Privacy Policy

We collect information in the following ways when you interact with our platform:

We use the information we collect to:

• Process RFQs, inventory submissions, and purchase orders
• Communicate with you about your account, orders, and inquiries
• Verify your identity and company credentials for regulated transactions
• Comply with export control laws (EAR, ITAR) and anti-money laundering obligations
• Send transactional emails, quote notifications, and order updates
• Analyze usage patterns to improve our platform and services
• Send marketing communications where you have provided consent (you may opt out at any time)
• Detect, prevent, and address fraud, security breaches, and technical issues

We will not use your personal data for purposes materially different from those described above without first notifying you and, where required by law, obtaining your consent.

Your data is stored on servers located in the United States. We implement industry-standard security measures, including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for sensitive data at rest (passwords are hashed with bcrypt; we never store plaintext passwords)
• Role-based access controls limiting internal data access
• Regular third-party security audits and penetration testing
• SOC 2 Type II compliant hosting infrastructure

We retain personal data for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable law (typically 7 years for transaction records due to export control and tax compliance requirements). When data is no longer required, it is securely deleted or anonymized.

While we implement strong security measures, no system is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.

We do not sell your personal data. We may share your information with the following categories of third parties only to the extent necessary:

• Service Providers: Cloud hosting (AWS), email delivery, analytics, payment processors, and CRM tools. These parties process data solely on our behalf under data processing agreements.
• Logistics Partners: Freight forwarders and couriers who require your shipping address and contact details to complete delivery.
• Export Compliance: U.S. government agencies (e.g., BIS, OFAC, DCSA) where disclosure is required by export control regulations.
• Legal Requirements: Law enforcement or regulatory authorities when legally required or to protect the rights, property, or safety of AeroTurbineSpare, our customers, or others.
• Business Transfers: In connection with any merger, acquisition, or sale of assets, with appropriate confidentiality protections in place.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable export of your data.
• Objection: Object to processing for direct marketing or where we rely on legitimate interests.
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at contact@aeroturbinespare.com. We will respond within 30 days. For EU/UK residents, you also have the right to lodge a complaint with your local data protection authority.

We use the following types of cookies and similar technologies:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our platform.

The data controller responsible for your personal information is:

If you are located in the European Economic Area or United Kingdom, our EU/UK Representative may be contacted for GDPR-related inquiries. Please email the address above with “GDPR Inquiry” in the subject line and we will provide representative contact details.