Aerospace & Aviation Consulting Services Limited (AACS)
Effective date: 30 October 2026
This policy explains how Aerospace & Aviation Consulting Services Limited (“AACS”, “we”, “us”) collects, uses and protects personal information. It applies to our website aacsltd.co.uk, our consultancy, training and expert witness services, and our work for clients in the UK and overseas.
Aerospace & Aviation Consulting Services Limited, company number 08737359, registered in England and Wales. Dynevor House, 5-6 De La Beche Street, Swansea, SA1 3HA, United Kingdom.
For UK data protection law, AACS is the data controller of the personal information described here. Where we process information on a client’s instructions (for example when auditing a client’s records or preparing an operations manual), we act as a processor for that client, and the client’s own privacy notice also applies.
Privacy contact: Privacy Officer, Stephen Crocker (Director). Email info@aacsltd.co.uk, phone +44 7930 654075, or write to the address above marked “Privacy”. UK ICO registration number: ZC287647.
| Category | Examples | Where it comes from |
|---|---|---|
| Contact and identity | Name, job title, organisation, email, phone, postal address | You, your employer, business cards, LinkedIn, public directories |
| Client and project | Correspondence, meeting notes, contracts, invoices, payment details | You and your organisation during an engagement |
| Aviation and professional | Licences, ratings, training records, qualifications, employment history | You or your employer, when we deliver audits, training or regulatory support |
| Investigation and legal | Witness statements, incident and accident records, expert witness evidence | Clients, solicitors, insurers, regulators and court processes |
| Recruitment and associates | CVs, references, right-to-work and identity checks | Applicants, associates and referees |
| Website and marketing | Enquiry form entries, newsletter and white paper sign-ups, IP address, browser and cookie data | You, and our website and analytics tools |
| Tender and supplier | Contact details of buyers and partner organisations | Public tender portals and partners |
Sensitive information. Some work, mainly accident investigation, expert witness and pilot training, can involve health information (for example medical certificates or injury details) or criminal offence information. We collect it only when the work requires it, with your consent or where the law allows (for example to establish or defend legal claims), and we protect it with extra care.
You can deal with us anonymously or under a pseudonym when making a general enquiry. For most services we need your name and contact details to help you.
We use personal information only for the purposes below, or for a directly related purpose you would reasonably expect. For the UK, each purpose has a lawful basis under the UK GDPR.
| Purpose | UK lawful basis |
|---|---|
| Delivering consultancy, audit, training, investigation and expert witness services | Contract; legitimate interests (where the contract is with your employer) |
| Invoicing, accounts, tax and record keeping | Legal obligation; contract |
| Answering enquiries and keeping in touch with clients | Legitimate interests |
| Sending white papers, newsletters and event invitations | Consent (you can unsubscribe at any time); legitimate interests for existing business contacts |
| Bidding for public and private contracts | Legitimate interests |
| Recruiting staff and engaging associates | Contract; legal obligation; legitimate interests |
| Running, securing and improving our website | Legitimate interests; consent for non-essential cookies |
| Meeting regulatory, legal and court requirements, and defending legal claims | Legal obligation; legitimate interests |
Health or criminal offence information is used only with your explicit consent, or where needed to establish, exercise or defend legal claims.
Automated decisions. We do not make decisions about people solely by computer program, and we do not use personal information in automated systems to make decisions that significantly affect you. If that changes we will update this policy before we start.
Direct marketing. We send marketing only to business contacts, and every message includes a simple way to opt out. We never sell personal information.
Who we share with. Only when needed, and only what is needed:
Overseas transfers. Some projects involve clients, associates and authorities outside the UK, and some of our service providers store data in the European Economic Area or the United States. We transfer personal information outside the UK only to countries the UK recognises as adequate, or under the ICO’s International Data Transfer Agreement or Addendum, or another lawful safeguard.
How long we keep it.
| Record | Retention |
|---|---|
| Client and project files | 7 years after the engagement ends |
| Accounting and tax records | 6 years, or longer if required |
| Expert witness and litigation files | 7 years after the case closes, or as the court or instructing solicitors require |
| Unsuccessful job applications | 6 months |
| Marketing contacts | Until you unsubscribe, or 3 years without contact |
| Website enquiries | 2 years |
Security. We store information on secure Microsoft 365 systems with access controls and multi-factor authentication, limit access to people who need it, and require confidentiality from staff and associates. If a breach is likely to put you at risk, we will tell you and the regulator as the law requires, including reporting to the ICO within 72 hours.
Your rights. Contact the Privacy Officer to use any of these. It is free, and we reply within one month. We may ask you to confirm your identity first.
Cookies. Our website uses essential cookies to work and, only with your consent, analytics cookies to understand how it is used. You can change your choice at any time through the cookie banner or your browser settings.
Complaints. Please contact us first. We will acknowledge your complaint within 30 days, look into it promptly, keep you updated and tell you the outcome.
If you are not satisfied, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy. We review this policy at least once a year and post any update on this page with a new date.
Every engagement is tailored to your organisation’s specific needs.