Privacy Policy

1. Introduction

paraMOT ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our services.

We are based in the United Kingdom and comply with UK data protection laws, including the UK GDPR and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

When you register for our services, we collect:

• Name and contact details (email, phone number)
• Postal address (for equipment delivery/collection)
• Authentication information (for account security)

2.2 Equipment Information

To provide our services, we record details about your paragliding equipment:

• Equipment type, manufacturer, model, and serial numbers
• Service history and condition reports
• Ownership records (for equipment tracking)

2.3 Service Records

We maintain records of all services performed, including:

• Service dates, types, and descriptions
• Technician notes and findings
• Booking and payment information

2.4 Technical Information

When you use our website, we automatically collect minimal technical information:

• Authentication session data (for secure login)
• Browser preferences (for site functionality)

Note: Our hosting provider may log IP addresses and other technical information in server logs for security and troubleshooting purposes. We do not actively collect or use this information.

3. How We Use Your Information

We use your information to:

• Provide and manage our servicing and repair services
• Maintain accurate service records for safety and compliance
• Communicate with you about bookings, services, and updates
• Process payments and manage our business operations
• Improve our website and services
• Comply with legal obligations and industry regulations

Legal Basis: We process your personal data under the following legal bases:

• Contract: Processing is necessary to perform our services
• Consent: You have explicitly agreed to processing (e.g., marketing emails)
• Legitimate Interests: For business operations and service improvement
• Legal Obligation: To comply with UK laws and regulations

4. Public Equipment Service History

Important: Equipment service records are intentionally made public (accessible via serial number lookup) to promote safety and transparency in the paragliding community.

What is public:

• Equipment serial numbers, manufacturers, models
• Service dates, types, and general condition reports
• Service history timeline (similar to vehicle MOT history)

What remains private:

• Your personal contact information (name, email, phone, address)
• Service costs and payment information
• Your customer account details

By using our services, you consent to this public equipment history model. This serves the legitimate interest of safety in the paragliding community.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third parties who help us operate our business (e.g., payment processors, email services)
• Legal Requirements: When required by law or to protect our legal rights
• Equipment Manufacturers: For warranty claims or safety recalls (with your consent)

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Customer Account Data: Until account deletion + 2 years for legal compliance
• Service Records: Indefinitely for safety and equipment history tracking
• Payment Records: 7 years as required by UK tax law

7. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal obligations)
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at: hello@paramot.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS) and at rest
• Row-level security policies on database access
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis

However, no internet-based system is completely secure. We cannot guarantee absolute security of your data.

9. Cookies and Tracking

We use only essential cookies required for site functionality:

• Authentication session cookies (to keep you logged in)

We do not use analytics, advertising, or tracking cookies. No cookie consent banner is required as we only use strictly necessary cookies.

10. Third-Party Services

Our website and services may use third-party providers:

• Authentication: NextAuth.js (for secure login)
• Email: Resend (for transactional emails)
• Hosting: Vercel (for website hosting and deployment)

These services have their own privacy policies and are responsible for their data practices.

11. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Significant changes will be communicated via email.

13. Contact Information

For questions about this Privacy Policy or to exercise your data rights, contact us:

Email: hello@paramot.co.uk