PRIVACY POLICY

Approved Jets

Effective Date: February 28, 2026

1. Introduction

Approved Jets ("Company," "we," "us," or "our") is a private aviation charter brokerage incorporated in the State of Delaware. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at approved-jets.com (the "Site"), submit a quote request, contact us, or otherwise engage with our private aviation charter services (collectively, the "Services").

By using the Site or submitting any form on the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use the Site or submit personal information to us.

2. Information We Collect

2.1 Information You Provide Directly

When you submit a quote request form, contact form, or otherwise communicate with us, we may collect the following categories of personal information:

Name: First and last name.
Contact Information: Email address and phone number.
Date of Birth: Used for passenger manifests and regulatory compliance.
Physical Characteristics: Height and weight, as required by aviation safety regulations for weight-and-balance calculations.
Health Information: Allergies, collected to ensure passenger safety during flight operations, catering, and ground services.

2.2 Payment Information

We do not directly collect, process, or store your credit card or financial account information. All payment processing is handled by our third-party payment and booking partners, including Tuvoli/FlyEasy and Avinode. These providers have their own privacy policies governing your payment data. We encourage you to review their respective policies before providing payment information.

2.3 Information Collected Automatically

When you visit the Site, certain information is collected automatically through cookies and similar tracking technologies:

Usage Data: Pages visited, time spent on pages, referring URLs, and click patterns.
Device Data: Browser type, operating system, screen resolution, and device identifiers.
IP Address: Your Internet Protocol address, which may indicate your approximate geographic location.

We currently use Google Analytics for website analytics. Please see Section 7 (Cookies & Tracking Technologies) for more information.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

Service Delivery: To process and respond to your quote requests, arrange charter flights, coordinate with operators, and fulfill booking-related services.
Aviation Compliance: To prepare passenger manifests, comply with weight-and-balance regulations, and meet applicable aviation authority requirements (e.g., FAA, EASA, ICAO).
Passenger Safety: To accommodate allergies and health-related needs during flight operations and catering.
Communication: To respond to your inquiries, send booking confirmations, and provide updates related to your charter request.
Site Improvement: To analyze usage patterns and improve Site functionality, user experience, and content.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Lawful Basis for Processing (GDPR)

If you are located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland, we process your personal data under the following lawful bases as defined by the General Data Protection Regulation ("GDPR"):

Contractual Necessity (Article 6(1)(b)): Processing your name, contact details, date of birth, height, and weight is necessary to provide the charter services you have requested or to take pre-contractual steps at your request (e.g., generating a flight quote).
Legitimate Interest (Article 6(1)(f)): Processing usage and device data for site analytics and security, where such interests are not overridden by your fundamental rights.
Explicit Consent (Article 9(2)(a)): Health-related data (allergies) constitutes special category data under GDPR. We process this data only with your explicit consent, which you provide when submitting information through our forms. You may withdraw consent at any time by contacting us.
Legal Obligation (Article 6(1)(c)): Where we are required to process data to comply with aviation safety regulations or other legal obligations.

5. Data Sharing and Third-Party Service Providers

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We may share your information with the following categories of service providers, strictly for the purposes described in this Policy:

| Provider | Service | Purpose | | ---------------- | ------------------- | ---------------------------------------------------------------------------------------- | | Tuvoli / FlyEasy | Payment & Booking | Processes payments and facilitates charter bookings on our behalf. | | Avinode | Booking & Quoting | Aviation marketplace platform for sourcing and quoting charter flights. | | Turso | Database Hosting | Stores form submissions (name, contact info, travel details) in a secure cloud database. | | Resend | Transactional Email | Delivers email communications such as confirmations and follow-ups. | | Vercel | Website Hosting | Hosts the Site and serves web content to users globally. | | Google Analytics | Website Analytics | Collects anonymized usage data to help us understand Site traffic and behavior. |

We may also share personal information with charter operators and flight crew as necessary to fulfill your booking, and with government authorities when required by aviation regulations or law.

6. International Data Transfers

As a global aviation service, your personal information may be transferred to and processed in countries other than the country in which you reside. Our service providers, including Turso, Vercel, and Google, may store and process data in the United States and other jurisdictions.

If you are located in the EEA, UK, or Switzerland, we ensure that any such transfers are conducted in compliance with GDPR, relying on one or more of the following transfer mechanisms:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Adequacy decisions by the European Commission for the receiving country.
The EU-U.S. Data Privacy Framework, where applicable.

You may request a copy of the safeguards in place by contacting us at the address provided in Section 13.

7. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to collect usage data and improve your experience.

7.1 What We Currently Use

Google Analytics: We use Google Analytics to collect aggregated, anonymized data about how visitors use the Site. Google Analytics uses cookies to identify returning visitors and track page views. Google's privacy policy governs their handling of this data.
Essential Cookies: We may use strictly necessary cookies required for the Site to function (e.g., session management).

7.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may impair Site functionality. If you are in the EEA, we will present a cookie consent banner before deploying non-essential cookies.

Note: Our cookie and tracking practices may be updated in the future. Any changes will be reflected in an updated version of this Policy.

8. Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including:

Quote and contact form submissions: Retained for up to 24 months from the date of submission, unless a booking results, in which case data is retained for the duration of the business relationship plus 5 years for regulatory and legal compliance.
Payment data: We do not retain payment data. Retention is governed by Tuvoli/FlyEasy and Avinode's respective policies.
Analytics data: Retained by Google Analytics in accordance with Google's data retention settings 26 months.

Upon expiration of the retention period, personal data will be securely deleted or anonymized.

9. Children's Privacy

Our Services are not directed to children under the age of 16. However, we recognize that minors may be passengers on charter flights arranged through our platform.

When a minor is a passenger, a parent or legal guardian must provide the minor's personal information (name, date of birth, weight, height, and allergies) on their behalf. We collect this information solely for the purposes of aviation safety compliance and service delivery. We do not knowingly collect personal information directly from children.

If you believe we have inadvertently collected personal information from a child without appropriate parental consent, please contact us immediately at the address in Section 13, and we will take steps to delete such information.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

10.1 Rights Under GDPR (EEA, UK, Switzerland)

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
Right to Restrict Processing: Request that we limit how we use your data.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Where processing is based on consent (e.g., allergy data), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, contact us at the address in Section 13. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

10.2 Rights Under CCPA/CPRA (California Residents)

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act grant you the following additional rights:

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
Right to Delete: Request deletion of personal information we have collected.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information. No opt-out is necessary.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a verifiable consumer request, contact us at the address in Section 13.

10.3 Rights Under PIPEDA (Canadian Residents)

Canadian residents have the right to access, correct, and challenge the handling of their personal information under the Personal Information Protection and Electronic Documents Act. Contact us at the address in Section 13 to exercise these rights.

11. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/SSL), access controls, secure cloud infrastructure, and regular review of our data handling practices.

However, no method of electronic storage or transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Effective Date" at the top of this document and, where required by law, provide notice through the Site or by email.

We encourage you to review this Privacy Policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated Policy.

13. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your data is handled, please contact us:

Approved Jets 1000 Brickell Ave, Suite 715, PMB 1980 Miami, FL 33131 United States Email: charter@approved-jets.com Phone: +1 (866) 781-411

For GDPR-related inquiries, our designated point of contact for data protection matters is: support@approvedexperiences.com.