Privacy Policy

1. Who controls your data

FlightdeckQ is the data user responsible for the personal data described in this Policy. FlightdeckQ is an independent pilot-learning platform developed by airline pilots at HKPAPA. Privacy requests are handled through the confirmed operational contact below.

Supplying data is voluntary, but we cannot create an account, provide paid access, keep a learning record or answer a request without the information necessary for that purpose.

2. Data we collect

• Account and identity data: name, email address, Wix member ID, authentication and account status.
• Subscription and transaction data: chosen aircraft and plan, order ID, price, currency, renewal and cancellation status, payment status and receipt information. Full card details are handled by Wix and its payment providers, not stored by FlightdeckQ.
• Learning data: question attempts, answers, accuracy, subjects, timestamps, session records, bookmarks, readiness indicators and reports of suspected question errors.
• Communications: support, privacy, cancellation, deletion and feedback messages.
• Technical data: IP address, browser/device information, security events, request logs, necessary cookies/local storage and similar diagnostic information.

3. How we use data

• create and secure accounts, authenticate members and provide the requested Service;
• confirm purchases, manage entitlements, renewals, cancellations, receipts and customer support;
• build the member’s private training record, learning analytics and study recommendations;
• detect misuse, protect content and systems, troubleshoot faults and maintain service reliability;
• investigate question reports and improve content in aggregate or de-identified form;
• meet accounting, tax, legal, regulatory, fraud-prevention and dispute-resolution obligations; and
• send marketing only where the required notice and consent or other lawful permission exists, with an opt-out in each message.

We do not use personal learning data to make operational aviation, licensing, employment or airline decisions.

4. Systems and recipients

Wix is used for member identity, authentication, pricing-plan entitlements, attempts, reports, order status and related site services. Wix and its payment providers process payments. FlightdeckQ’s Cloudflare service delivers published question content; its D1 question database is designed not to hold member identity, attempts, reports or payment data. Short-lived technical tokens or encrypted grading capsules may be processed to deliver and secure a study session.

We may disclose necessary data to hosting, security, analytics, communication and support providers acting for us; payment providers; professional advisers, auditors and insurers; a genuine successor to the business; or regulators, courts and law-enforcement bodies where required or permitted by law. We do not sell personal data.

Service providers may process data outside Hong Kong. We take reasonably practicable contractual, technical and organisational steps to protect data and limit use to the stated purpose.

5. Cookies, local storage and analytics choices

We use strictly necessary browser storage for login flows, security, theme preference, study state and core site operation. Service providers may set additional essential cookies for authentication, checkout and fraud prevention.

With your permission, we use Google Analytics 4 to understand page use, content engagement and key product journeys such as login, checkout intent and study-session starts and completions. The Google tag initializes in denied Consent Mode so it can respect your choice; analytics storage and page measurement remain off until you choose Allow analytics. Advertising storage, advertising personalisation and Google signals are disabled. We do not send Google your name, email, study answers, notes, member token or payment-card details. You can change the choice at any time through Privacy choices.

6. Retention

We keep personal data only as long as needed for the notified purpose. Account and learning data are normally kept while the account is active. After a verified closure request, data that is no longer required is scheduled for deletion or irreversible anonymisation within 30 days; residual encrypted backups may remain inaccessible until overwritten through the ordinary backup cycle, normally within 90 days.

Transaction, tax, accounting, fraud-prevention, security and dispute records may be retained for up to seven years, or longer where law or an active claim requires it. When retention is no longer necessary, we erase or anonymise the data.

7. Security and data incidents

We use access controls, service-provider security, encrypted transport, minimisation and operational safeguards intended to protect data from unauthorised or accidental access, processing, erasure, loss or use. No internet service can guarantee absolute security. If a material incident occurs, we will investigate, limit harm and notify affected people or authorities where appropriate or required.

8. Your choices and rights

Subject to applicable law, you may ask whether we hold your personal data, request access to it, correct inaccurate data, withdraw direct-marketing consent, object to an unrelated new use, or request account closure and deletion of data no longer required. We may need to verify identity and may retain limited records where law, fraud prevention, accounting or a legal claim requires it.

For deletion steps, see the Account Closure and Data Deletion Process. A request to stop renewal is separate from a deletion request.

9. Children

FlightdeckQ is designed for pilots and aviation learners, not directed to young children. A person who cannot legally consent to account creation under applicable law must use the Service only with a parent or guardian’s involvement. We do not knowingly use children’s data for cross-brand marketing or consequential automated decisions.

10. Changes and contact

We may update this Policy as the Service, vendors or legal requirements change. We will post the updated date and give reasonable notice of material changes where practicable.

Address access, correction, marketing, privacy and deletion requests to FlightdeckQ Data Protection using the dedicated email below. Put “FlightdeckQ Privacy Request” in the subject and include the account email and the specific request. Do not send passwords, full card numbers or identity documents unless we specifically request a secure verification step.