​

Privacy Policy

Effective Date: 09.26.2025

CertyFly (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, use our services, or interact with us, in compliance with applicable U.S. and EU data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

 

1. Information We Collect

We may collect the following categories of personal data:

• Identifiers: Name, email address, phone number, mailing address, account details.

• Professional Information: Company name, job title, training/certification details.

• Payment Information: Billing details and limited payment information (processed through secure third-party providers).

• Technical Data: IP address, browser type, device information, cookies, and usage data.

• Sensitive Information (if applicable): Training records, certificates, and compliance-related information.​

 

2. How We Use Your Information

We process your data for the following purposes:

• To provide, operate, and improve our training and certification services.

• To issue, manage, and verify digital certificates.

• To process payments and fulfill contractual obligations.

• To personalize user experience and optimize website functionality.

• To send administrative communications, updates, and marketing (with your consent where required).

• To comply with legal obligations and regulatory requirements.

 

3. Legal Basis for Processing (GDPR)

Under GDPR, we rely on the following legal bases to process your personal data:

• Consent (Article 6(1)(a)): When you opt in to marketing or certain features.

• Contract (Article 6(1)(b)): When processing is necessary to provide our services.

• Legal Obligation (Article 6(1)(c)): When required by law or regulatory frameworks.

• Legitimate Interest (Article 6(1)(f)): For service improvement, fraud prevention, and business operations.

 

4. Sharing and Disclosure of Information

We may share your information with:

• Service Providers: For payment processing, hosting, analytics, and communication tools.

• Regulatory Authorities: When required by law or aviation regulatory compliance.

• Business Transfers: In the event of a merger, acquisition, or sale of assets.

• With Your Consent: When you explicitly agree to share your data with third parties.

We do not sell your personal information.

 

5. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, unless a longer retention period is required by law (e.g., aviation training records).

 

6. International Data Transfers

As a U.S.-based company serving global clients, your data may be transferred and processed outside the European Economic Area (EEA). We ensure appropriate safeguards (such as Standard Contractual Clauses) to protect your information in line with GDPR requirements.

 

7. Your Privacy Rights

Depending on your jurisdiction, you have the following rights:

 

Under GDPR (EU/EEA):

• Right to Access – request a copy of your personal data.

• Right to Rectification – correct inaccurate or incomplete data.

• Right to Erasure – request deletion of your data (“right to be forgotten”).

• Right to Restrict Processing – limit how we use your data.

• Right to Data Portability – receive your data in a structured, machine-readable format.

• Right to Object – object to processing based on legitimate interests or marketing.

• Right to Withdraw Consent – at any time, when processing is based on consent.

 

Under CCPA/CPRA (California, U.S.):

• Right to Know – what personal data we collect and why.

• Right to Delete – request deletion of personal information.

• Right to Opt-Out – of the sale or sharing of personal information (we do not sell data).

• Right to Non-Discrimination – for exercising privacy rights.

To exercise your rights, please contact us at [info@certyflight.com].

 

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and provide tailored content. You can manage your cookie preferences through your browser settings.

 

9. Data Security

We implement industry-standard technical, organizational, and administrative measures to safeguard your personal information against unauthorized access, loss, or misuse. However, no system is 100% secure, and we cannot guarantee absolute security.

 

10. Children’s Privacy

Our services are not directed at children under 16 (or the age required by local law). We do not knowingly collect data from minors. If we become aware of such collection, we will delete the data promptly.

 

11. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or business practices. Updates will be posted on this page with a revised “Effective Date.”

 

12. Contact Us

If you have questions or concerns about this Privacy Policy or your data rights, please contact us:

 

CertyFly Inc.
6650 Rivers Ave, Suite 100
Charleston, SC 29406, USA
Email: info@certyflight.com
Phone: +1 408 406 3619

If you are located in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.

​