We take your right to privacy seriously and want you to feel comfortable using our website. In accordance with the General Data Protection Regulation (GDPR), this page explains how we use your personal information.

As part of the UK Civil Aviation Authority, CAA International (CAA) collects and stores your name, address, email address and telephone number to administer your account and/or to fulfil any contractual or licensing arrangements. We may also collect personal information for marketing and communication purposes.

All personal information, including contact details and purchase history, is stored in our Customer Relationship Management (CRM) system, Salesforce, an American based company. The processing of your personal information is necessary for compliance with a legal obligation to which we are subject.

For organisations located outside of the EU, the CAA has safeguards in place to ensure the security of your information.

Unless otherwise stated, we retain your personal information for the lifetime of the approval/contract and, thereafter, for a period of three years. Financial information is held for six years for compliance and enforcement purposes.

Booking a training course

For users that book a training course on our website, we need to share your personal data with our e-Commerce platform, Shopify, an American based company. Shopify enables us to sell training courses to you online. We also need to share your personal data with WorldPay for processing payment. WorldPay is based in the UK. The processing of your personal data is necessary for the purposes of our, or our third party’s contract and does not affect your fundamental rights and freedoms as a data subject.

For users that book an e-Learning or blended learning course, we will share your details with Totara, our online Learning Management System. Totara Learning (Europe) Limited is a UK based company. Users are required to set up an account to access the e-Learning modules.

The processing of personal information is necessary for the performance of a task or service CAA International carries out to process the course booking either if booked by the delegate or on behalf of the delegate (i.e. organisation).

CAA International maintains personal information that you voluntarily submit electronically on one or more secured servers. CAA International will keep delegate details for seven years. After this date, all personal data will be deleted.

Booking an examination

For users that wish book an examination via our website, you will be directed to the UK Civil Aviation Authority’s website to process your booking and payment. The UK CAA’s examination portal is hosted by Aspeq Limited, a New Zealand based company. We also need to share your personal data with SagePay for processing payment. SagePay is a UK based company. The processing of your personal data is necessary for the purposes of our, or our third party’s contract and does not affect your fundamental rights and freedoms as a data subject.

We retain your personal information for the lifetime of the licence and, thereafter, for a period of ten years for compliance and enforcement purposes.


Our website is hosted by a third-party provider, Rackspace Ltd, a UK based hosting company.

This website uses Google Analytics (GA) to track user interaction. Google is an American based company. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website.

This website also uses the DoubleClick cookie to report on anonymous user interaction with advertising and to understand how this influences visitor engagement with the website. These cookies are used to collect information about browsing habits on the website, to enable CAAi to make advertising relevant to you and your interests. This website uses Remarketing with Google Analytics which facilitates the serving of advertisements on various other websites on the internet. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Should you choose to contact us using the contact form this website or an email link like this one, none of the data that you supply will be stored on this website. Instead, the data will be automatically sent to our CRM system, Salesforce, that we use to process and administer your enquiry. The data collected will include your name, company name, email address, country, area of interest and a message/enquiry. This data will allow us to respond to your message. Your data will be stored on Salesforce for three years.

You will not receive any unsolicited emails from us unless you have selected/ticked the relevant consent box beneath our contact form.

Email Marketing

If you subscribe to any of our email mailing lists, the email address that you submit to us will be forwarded to Campaign Monitor who provides our email marketing services. Campaign Monitor is an American based company. The email address that you submit will not be stored within this website’s own database or in any of our internal computer systems. Your email address will remain within Campaign Monitor’s database for as long as we continue to use Campaign Monitor services for email marketing or until you specifically request removal from the list. You can do this by selecting the unsubscribe link contained in any marketing related email that we send you or by requesting removal via email.

To subscribe to our mailing lists hosted by Campaign Monitor, we operate a double opt-in system. If you submit your information to one of our subscription forms, Campaign Monitor will send you a one-time confirmation email to the address entered asking the user to, in turn, confirm the email address. You are required to follow a link in the email to confirm their subscription. This is the second opt-in. Only after this confirmation is the email address added to the mailing list.

Customer Feedback

As part of our ongoing commitment to deliver the highest standards and to conform to ISO 9001:2015, all our customers will receive an email after the service delivery requesting customer feedback. Users will be directed to Survey Monkey, an American based company. Users will be asked to complete a customer satisfaction survey. All responses remain confidential and will give us valuable information on how we can better serve and exceed our customer’s expectations. These emails are deemed a legitimate part of trading under GDPR. You may still receive these email requests, even if you have previously unsubscribed from our email marketing communications.

All our open access training delegates are asked to leave a review of the course they attended. To do this, we share your details (name, course details and email address) with third-party review website Feefo. Feefo is a UK-based company. Any reviews left will be displayed on the CAAi website. Delegates can decide to leave a course review anomalously.

Applying to Work at CAAi

We display all live vacancies on the “Careers” section of our website. To apply for a position, users are redirected to the UK Civil Aviation Authority’s dedicated careers website. When individuals apply to work at the CAA, we will only use the information they supply to us to process their application and to monitor recruitment statistics. Where we want to disclose information to a third party, for example, where we want to take up a reference or obtain a ‘disclosure’ from the Disclosure and Barring Service (DBS) we will not do so without informing the applicant beforehand unless the disclosure is required by law.

Personal information about unsuccessful candidates will be held until after the recruitment exercise has been completed. It will then be destroyed or deleted. We retain de-personalised statistical information about applicants to help inform our recruitment activities or for equality and diversity purposes, but no individuals are identifiable from that data.

Once a person has taken up employment with the CAA, we will compile a file relating to their employment. The information contained in this file will be kept secure and will only be used for purposes directly relevant to that person’s employment. Once their employment with the CAA has ended, we will retain the file in accordance with the requirements of our retention policy and then delete it.

For more information, please contact us

Contact us
Follow CAAi
Share this page
UK Locations

Our Mailing Address
Aviation House
Gatwick Airport South
West Sussex RH6 0YR
T: +44 (0) 330 0224401

Our Registered Address
CAA House 45-59
Kingsway London

Malaysia Location

Malaysian Aviation Academy
Department of Civil Aviation
Jalan Pekeliling 2, 64050 Sepang
Selangor, Malaysia
T: +603 8777 9011