27001.

Technical measures include encryption of data in transit using TLS 1.3 protocols, encryption of data at rest using AES-256, firewalls, intrusion detection systems, and regular vulnerability scanning. We also employ multi-factor authentication for access to sensitive systems.

Organizational measures include strict access controls based on the principle of least privilege, background checks for employees handling personal data, and mandatory privacy and security training for all staff. We maintain a data protection officer (DPO) to oversee compliance.

Incident response is a critical component of our security framework. We have a dedicated incident response team that follows a documented plan to contain, assess, and remediate any security breaches. We notify affected individuals and regulators as required by law.

Encryption is used extensively: all personal data stored in our databases is encrypted, and we use tokenization for payment card data. Our encryption keys are managed through a hardware security module (HSM) with strict key rotation policies.

Employee training is conducted annually, with additional sessions for high-risk roles. Training covers phishing awareness, password hygiene, data classification, and incident reporting. We simulate phishing attacks to test and reinforce learning.

Access controls are enforced through role-based permissions, and all access to personal data is logged and audited. We review access rights quarterly and revoke access immediately when an employee changes roles or leaves the company.

We conduct regular penetration tests and security audits by independent third-party firms. Any vulnerabilities identified are prioritized and remediated within defined timelines. We also participate in bug bounty programs to encourage responsible disclosure.

Physical security measures include biometric access controls, 24/7 surveillance, and secure destruction of paper records containing personal data. Our data centers are SOC 2 certified and located in geographically diverse regions.

Despite our best efforts, no security measure is completely infallible. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you without undue delay and provide information about the nature of the breach and the steps we are taking to address it.

11. Your Rights

You have the right to access the personal information we hold about you. You may request a copy of your data, and we will provide it in a structured, commonly used, and machine-readable format. We will respond to your request within 30 days, free of charge, unless the request is manifestly unfounded or excessive.

You have the right to rectification if your personal information is inaccurate or incomplete. You can update your account information directly through your profile settings, or you can contact us to make corrections. We will ensure that any changes are communicated to third parties with whom we have shared your data.

You have the right to erasure (the right to be forgotten) in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected, or when you withdraw consent and there is no other legal basis for processing. We will evaluate your request and delete your data unless we are required to retain it by law.

You have the right to restriction of processing in specific situations, such as when you contest the accuracy of the data or when you have objected to processing and we are verifying whether our legitimate grounds override yours. While processing is restricted, we will only store your data with your consent or for legal claims.

You have the right to data portability, which allows you to obtain and reuse your personal data for your own purposes across different services. We will provide your data in a CSV or JSON format, and we will transmit it directly to another controller where technically feasible.

You have the right to object to processing based on our legitimate interests, including profiling for direct marketing. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

You have the right not to be subject to automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. We do not currently use fully automated decision-making for creditworthiness or similar purposes, but if we do in the future, we will inform you and provide a right to human intervention.

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates applicable law. We encourage you to contact us first so that we can attempt to resolve your concern directly.

To exercise any of these rights, please submit a request via email to touch@dubjholdings.autos or by calling +1 (912) 741-9950. We may need to verify your identity before processing your request, and we will ask for information that matches our records.

We will not discriminate against you for exercising any of your privacy rights. You will not be denied service, charged different rates, or provided a lower quality of service because you have made a data subject request.

12. Children's Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately.

We comply with the Children's Online Privacy Protection Act (COPPA) and other applicable laws regarding the collection of data from minors. In the limited circumstances where we may need to collect information from a child (e.g., for a minor traveling unaccompanied), we will obtain verifiable parental consent before collecting any data.

If we become aware that we have inadvertently collected personal information from a child under 16 without proper consent, we will take prompt steps to delete that data from our systems. We will also notify the parent or guardian of the deletion.

We do not use or disclose children's personal information for any marketing or advertising purposes. Any data collected from a child is used solely for the specific service requested, such as arranging unaccompanied minor travel or providing educational materials.

Parents have the right to review their child's personal information, request deletion, and refuse further collection or use. To exercise these rights, please contact us using the details in Section 15. We will verify your identity as the parent or legal guardian before processing your request.

We encourage parents to supervise their children's online activities and to educate them about safe internet practices. Our website may contain content that is not suitable for children, and we rely on parents to guide their children's use of our services.

We do not offer any services that require children to disclose more information than is reasonably necessary to participate in the activity. We minimize data collection from minors to the greatest extent possible.

In the event that we need to collect health or medical information about a child for safety reasons (e.g., allergies or medical conditions during a flight), we will obtain explicit parental consent and handle the data with the highest level of sensitivity.

Our data retention policies for children's data are designed to ensure that information is kept only as long as necessary for the specific service and then securely deleted. We do not retain children's data for longer than 30 days after the service is completed, unless required by law.

We regularly review our practices related to children's privacy to ensure ongoing compliance with COPPA and other relevant regulations. If you have any concerns about how we handle children's data, please contact our Data Protection Officer.

