Privacy Notice
This notice explains how Fly GACA handles personal data, in line with the Saudi Personal Data Protection Law (PDPL). We have deliberately kept the Service's data footprint small.
1. Who we are
Fly GACA ("we", "us") operates the website at flygaca.com. We are the controller of the personal data described below. Contact: privacy@flygaca.com.
2. What personal data we collect
At this stage the Service does not have user accounts. The personal data we collect is limited to:
- Waitlist email address — if you choose to join the waitlist for the Captain Adel assistant, we collect the email address you submit.
- Basic technical data — like any website, our hosting provider records standard request information (such as IP address and browser type) in server logs for security and reliability.
We do not use advertising cookies and we do not run cross-site or behavioural trackers. We do use a privacy-first, cookieless analytics service to count visits in aggregate — see section 8.
3. Why we use it, and our lawful basis
We use your waitlist email address only to notify you when the Captain Adel assistant becomes available — on the basis of your consent, which you give by submitting the form. Technical log data is used to keep the Service secure and working, on the basis of our legitimate interest in operating it safely.
4. Where your data is stored
Personal data is stored within the Kingdom of Saudi Arabia. Waitlist data is held in Google Cloud Firestore in the me-central2 (Dammam) region. We designed the Service so that personal data stays inside the Kingdom; any processing outside the Kingdom is limited to public, non-personal data only.
5. Sharing your data
We do not sell your personal data and we do not share it for marketing. We use Google (Firebase) as our infrastructure and hosting provider, and Cloudflare for privacy-first, cookieless usage analytics — each processing data on our behalf. We may disclose data where required by the law of the Kingdom or by a competent authority.
6. How long we keep it
We keep your waitlist email address until the assistant has launched and you have been notified, or until you ask us to remove it — whichever is sooner. Server logs are kept only for a short period for security purposes.
7. Your rights under the PDPL
Subject to the PDPL, you have the right to:
- be informed about how your personal data is used;
- access the personal data we hold about you;
- request that inaccurate data be corrected;
- request that your data be deleted;
- withdraw your consent at any time.
To exercise any of these rights, contact privacy@flygaca.com. You also have the right to lodge a complaint with the competent supervisory authority in the Kingdom.
8. Cookies & analytics
The Service uses only the minimal storage needed to function (for example, remembering your language preference in your browser). It does not use advertising or cross-site tracking cookies.
To understand how the Service is used, we use Cloudflare Web Analytics, a privacy-first analytics tool. It sets no cookies, does not fingerprint your device and does not track you across other websites. It records only aggregate, anonymous information — such as page views and referring sites — and cannot identify you. Because it collects no personal data, no consent banner is required.
9. Children
The Service is intended for pilots, instructors, cadets and aviation professionals, and is not directed at children. We do not knowingly collect personal data from children.
10. Changes to this notice
We may update this notice as the Service develops — in particular when user accounts, the logbook and the Captain Adel assistant launch, each of which will involve additional personal data and an updated notice. The date at the top shows when it was last revised.
11. Contact us
For any question about this notice or your personal data, contact privacy@flygaca.com.
This notice is an initial draft and is being reviewed by Saudi legal counsel before the platform's public launch. A full PDPL compliance review and a Data Protection Impact Assessment will be completed before user accounts and personal-data features go live.
← Back to home