LEGAL

Privacy Policy

Last updated: 26 October 2026

Who we are

Avison360 Limited (Company No. 10330645), registered in England and Wales, ("Avison360", "we", "us", "our") is an aviation consultancy based in the United Kingdom. This policy explains how we collect, use, and protect personal information when you visit avison360.com (the "Website") or contact us through it.

Registered office: Market House, 21 Lenten Street, Alton, Hampshire GU34 1HG, United Kingdom. VAT registration number: GB510315744.

Information we collect

When you submit an enquiry through a form on this Website, we collect the information you provide — typically your name, email address, organisation, the area of interest you select, and the content of your message.

We do not use advertising or other tracking technologies on this Website. Google Analytics runs only if you consent. The contact form uses a security check that processes some technical information about your browser. See Cookies and similar technologies below.

How we use your information

We use the information you provide to:

  • Respond to your enquiry
  • Provide the consulting services you have requested
  • Keep a record of our correspondence with you

We do not use your information for automated decision-making or profiling, and we do not use it for marketing unless you separately opt in.

Legal basis for processing (UK GDPR)

We process your personal data on the basis of your consent, given when you submit an enquiry to us, and our legitimate interest in responding to and managing that enquiry. The contact form security check is based on our legitimate interest in protecting the form and our inbox from spam and automated abuse. When Google Analytics is introduced, it will only be used on the basis of your consent, which you can withdraw at any time.

How we store and share your information

Enquiries submitted through this Website are processed using Formspree, a third-party form-handling service, which receives your submission and forwards it to our email address on our behalf. This may involve transferring your information outside the United Kingdom and European Economic Area. We only work with service providers who take appropriate steps to protect your data; see Formspree's own privacy policy at formspree.io/legal/privacy-policy for details of how they handle it.

The contact form’s security check uses Cloudflare Turnstile, provided by Cloudflare, Inc., which acts as our service provider for this purpose. See Cookies and similar technologies below.

We do not sell your personal information. We do not share it with third parties except:

  • Our service providers (such as Formspree and Cloudflare), strictly to provide our services
  • Where required by law or to protect our legal rights

How long we keep your information

We keep enquiry correspondence for as long as reasonably necessary to respond to you and for our business records — typically no longer than 6 years, unless a longer period is required by law or you become an ongoing client, in which case standard client-record retention applies.

Cookies and similar technologies

Your choices. On your first visit, a banner asks whether you accept optional analytics cookies. You can choose “Accept all”, “Reject optional” or “Manage preferences”. Rejecting optional cookies does not affect how the Website works. You can change your choice or withdraw your consent at any time using the “Cookie settings” link at the foot of every page. If you withdraw consent, analytics stops and the Google Analytics cookies are deleted from your browser.

Essential (always on). We remember your cookie choice in your browser’s local storage, in an entry named avison360-consent that holds only your choice and the date you made it. This is strictly necessary to remember your choice, so it does not need consent. It expires after 12 months, and then we ask again. The Website sets no other cookies of its own.

Google Analytics (optional). With your consent, we use Google Analytics 4, provided by Google Ireland Limited, to count visits and understand which pages and articles are read, how visitors find the Website (including, from campaign tags in links, which of our LinkedIn posts brought them), whether an enquiry was sent through the contact form (we record only that it was sent and the area of interest you selected), when visitors follow links to offchox.com, and which country they visit from. Nothing is loaded from Google, and no analytics cookies are set, unless you accept analytics; rejecting analytics does not affect how the Website works. If you accept, Google Analytics sets cookies named _ga and _ga_<ID>, which last for up to about 13 months. Google acts as our service provider (data processor) and may process information in the United States and other countries, under the safeguards described in Google’s business privacy information. We have switched off Google’s advertising features, including Google signals and ad personalisation, and we do not send names, email addresses, telephone numbers or message content to Google. Google Analytics does not store IP addresses. We keep Google Analytics data for 14 months, after which Google deletes it automatically. You can change or withdraw your consent at any time using “Cookie settings” at the foot of every page; withdrawing stops analytics and deletes the Google Analytics cookies from your browser.

Contact form security check (essential). To protect the contact form from spam and automated abuse, it uses Cloudflare Turnstile. The check loads only when you start filling in the form, not when you open the page. To tell people from automated programs, Cloudflare processes technical signals from your browser, such as your IP address, browser type and the website you are using. Cloudflare states that it uses these signals only to detect and block bots and to improve that detection, and not to identify, profile or target individuals or for advertising. Turnstile does not set cookies on this Website. Because the check is needed to keep the form secure, it is not covered by the cookie banner. If you prefer not to use it, you can email us instead. See the Turnstile Privacy Addendum for details.

Fonts, icons and page components are served from this Website itself rather than from third-party content-delivery or font services, so loading a page does not send your information to those services. Like any website, our hosting server keeps standard technical logs (such as IP address, date and time, and the page requested) for security and to keep the site running.

We will not introduce any other non-essential cookies or tracking technologies without asking for your consent first and updating this policy.

Data security

We take appropriate technical and organisational measures to protect your information from unauthorised access, disclosure, alteration, or loss.

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to, or request that we restrict, our processing of your data
  • Receive your data in a portable format, where applicable

To exercise any of these rights, contact us using the details below.

Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO).

Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the most recent revision.

Contact

Avison360 Limited
For any questions regarding this policy, or to exercise your data rights, please contact us at:
contact@avison360.com