1. Who we are

This privacy policy explains how Aviation Business News (published by Real Response Media, "we", "us", "our") collects, uses, shares and protects your personal data when you visit www.aviationbusinessnews.com or interact with us by email, phone, post or through our social media channels.

Data controller: Real Response Media

Registered address: 445 Caledonian Road, London N7 9BG

Contact / data protection queries: [email protected]

ICO registration number: C1989576

2. Personal data we collect

We collect personal data in the following ways:

• Free subscription / registration details (name, company, job title, business email address).
• Newsletter sign-up details (email address).
• Job listings and applications submitted via our Jobs Board.
• Enquiries via our contact or advertising forms, telephone or email.
• Webinar and event registration details (e.g. PAM Webinars).

• Technical data such as IP address, browser type and device information, collected automatically via cookies (see Section 4).

   

3. How and why we use your data

We use your personal data for the following purposes, and rely on the lawful basis stated for each:

• Providing your free subscription and sending our trade newsletter - performance of a contract and/or consent.
• Sending marketing about industry news, events and offers - consent for individual subscribers; legitimate interests / the PECR corporate-subscriber exemption for marketing sent to generic company addresses (see the B2B note below).
• Operating the Jobs Board (posting or applying for a role) - performance of a contract.
• Registering for webinars and events - performance of a contract.
• Website analytics (GA4) and on-site personalisation - consent (via the Cookiebot banner) for non-essential cookies.
• Advertising (Facebook pixel, OpenX) - consent (via the Cookiebot banner).
• Keeping our site secure and preventing fraud - legitimate interests.

A note for our business-to-business audience

Aviation Business News is a trade publication and much of our marketing is directed at organisations rather than individuals. Where we send email marketing to a corporate address (e.g. a generic company inbox), UK PECR's consent requirement for direct marketing does not apply - only an easy opt-out and clear sender identification are required. Where we hold or market to identifiable individuals (for example, a named contact at a company), we rely on legitimate interests as our lawful basis, having assessed that our marketing is relevant to your professional role and does not override your interests, and you retain the right to object at any time.

4. Cookies and similar technologies

Our website uses cookies and similar tracking technologies to operate correctly, understand how the site is used, and support advertising and marketing. We use Cookiebot to manage cookie consent: under UK PECR, non-essential cookies (Preferences, Statistics and Marketing categories) are only set once you've given consent via the Cookiebot banner shown on your first visit, and strictly necessary cookies are set automatically as they're needed to run the site. You can change your consent choices at any time using the "Manage cookie preferences"/Cookiebot link in the site footer, or by clearing your cookies.

Strictly necessary / website cookies

Analytics cookies

We use Google Analytics 4 (GA4) to understand how visitors use our site in aggregate. GA4 only sets two cookies:

Note: earlier policies referenced a "_gid" cookie and 1-minute "_gat" cookie - these belonged to the legacy Universal Analytics product, which Google retired on 1 July 2024, and should be removed from the new policy since the site now runs GA4 only.

Advertising cookies

Insider One (marketing automation) cookies and browser storage

We use Insider One's customer engagement platform to send marketing emails, personalise on-site content and (where enabled) web push, SMS or WhatsApp messages. This replaces the Force24 platform referenced in our previous privacy policy. In this relationship, Insider One acts as our data processor and we (Real Response Media) remain the data controller: Insider One does not itself collect your consent, but provides us with the tools to do so, and we are responsible for the Cookiebot banner and consent choices described in this policy.

Via its JavaScript, cookie and browser-storage-based tracking technology, Insider One may collect: clickstream data (the pages and links you interact with), the duration of your visits, your IP address, and transaction/engagement information, which is used to personalise content and messaging. Insider One stores UK/EU end-user data in its EU data centre (AWS, Dublin, Ireland) and holds SOC 2 Type II, ISO/IEC 27001:2022 and ePrivacy Seal (GDPR) certifications. Insider One's data processing agreement and standard contractual clauses cover any transfer of data outside the UK/EU.

Insider One publishes a full, public inventory of the cookies, local storage and session storage items its tag can set — including exact names, sample values and expiry durations — at academy.insiderone.com/docs/insider-cookies-local-storage-session-storage. Most of Insider One's tracking uses browser local storage and session storage rather than traditional cookies, but under PECR these "similar technologies" are treated the same way as cookies for consent purposes, and are covered by the Cookiebot banner. Naming follows several different patterns depending on the product/feature involved — including an ins-... convention, spUID, sp-camp-{id}, and other feature-specific names — there is no single consistent prefix.

The table below is a representative selection of the items published on Insider One's own reference page (linked above), covering the core identity, consent-state and personalisation storage that applies across our sites. Insider One publishes a fuller list of around 90 local/session storage entries in total, covering optional features (Web Push, SMS, WhatsApp, Architect journeys, product recommendations, etc.) — see the link above for the complete inventory.

As with our previous platform, emails and any SMS/WhatsApp/push messages sent via Insider One may contain tracking pixels and unique link-tracking references so we can measure opens and clicks for statistical purposes.

5. How we share your data

We share personal data with the following categories of recipient, only to the extent needed for the purposes set out above:

• Google (Google Analytics 4) - website analytics.
• Meta (Facebook) - advertising pixel.
• OpenX - advertising ad-serving.
• Cookiebot (Usercentrics) - recording and managing your cookie consent choices.
• Insider One - email marketing, on-site personalisation and (where enabled) web push.
• Jobs Board / recruitment partners - where you apply for or post a role, limited to what's needed to process the application or listing.
• Webinar and event platform providers - to register and run PAM and other webinars/events.

We do not sell, rent or exchange your personal data with other organisations for their own marketing purposes. Where we do want to pass your details to a carefully selected third-party partner for their own marketing, we will only do so with your express consent, requested at the point of collection.

6. International transfers

Some of the organisations we share data with (including Google and Meta) are based outside the UK or transfer data outside the UK as part of their global operations. Insider One stores UK/EU customer data in its EU data centre (Dublin, Ireland), but as a global platform it may also transfer data outside the UK/EU in the course of providing its services. Where any of these transfers happen, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA), the EU Standard Contractual Clauses (as recognised for UK transfers), or a UK adequacy regulation.

7. How long we keep your data

We retain personal data for as long as needed to provide the products and services you've asked for. For non-transactional data (such as newsletter sign-ups or general contact details), we retain data for no longer than 7 years from collection, unless it is updated or refreshed within that period.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted in certain circumstances
• Restrict or object to our processing of your data
• Receive your data in a portable format
• Withdraw consent at any time, where we rely on consent
• Lodge a complaint with the Information Commissioner's Office (ico.org.uk) if you think we've mishandled your data

To exercise any of these rights, contact us at [email protected].

9. Children's privacy

Aviation Business News is not directed at children, and we do not knowingly collect personal data from anyone under 16.

10. Changes to this policy

We may update this privacy policy from time to time, for example to reflect changes to the law or to the tools and platforms we use. The "last updated" date at the top of this page shows when it was last revised.

11. Contact us

If you have any questions about this policy or how we handle your data, contact us at [email protected].

Website: www.aviationbusinessnews.com