We're committed to your privacy

Summary of how we use your data

• iFLY uses your personal data when you interact with us and our websites and when you purchase goods and services from us
• Data is shared in some situations between iFLY affiliates in the United Kingdom, France and the United States

Data is transferred for the following purposes:

• Processing of and analytics into customer segmentation and profiling for marketing services to customers; and
• Processing of incident reports for customer accidents or injuries incurred on iFLY’s premises or by use of iFLY’s equipment; and
• Processing of employee data for human resources and staff administration to properly maintain the workforce

Where we rely on your consent, such as the following processing, you can withdraw this consent at any time:

• Processing of health-related data you provide on the Declaration of Risk for the purposes of promoting the safety of our customers
• Sending direct marketing in relation to our relevant products and services, or other products and services provided by us and our affiliates

What does this policy cover?

This policy describes how iFLY and other companies in iFLY’s group, including SkyGroup Investments LLC, iFLY Holdings LLC, SkyVenture International (UK) Ltd, and their affiliates and subsidiaries (also referred to as "iFLY ", "we" or "us"), will make use of your data when you use the “Website,” which includes https://www.iflyworld.com, http://www.iflyfrance.com, https://www.iflyworld.co.uk and any other online websites and services we provide. Some examples of the actions you can take on the website are: Register for an account; make purchases on the website; complete a waiver form; use the website; and communicate with us.

It also describes your data protection rights, including a right to object to some of the processing which iFLY carries out. More information about your rights and how to exercise them, is set out in the “What rights do I have?” section.

What information do we collect?

We collect and process personal data about you when you interact with us and our websites and when you purchase goods and services from us. This includes:

• Your name, username and password
• Your gender
• Your age/date of birth
• Your home address, email address and phone number
• Your payment and delivery details, including billing and delivery addresses and credit card details, where you make purchases from us;
  your marketing preferences, including any consents you have given us
• Purchase history
• Health-related data for the Declaration of Risk

How do we use this information, and what is the legal basis for this use?

We process this personal data for the following purposes:

a) To fulfil a contract, or take steps linked to a contract: this is relevant where you make a purchase from us. This includes:

• Verifying your identity
• Taking payments
• Communicating with you
• Providing customer services and arranging the delivery or other provision of products or services
• Promoting the safety and protection of our customers, facilities and assets

b) As required by iFLY to conduct our business and pursue our legitimate interests, in particular:

• We will take your photo and video during your flight for the following reasons: So that you may purchase the photos and videos if you wish, to use for marketing purposes and for the protection of customers, assets and facilities
• We will use your information to provide products and services you have requested, and respond to any comments or complaints you may send us
• We use the information you provide to personalise our website, products or services for you
• If you provide a credit or debit card as payment, we may use third parties to check the validity of the sort code, account number and card number you submit in order to prevent fraud (see 'Who will we share this data with, where and when?' below) 
• We monitor customer accounts to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law
• We use the information you provide to investigate any complaints received from you or from others, about our website or our products or services
• We will use data in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation)

c) Where you give us consent:

• We will process the health-related data you provide on the Declaration of Risk for the purposes of promoting the safety of our customers
• We will send you direct marketing in relation to our relevant products and services, or other products and services provided by us and our affiliates
• On other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time

d) For purposes which are required by law:

• Where we need parental consent to provide online services to children under 16
• In response to requests by government or law enforcement authorities conducting an investigation

Withdrawing consent or otherwise objecting to direct marketing

Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can change your communication preferences at any time here, or by contacting us using the details found under 'How do I get in touch with you?'.

Who will we share this data with, where and when?

We will share your personal data with iFLY companies, including SkyGroup Investments LLC, iFLY Holdings LLC, SkyVenture International (UK) Ltd, and their affiliates and subsidiaries for the following purposes:

• Processing of, and analytics into customer segmentation and profiling for marketing services to customers
• Processing of incident reports for customer accidents or injuries incurred on iFLY’s premises or by use of iFLY’s equipment
• Processing of employee data for human resources and staff administration to properly maintain the workforce

Personal data may be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law, or if required for the legal protection of our legitimate interests in compliance with applicable laws.

Personal data will also be shared with third party service providers, who will strictly process it only as iFLY instructs, on behalf of iFLY, for the purposes identified above. Such third parties include (but not exclusive to) providers of website hosting, marketing communications, call centre operation and identity checking.

In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business.

Data may be sent to the United States, where iFLY’s corporate headquarters is located.  Data is adqueately protected by EU Commission approved standard contractual clauses.  A copy of the relevant mechanism can be provided for your review on request. Please refer to the details found under 'How do I get in touch?'.

What rights do I have?

You have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine-readable format, and to ask us to share (transfer) this data to another controller.

In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).

These rights may be limited, for example, if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping.

To exercise any of these rights, you can get in touch with us using the details found under 'How do I get in touch with you?'. If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred.

For processing the Declaration of Risk, the provision of the requested information is mandatory: if relevant data is not provided, then you will not be able to take part in our indoor skydiving services.

How do I get in touch with you?

We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, or would like to opt out of direct marketing, you can get in touch at support@iflyworld.co.uk or contact our Customer Service Team on 0845 331 6549. Our Team will be able to put you in touch with the appropriate individual or department member to handle your enquiry.

Alternatively, you can write to us. Please address your post 'For the attention of the General Manager':

If you have flown, or intend to fly at iFLY Basingstoke;

iFLY Indoor Skydiving
Basingstoke Leisure Park
Euskerchin Way
Basingstoke
Hampshire
RG22 6PG

If you have flown, or intend to fly at iFLY Manchester;

iFLY Indoor Skydiving
9 Trafford Way
Trafford Quays Leisure Village
Manchester
M41 7JA

If you have flown, or intend to fly at iFLY Milton Keynes;

iFLY Indoor Skydiving
602 Marlborough Gate
Central Milton Keynes
Milton Keynes
MK9 3XS

Which iFLY entity is my data controller, and which affiliates might my data be shared with?

The data controller for your information is SkyVenture International (UK) Limited. The following is a list of companies in SkyVenture International (UK) Limited’s group.

How long will you retain my data?

Where we process personal data in connection with performing a contract, we keep the data for 6 years from your last interaction with us.

Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.