13. Third-Party Services

Our website may contain links to third-party websites, plugins, and applications that are not owned or controlled by MAK Aviation. This includes links to social media platforms, partner companies, aviation authorities, and other resources. Clicking on those links may allow third parties to collect or share data about you.

We do not control these third-party services and are not responsible for their privacy practices. We encourage you to read the privacy policies of every website you visit and every service you use. This Privacy Policy applies solely to information collected by MAK Aviation.

We integrate services from third-party providers to enhance your experience, such as Google Analytics for traffic analysis, payment gateways like Stripe and PayPal, and customer relationship management tools. These providers have access to your personal information only to perform specific tasks on our behalf and are contractually bound to protect it.

Social media features on our site, such as the Facebook Pixel, LinkedIn Insight Tag, and Twitter conversion tracking, may collect information about your browsing behavior. These features are governed by the privacy policies of the respective social media companies, and we recommend reviewing them.

We use advertising networks to display relevant ads to you on other websites. These networks may use cookies and web beacons to collect information about your visits to our site and other sites to provide targeted advertising. You can opt out of interest-based advertising through the Digital Advertising Alliance or your browser settings.

Our website includes embedded content from third parties, such as YouTube videos, Google Maps, and flight tracking widgets. These embedded services may set their own cookies and collect data about your interaction with the content. We do not have control over their data collection practices.

We use third-party analytics services to understand how users interact with our website. These services collect information such as pages visited, time spent, and geographic location. The data is aggregated and anonymized, and we do not allow these providers to use the data for their own purposes.

If you choose to log in to our website using a social media account (e.g., Google or LinkedIn), we will receive certain profile information from that provider, such as your name and email address. This data is used only for authentication and account creation, and we do not store it beyond what is necessary.

We may integrate with third-party aviation platforms, such as flight scheduling systems, weather services, and maintenance tracking tools. These integrations are necessary for the delivery of our services, and we ensure that any data shared is limited to what is required for the specific function.

We regularly review the third-party services we use to ensure they meet our privacy and security standards. If we become aware that a third party is processing your data in a way that violates this policy, we will take appropriate action, including terminating the relationship if necessary.

14. Changes to Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business, technology, legal obligations, or regulatory environment. We will notify you of material changes through a prominent notice on our website, via email (if we have your contact information), or by other appropriate means.

We will review this policy at least annually to ensure it remains accurate and compliant. The date of the most recent revision is displayed at the top of this page. We encourage you to check this page periodically for any updates.

Material changes include, but are not limited to, changes in the categories of data collected, the purposes of processing, the types of third parties with whom we share data, and any new rights available to you. We will provide a summary of the changes and the effective date.

If you have an active account with us, we will send you a notification of material changes via email at least 30 days before the changes take effect. You will have the opportunity to review the updated policy and, if required, provide consent for new processing activities.

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the revised policy. If you do not agree with the changes, you may close your account and stop using our services.

We will not make retroactive changes that reduce your privacy rights without your explicit consent. Any changes that require your consent under applicable law will be implemented only after we obtain that consent.

We maintain a version history of this policy, and previous versions are available upon request. You can request a copy of an earlier version by contacting us using the details in Section 15.

In the event that we are acquired by or merged with another company, we will notify you and update this policy to reflect any changes in data handling practices. Your data will continue to be protected under the principles described in this policy unless you are notified otherwise.

We encourage you to bookmark this page and review it regularly. If you have any questions about a change, please contact us before the change takes effect. We are committed to being transparent about how we handle your data.

This policy may be translated into other languages for convenience. In the event of a conflict between the English version and a translated version, the English version shall prevail.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us. We are committed to responding to your inquiries promptly and thoroughly.

Our Data Protection Officer (DPO) is responsible for overseeing our compliance with data protection laws. You can reach the DPO directly by email at touch@dubjholdings.autos with the subject line Attention: DPO or by mail at the address above, marked for the attention of the Data Protection Officer.

We aim to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within 30 days. If your request is complex or we receive a high volume of requests, we may extend this period by up to 60 days, and we will inform you of any such extension.

If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority. In the United States, you may contact the Federal Trade Commission (FTC) or your state's attorney general. For individuals in the European Economic Area, you may contact your local data protection authority.

We welcome your feedback on this Privacy Policy and our privacy practices. Your input helps us improve and ensures that we continue to meet your expectations. Please do not hesitate to reach out with any suggestions or concerns.

For press or media inquiries, please contact us via email with the subject line Media Inquiry. For legal or compliance matters, please mark your correspondence to the attention of our Legal Department.

We are committed to maintaining an open dialogue with our users about privacy. If you would like to request a copy of your data, update your preferences, or exercise any of your rights, please use the contact information above. We are here to help.

This Privacy Policy was developed with the guidance of Dub J Holdings, our trusted technology and development partner. Dub J Holdings has extensive experience in privacy compliance and has helped us build a robust framework for protecting your personal information.

Thank you for trusting MAK Aviation, LLC. Your privacy is our priority, and we are dedicated to safeguarding your personal information with the highest standards of care and integrity.