Privacy Policy

Amris Aviation Limited (formerly The Airline Pilot Club Limited) is a private limited company registered in the Republic of Ireland, registered office: Cahercourt, Loughrea, Co. Galway, H62 TX97, Ireland. Company Registered Number: 659435. VAT Number: 3691842OH.

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, Amris Aviation Limited is the data controller of personal data collected through the Site and Services.

We collect the following categories of personal data:

• Identity & contact data: name, job title, employer, email address, phone number.
• Form submission data: demo requests, contact-form messages, newsletter sign-ups, playbook download requests.
• Account data (Academy & Platform users): credentials, profile information, training records, assessment results.
• Technical data: IP address, browser type, device identifiers, operating system, referring URL, pages visited, time spent.
• Cookies & analytics: see Section 7.

We do not knowingly collect special-category data (e.g. health, biometric, racial or ethnic origin). If you submit such data via a form, we will delete it without processing.

We process personal data on the following lawful bases under GDPR Article 6:

• Contract performance — to deliver Services, process orders, and provide platform access.
• Legitimate interests — to operate, secure, and improve the Site; respond to enquiries; and conduct B2B marketing to relevant aviation organisations.
• Consent — for non-essential cookies, newsletter marketing emails, and any optional communications.
• Legal obligation — to comply with applicable law, regulatory, or tax requirements.

We share personal data only with:

• Service providers acting as data processors (cloud hosting, email delivery, analytics, CRM) under written contract.
• Aviation partner organisations where you have explicitly opted in (e.g. when applying to a partner airline or academy through Amris).
• Legal & regulatory bodies where required by law.
• Successors in the event of a merger, acquisition, or restructure (you will be notified in advance where required).

We never sell personal data.

Where personal data is transferred outside the European Economic Area (EEA) or the United Kingdom, we ensure an adequate level of protection through Standard Contractual Clauses (SCCs), UK International Data Transfer Addendum, or other lawful safeguards.

We retain personal data only as long as necessary for the purposes set out above:

• Form submissions & lead-capture data: 36 months from last interaction.
• Newsletter subscribers: until you unsubscribe (one click in every email).
• Active customer / platform user records: for the duration of the contract plus 7 years for tax and accounting purposes.
• Cookie consent records: 12 months.

We use strictly necessary cookies to operate the Site, plus optional analytics and marketing cookies (currently the LinkedIn Insight Tag; Google Analytics 4 planned) which load only after you grant consent through the cookie banner. We automatically honour the Global Privacy Control (GPC) browser signal, meaning users on GPC-enabled browsers (Firefox, Brave, DuckDuckGo, and Chrome extensions) are opted out of cross-context advertising without needing to interact with the banner.

You can change your cookie preferences, view active categories, or submit a formal privacy request at any time through our Your Privacy Choices page.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure ("right to be forgotten") where lawful;
• Restrict or object to processing;
• Data portability (receive your data in a machine-readable format);
• Withdraw consent at any time without affecting prior lawful processing;
• Lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.

California residents have additional rights described in Section 9 below.

If you are a resident of California, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA / CPRA) gives you the following rights regarding your personal information:

• Right to know what personal information we collect, use, disclose, and share about you.
• Right to delete personal information we have collected from you (subject to lawful exceptions).
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing of your personal information (see below).
• Right to limit the use and disclosure of sensitive personal information.
• Right to non-discrimination for exercising any of the above rights.

Categories of personal information collected in the last 12 months

• Identifiers (name, email, IP address) — collected from you directly and via cookies; used to respond to enquiries, deliver Services, and market to relevant B2B contacts; retained per Section 6.
• Commercial information (company, role, product interest) — collected from forms; used for lead qualification and account management.
• Internet or network activity (pages viewed, referring URL, device data) — collected via cookies and server logs; used for analytics and site security.
• Professional or employment-related information (job title, employer) — collected from forms and enrichment tools; used for B2B qualification.
• Inferences drawn from the above (e.g. buyer stage, industry segment) — used for content personalisation only.

Categories "sold" or "shared" under CPRA

We do not sell personal information for monetary consideration. When you grant marketing consent, the LinkedIn Insight Tag places cookies that transmit identifiers and internet activity to LinkedIn Corporation, which CPRA treats as "sharing" for cross-context behavioural advertising. No sensitive personal information is shared. All other categories listed above are used only by Amris and its service providers under contract.

How to opt out of sharing

• Click Your Privacy Choices in the site footer and switch off "Marketing" in the cookie banner.
• Enable Global Privacy Control (GPC) in your browser — we honour it automatically on first page load.
• Submit a CCPA request through the form on the Your Privacy Choices page.

Verifying and responding to requests

We will verify your identity using information already on file (typically the email address associated with your account or prior submission). Requests are processed within 45 days. An authorised agent may submit a request on your behalf with written permission and proof of identity.

Sensitive personal information: we do not use or disclose sensitive personal information for any purpose other than as permitted by CPRA §7027(m). Financial-incentive programmes: we do not offer any.

We maintain appropriate technical and organisational measures to protect personal data including TLS-encrypted transport, encrypted storage, role-based access controls, and regular security reviews. No system is 100% secure; in the event of a breach affecting your personal data we will notify you and the relevant supervisory authority within 72 hours where required.

The Services are intended for adults and pilot-career-pathway students aged 16 and older. The Academy programme for younger students is operated only through approved flight schools and parent/guardian consent. We do not knowingly collect personal data from children under 16 outside of these supervised contexts.

We may update this Privacy Policy from time to time. The "Effective Date" at the top of this page indicates when it was last revised. Material changes will be communicated by email (where we hold one) or by a prominent notice on the Site.

For privacy-related questions, or to exercise any of your rights, please use our Your Privacy Choices intake form, or email our Data Protection Officer: