Privacy Policy
How we collect, use, share and protect your personal data, and the rights you have over it.
Last updated: October 2026
This Privacy Policy explains how Aviation Medicals ("we", "us", "our") handles personal data in connection with this website and our enquiry process. We are committed to protecting your privacy and handling your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are and how to contact us
The data controller is Aviation Medicals.
You can contact us about this policy or your personal data by email at [email protected].
What personal data we collect
If you contact us through the website enquiry form, we collect the information you choose to provide, which typically includes:
- Your name;
- Your contact details (such as email address and/or telephone number);
- The service or examination you are enquiring about;
- The content of your message.
Please do not send medical details via the website
The website enquiry form is not intended for sensitive or special-category health information. Please do not submit details of your medical history, conditions, diagnoses or test results through the form. Where medical information is needed, we will arrange a secure and appropriate way to collect it.
Lawful bases for processing
We rely on the following lawful bases under the UK GDPR, depending on the circumstances:
- Consent, where you voluntarily contact us or agree to a specific use of your data;
- Legitimate interests, to respond to your enquiry and to operate and improve our service, balanced against your rights;
- Contract, where processing is necessary to take steps at your request before or during the provision of a service;
- Legal obligation, where we must process data to comply with the law.
How we use your data
- To respond to your enquiry and provide the information you request;
- To arrange, confirm and manage appointments and assessments;
- To keep records as required for our service and legal obligations;
- To maintain the security and proper functioning of our service.
Sharing your data
We share personal data only where necessary, for example with the UK Civil Aviation Authority (CAA) where relevant to aviation medical certification, or with service providers who process data on our behalf under appropriate agreements. We do not sell your personal data.
How long we keep your data
We keep personal data only for as long as necessary for the purposes described above, or as required by law and applicable professional or regulatory record-keeping obligations. Specific retention periods are set out in our internal retention schedule.
Your rights
Under UK data protection law you have the right to: be informed; access your data; have inaccurate data corrected; have data erased in certain circumstances; restrict or object to processing; data portability; and rights relating to automated decision-making. To exercise any of these rights, contact us using the details above.
Complaints to the ICO
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would, however, appreciate the chance to address your concerns first.
Cookies
Information about the cookies this website uses is set out in our Cookie Policy.
Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, but we work to protect your data and keep our measures under review.
Changes to this policy
We may update this policy from time to time. The current version will always be published on this page with the date it was last updated.