As part of the UK Civil Aviation Authority, CAA International (CAA) collects and stores your name, address, email address and telephone number to administer your account and/or to fulfil any contractual or licencing arrangements. We may also collect personal information for marketing and communication purposes.
All personal information, including contact details and purchase history, is stored in our Customer Relationship Management (CRM) system, Salesforce, an American based company. The processing of your personal information is necessary for compliance with a legal obligation to which we are subject.
For organisations located outside of the EU, the CAA has safeguards in place to ensure the security of your information.
Unless otherwise stated, we retain your personal information for the lifetime of the approval/contract and, thereafter, for a period of three years. Financial information is held for six years for compliance and enforcement purposes.
Booking a training course
For users that book a training course on our website, we need to share your personal data with our e-Commerce platform, Shopify, an American based company. Shopify enables us to sell training courses to you online. We also need to share your personal data with WorldPay for processing payment. WorldPay is based in the UK. The processing of your personal data is necessary for the purposes of our, or our third party’s contract and does not affect your fundamental rights and freedoms as a data subject.
For users that book an e-Learning or blended learning course, we will share your details with Totara, our online Learning Management System. Totara Learning (Europe) Limited is a UK based company. Users are required to set up an account to access the e-Learning modules.
The processing of personal information is necessary for the performance of a task or service CAA International carries out to process the course booking either if booked by the delegate or on behalf of the delegate (i.e. organisation).
CAA International maintains personal information that you voluntarily submit electronically on one or more secured servers. CAA International will keep delegate details for seven years. After this date, all personal data will be deleted.
Booking an examination
For users that wish book an examination via our website, you will be directed to the UK Civil Aviation Authority’s website to process your booking and payment. The UK CAA’s examination portal is hosted by Aspeq Limited, a New Zealand based company. We also need to share your personal data with SagePay for processing payment. SagePay is a UK based company. The processing of your personal data is necessary for the purposes of our, or our third party’s contract and does not affect your fundamental rights and freedoms as a data subject.
We retain your personal information for the lifetime of the license and, thereafter, for a period of ten years for compliance and enforcement purposes.
Our website is hosted by a third-party provider, Rackspace Ltd, a UK based hosting company.
This website uses Google Analytics (GA) to track user interaction. Google is an American based company. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website.
Should you choose to contact us using the contact form this website or an email link like this one, none of the data that you supply will be stored on this website. Instead, the data will be automatically sent to our CRM system, Salesforce, that we use to process and administer your enquiry. The data collected will include your name, company name, email address, country, area of interest and a message/enquiry. This data will allow us to respond to your message. Your data will be stored on Salesforce for three years.
You will not receive any unsolicited emails from us unless you have selected/ticked the relevant consent box beneath our contact form.
If you subscribe to any of our email mailing lists, the email address that you submit to us will be forwarded to Campaign Monitor who provides our email marketing services. Campaign Monitor is an American based company. The email address that you submit will not be stored within this website’s own database or in any of our internal computer systems. Your email address will remain within Campaign Monitor’s database for as long as we continue to use Campaign Monitor services for email marketing or until you specifically request removal from the list. You can do this by selecting the unsubscribe link contained in any marketing related email that we send you or by requesting removal via email.
To subscribe to our mailing lists hosted by Campaign Monitor, we operate a double opt-in system. If you submit your information to one of our subscription forms, Campaign Monitor will send you a one-time confirmation email to the address entered asking the user to, in turn, confirm the email address. You are required to follow a link in the email to confirm their subscription. This is the second opt-in. Only after this confirmation is the email address added to the mailing list.
As part of our ongoing commitment to deliver the highest standards and to conform to ISO 9001:2008, all our customers will receive an email after the service delivery requesting customer feedback. Users will be directed to Survey Monkey, an Amercian based company. Users will be asked to complete a customer satisfaction survey. All responses remain confidential and will give us valuable information on how we can better serve and exceed our customer’s expectations. These emails are deemed a legitimate part of trading under GDPR. You may still receive these email requests, even if you have previously unsubscribed from our email marketing communications.
Applying to Work at CAAi
We display all live vacancies on the “Careers” section of our website. To apply for a position, users are redirected to the UK Civil Aviation Authority’s dedicated careers website. When individuals apply to work at the CAA, we will only use the information they supply to us to process their application and to monitor recruitment statistics. Where we want to disclose information to a third party, for example, where we want to take up a reference or obtain a ‘disclosure’ from the Disclosure and Barring Service (DBS) we will not do so without informing the applicant beforehand unless the disclosure is required by law.
Personal information about unsuccessful candidates will be held until after the recruitment exercise has been completed. It will then be destroyed or deleted. We retain de-personalised statistical information about applicants to help inform our recruitment activities or for equality and diversity purposes, but no individuals are identifiable from that data.
Once a person has taken up employment with the CAA, we will compile a file relating to their employment. The information contained in this file will be kept secure and will only be used for purposes directly relevant to that person’s employment. Once their employment with the CAA has ended, we will retain the file in accordance with the requirements of our retention policy and then delete it.