Privacy Policy

VinCol Global Charters
Company No. 17481127

For privacy questions or requests, email info@vincolglobalcharters.com.

Website: https://vincolglobalcharters.com

Charter enquiries

• Your full name, email address, telephone number, selected country and calling code, and preferred contact method (email, phone or WhatsApp).
• Your choice of private jet or helicopter; one-way or round-trip travel; departure and destination; requested dates and times; and passenger numbers.
• Baggage and pet information, chauffeur-transfer preference, and any additional notes you provide.

General contact enquiries

Your name, email address, subject and message, together with optional telephone information, including the country and calling code if you provide a number.

Partner and supplier enquiries

Your company name, email address, service category and message, together with optional telephone information, including the country and calling code if you provide a number.

Correspondence and enquiry administration

We also handle follow-up correspondence and records needed to manage your enquiry, including its reference, submission date, status and email-delivery status.

Fields marked as required are needed to handle your enquiry. If this information is missing, we may be unable to process or respond to it. Please avoid including unnecessary sensitive personal information in free-text fields, including information about other people.

The initial website forms do not request passport numbers, banking details or payment-card information. We do not currently collect payments through the website.

We use Cloudflare Turnstile to help prevent spam and automated abuse. It runs browser and security challenges and processes technical signals necessary for that security purpose, rather than being a data-free check.

According to Cloudflare’s Turnstile documentation, Turnstile does not access, store or transmit the contents entered into our forms. Cloudflare describes its processing and its respective processor and controller roles in its Turnstile Privacy Addendum.

VinCol uses the verification token to check a submission but does not persist Turnstile tokens in its enquiry database. Our enquiry handling does not store raw IP addresses in that database. This does not mean that Cloudflare or other infrastructure providers process no technical information.

• Responding to charter enquiries, sourcing and assessing suitable charter options where appropriate, and communicating about requested services.
• Coordinating enquiries through the brokerage process and arranging requested supporting services where applicable.
• Responding to general enquiries and assessing potential operator, supplier and partner relationships.
• Maintaining enquiry records and business correspondence.
• Securing the website and preventing spam, fraud and automated abuse.
• Handling complaints, disputes or legal claims, and meeting applicable legal or accounting obligations.

The lawful basis depends on why we need the information and the circumstances of our relationship with you.

Contract or steps before a contract. Where applicable, processing is necessary to take steps at your request before entering into a contract, such as considering charter options or a quotation, or to perform a contract with you. This basis does not automatically apply where you act solely on behalf of a company or another legal entity.

Legitimate interests. We may rely on our interests in responding to business and general enquiries, administering prospective customer and supplier relationships, operating and improving the enquiry process, preventing fraud and abuse, protecting our business and systems, and maintaining appropriate correspondence and records. We balance these interests against your interests, rights and freedoms, and rely on this basis only where the processing is necessary and justified.

Legal obligation. Where necessary, we process or retain information to meet applicable legal, regulatory, accounting or tax obligations.

Submitting an enquiry does not mean that all processing is based on your consent. The privacy notice on our forms explains our use of information; it is not a request for consent.

Where needed to source or arrange charter options, we may share relevant journey requirements with appropriately selected aircraft or helicopter operators. We do not automatically share every enquiry with operators.

We may share relevant information with ground-transfer, chauffeur or other supporting service providers where necessary to arrange services you request. Professional advisers and relevant authorities may receive information where reasonably necessary or legally required. Operators and other recipients may act as independent controllers for their own activities.

Our current core technology providers are:

• Supabase: database infrastructure storing our website enquiry records.
• Resend: transactional delivery of internal enquiry notifications and customer acknowledgement emails.
• Cloudflare: Turnstile security and bot verification.
• Microsoft: Microsoft 365 business email, which we use to receive and manage enquiries.

These providers process information according to their respective roles, contracts and privacy or data-processing terms. We limit information shared to what is needed for the relevant purpose.

VinCol does not sell personal information to advertisers.

VinCol is UK based. Our primary enquiry database is configured in Supabase’s West Europe (London) region, eu-west-2. Some service-provider processing or subprocessors may involve other jurisdictions; this is not a promise that all processing takes place exclusively in the UK.

