Privacy Policy

Last updated: 16/03/2026

1. Data Controller

Planetraders is operated by [TODO: MGC Systems Ltd / registered company name], registered in England and Wales. Company number: [TODO: company number]. Registered address: [TODO: registered address].

For data protection enquiries, contact us at: [TODO: privacy@planetraders.co.uk]

2. Data We Collect

Account Information

When you register via our authentication provider (Supabase Auth), we collect your name and email address. Supabase may also store authentication tokens, login history, and device information.

Listing Data

If you create a listing, we collect: aircraft details (type, manufacturer, model, year, registration, hours, price, description), photographs, and your contact preferences.

Enquiry Data

When you submit an enquiry about a listing, we collect your name, email, phone number (if provided), and message content.

Usage Data

We collect anonymised analytics data including pages visited, browser type, and referral source to improve our service.

Cookies

We use essential cookies for authentication and session management, and analytics cookies with your consent. See our cookie preferences for details.

3. Legal Basis for Processing

• Contract: Processing necessary to provide the marketplace service (account management, listing publication, enquiry delivery).
• Legitimate interest: Service improvement, fraud prevention, and security monitoring.
• Consent: Analytics cookies and marketing communications (where applicable).

4. How We Use Your Data

• To provide and maintain the marketplace platform
• To facilitate communication between buyers and sellers
• To send service-related notifications
• To detect and prevent fraud or abuse
• To improve our service through anonymised analytics

5. Data Retention

Account data is retained while your account is active. Listing data is retained for 12 months after a listing expires or is removed. Enquiry data is retained for 24 months. You may request earlier deletion at any time.

6. Third-Party Processors

We use the following third-party services to operate Planetraders:

• Supabase — Authentication, identity management, and PostgreSQL database hosting
• Vercel — Application hosting and edge network
• Algolia — Search indexing and query processing
• AWS (S3 / CloudFront) — Image storage and delivery
• Stripe — Payment processing (when applicable)

All processors are contractually bound to process data only as instructed and maintain appropriate security measures.

7. Your Rights Under UK GDPR

You have the right to:

• Access — Request a copy of your personal data
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data (Article 17, right to be forgotten)
• Portability — Receive your data in a portable format
• Objection — Object to processing based on legitimate interest
• Restrict processing — Request limitation of processing in certain circumstances
• Withdraw consent — Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at [TODO: privacy@planetraders.co.uk]. We will respond within 30 days.

8. Complaints

If you are unsatisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the platform.