Privacy Policy
Last updated: June 2026 · Aim High Pilot Training (sole trader, Paul Hignett, Essex)
ICO Registration: We are in the process of registering with the Information Commissioner's Office (ICO) as required under UK GDPR. Registration number will be added here once confirmed. If you have any data protection queries in the meantime, contact us at
info@aimhighpilottraining.co.uk.
1. Who we are
Aim High Pilot Training is a sole trader business operated by Paul Hignett, registered in Essex, England. We are the data controller for personal data collected through aimhighpilottraining.co.uk.
Contact: info@aimhighpilottraining.co.uk · 07762 751583
2. What data we collect
We collect the following personal data:
- Account data — your name, email address, and password (hashed) when you create an account.
- Profile data — your training pathway (PPL or NPPL) selected at signup.
- Booking data — your name, email address, phone number, and session details when you make a booking.
- Payment data — billing details processed by Stripe. We do not store your card number — Stripe handles all payment processing.
- Exam data — your exam attempt history, scores, and subject progress stored to power your dashboard and certificate eligibility.
- Communications — messages you send us via the contact form.
- Technical data — IP address and browser information collected automatically by Cloudflare for security purposes.
3. How we use your data
We use your data to:
- Provide and manage your account and subscription.
- Process bookings and send booking confirmation emails.
- Track your exam progress and generate your Exam Readiness Certificate.
- Send transactional emails (booking confirmations, subscription receipts, account verification).
- Respond to enquiries submitted via the contact form.
- Improve the platform based on usage patterns.
- Comply with our legal obligations.
We do not use your data for marketing without your explicit consent, and we do not sell your data to third parties.
4. Legal basis for processing
- Contract — processing necessary to provide the service you have signed up for (account management, subscriptions, bookings).
- Legitimate interests — keeping the platform secure, preventing fraud, and improving our services.
- Legal obligation — retaining financial records as required by HMRC.
5. Third parties
We share data with the following trusted third-party services to operate the platform:
- Supabase (supabase.com) — database and authentication. Data stored on servers within the EU.
- Stripe (stripe.com) — payment processing. Stripe is PCI-DSS compliant.
- Resend (resend.com) — transactional email delivery.
- Cloudflare (cloudflare.com) — website hosting, DNS, and security.
- Microsoft Teams — delivery of live online ground school sessions.
Each of these providers operates under their own privacy policies and data processing agreements.
6. Data retention
- Account and exam data — retained while your account is active and for 2 years after account closure.
- Booking and payment records — retained for 7 years as required by HMRC for tax purposes.
- Contact form messages — retained for 12 months then deleted.
You may request deletion of your account and personal data at any time (see Your rights below). Note that financial records required by law cannot be deleted before their retention period expires.
7. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — request deletion of your personal data (subject to legal retention requirements).
- Restriction — ask us to restrict how we process your data in certain circumstances.
- Portability — receive your data in a machine-readable format.
- Object — object to processing based on legitimate interests.
To exercise any of these rights, email info@aimhighpilottraining.co.uk. We will respond within 30 days.
8. Cookies
We use the following cookies:
- Authentication cookies — set by Supabase to keep you logged in. These are strictly necessary for the service to function.
- Security cookies — set by Cloudflare for bot protection and security.
We do not currently use advertising or analytics cookies. If this changes, we will update this policy and obtain your consent where required.
For any privacy queries or to exercise your rights, contact us at info@aimhighpilottraining.co.uk.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.