Supabase’s Data Processing Addendum explains that customer-directed data is stored and primarily processed in the selected region, with processing elsewhere subject to applicable transfer requirements.

Resend’s published data-protection information states that customer data, including message content and delivery logs, is stored in the United States. Its Data Processing Addendum addresses international transfers and UK GDPR safeguards.

Where required, we rely on appropriate transfer mechanisms and contractual safeguards under UK data-protection law. Depending on the provider and transfer, these may include UK adequacy regulations, recognised standard contractual arrangements with the UK Addendum where applicable, or other lawful transfer mechanisms. The same safeguard does not necessarily apply to every provider. Contact info@vincolglobalcharters.com for information about the safeguards relevant to your information.

• Unsuccessful charter enquiries: up to 24 months after the last meaningful interaction, unless a legal reason, complaint or dispute requires longer retention, or the enquiry develops into a booking or customer relationship.
• General contact enquiries: up to 24 months after the last meaningful interaction, unless there is a justified reason to retain the information longer.
• Partner and supplier enquiries: up to 24 months after the last meaningful interaction where no ongoing business relationship develops. Where a relationship develops, information is retained for as long as reasonably required for that relationship and any applicable post-relationship legal or business obligations.
• Confirmed bookings and transactions: information forming part of bookings, contracts, invoices, accounting or legal/compliance records may be retained for longer where necessary for contractual, tax, accounting or other legal requirements. These records are considered separately from unsuccessful enquiries.
• Security and abuse information: only as long as reasonably necessary for security and abuse prevention, subject to service-provider practices and applicable law. VinCol does not persist Turnstile verification tokens in its enquiry database.

The 24-month period is a maximum standard period for unsuccessful enquiries, not a reason to keep information unnecessarily. We may delete or anonymise information sooner when it is no longer needed, and review retention periods periodically.

Subject to applicable legal conditions and exceptions, you may have the right to:

• Access your personal information and receive a copy.
• Correct inaccurate or incomplete information.
• Request erasure of information.
• Restrict its processing.
• Object to its processing.
• Receive or transfer information in a portable format where applicable.

The rights available depend on the lawful basis and circumstances. Some information may need to be retained to meet legal obligations or handle legal claims. To make a request, contact info@vincolglobalcharters.com.

You can raise a privacy concern with us at info@vincolglobalcharters.com. You also have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office (ICO), through its official complaints page. You do not have to contact us before approaching the ICO.

Our current website enquiry forms do not automatically subscribe you to marketing communications, and the website does not currently offer a newsletter signup.

If we introduce optional marketing communications, we will handle them in accordance with applicable privacy and electronic-marketing rules and provide appropriate choices.

The current website enquiry process does not use automated decision-making that produces legal or similarly significant effects, or advertising profiling. Cloudflare Turnstile performs automated security and bot assessment to protect the website; it does not decide whether a customer qualifies for a charter.

The website and charter-enquiry services are intended for people able to make or act on legitimate travel or business enquiries and are not designed as services directed at children.

The initial enquiry forms request passenger numbers, not details identifying minor passengers. If information about a minor passenger is later needed for a booking, it should be handled as part of the relevant booking or operational process, with appropriate privacy information provided at that stage.

We use measures including server-side validation, restricted server-side database access, bot protection, access controls and appropriate service-provider safeguards to help protect personal information. No website, transmission method or storage system can be guaranteed completely secure.

The current website does not use analytics trackers, advertising pixels or optional marketing cookies. Turnstile is used separately as a security technology, as described above, and our current implementation does not use its pre-clearance feature.

This does not mean that third-party security technology never processes technical information or uses browser technologies. Please see Cloudflare’s linked privacy information for its practices.

If we introduce non-essential analytics or advertising technologies, we will update our privacy and cookie information and provide any choices required by applicable law.

If you follow a link to another website or choose to communicate through an external service such as WhatsApp, that provider’s privacy information also applies to its own processing.

We may update this policy as our services or legal requirements change. The date at the top records its latest material update.