Privacy Notice

Who is responsible for your data

This Privacy Notice is provided by Tine Ningal, the individual operator of Irish Flight Deck. I act as the data controller for personal data collected through this website.

What personal data we collect

We may collect the following categories of personal data:

• Account information: name, email address, and password when you create an account.
• Usage data: pages visited, quiz and mock exam interactions, and feature usage, used to improve the site.
• Device and technical data: IP address, browser type, and device information, collected automatically for security and performance.
• Support messages: anything you send when contacting us for help.
• Payment data: payment transactions are handled by Paddle. We do not store full payment card details on our servers.

How we use your data

We use personal data for the following purposes:

• To provide and maintain the website and your account.
• To deliver study content, mock exams, and tools.
• To respond to support requests.
• To improve the site based on usage patterns.
• To prevent fraud and keep the service secure.
• To process donations and supporter subscriptions.

The legal bases for processing include contract performance (when providing the service), legitimate interests (security, fraud prevention, and improvement), and consent (where required by law, such as for optional marketing cookies).

Who we share data with

We share personal data only with trusted service providers and where necessary:

• Paddle: our Merchant of Record for payments, subscription management, tax compliance, and invoicing.
• Hosting and analytics providers: to run the site and understand how it is used.
• Professional advisers: when required for legal, accounting, or compliance purposes.
• Authorities: when required by law or to protect rights and safety.

International transfers

Some service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions to protect your data.

Data retention

We keep personal data only as long as necessary for the purposes described above. Account data is retained while your account is active and deleted or anonymised when it is no longer needed, unless a longer retention period is required by law.

Your rights

Depending on your location, you may have rights including: access to your data, correction of inaccurate data, erasure, restriction of processing, data portability, and objection to processing. To exercise your rights, contact us via the support page.

If you are in the EU or UK, you also have the right to complain to your local data protection supervisory authority.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular security reviews.

Cookies

We use essential cookies to keep you signed in and maintain site functionality. We may use analytics cookies to understand how the site is used. You can manage cookie preferences through your browser settings.

Changes to this notice

We may update this Privacy Notice from time to time. The latest version will be posted on this page with the updated date.

Contact

For privacy questions or to exercise your rights, contact Tine Ningal via the support page on the site.