Privacy

This policy explains how the Gulf Flight Safety Association ("GFSA", "we", "us") collects and uses personal data through the gfsa.me website. It describes what we collect, why, who we share it with, how long we keep it, and your rights regarding your data.

GFSA is a not-for-profit association representing aviation safety organisations across the GCC. For data protection matters, write to [email protected] with the subject line "Data request" and a member of the secretariat will respond.

We collect personal data only at the points where you give it to us. When you submit a membership enquiry, sponsorship enquiry, or contact form, we collect your name, email address, organisation, role, country of residence, and the content of your enquiry. When you subscribe to our mailing list, we collect your email address only.

We do not collect personal data passively. We do not use tracking cookies, advertising pixels, or third-party analytics that identify individual visitors.

To respond to your enquiry and, where relevant, process a membership or sponsorship application. To deliver the GFSA bulletins, conference dates, and joint statements to which you have subscribed. To maintain records of correspondence and applications for the association's internal administration.

We process this data on the basis of your consent, where you have given it through the checkbox on each form, and on the legitimate interests of the association in administering its membership, conferences, and communications.

Members of the GFSA secretariat handle enquiries. The Executive Committee reviews membership and sponsorship applications. Our mailing list is administered through Mailchimp, operated by Intuit Inc., a company based in the United States — when you subscribe, your email address is transferred to and stored on Mailchimp's servers. Our website hosting provider stores form submission data only for the time required to deliver it to GFSA's email servers.

We do not sell, rent, or otherwise share your personal data with third parties for marketing.

Enquiry forms (contact, membership, sponsorship) are held in GFSA's records for 24 months after your last interaction, then deleted. Mailing list subscriptions are held until you unsubscribe; unsubscribe links are included in every issue. Membership records, for confirmed members, are held for the duration of membership plus 7 years thereafter, to satisfy the association's record-keeping obligations.

You have the right to access the personal data we hold about you; to have inaccurate data corrected; to have your data deleted, where we are not required by law or by the association's record-keeping obligations to retain it; to object to processing, including by withdrawing consent for the mailing list; and to lodge a complaint with the relevant data protection authority in your country of residence.

To exercise any of these rights, write to [email protected] with the subject line "Data request". We will respond within 30 days.

The site is served over HTTPS. Form submissions are transmitted in encrypted form. Internal records are accessible only to members of the secretariat and the Executive Committee.

GFSA's website is hosted in the Kingdom of Saudi Arabia. The mailing list is operated by Mailchimp, whose servers are located in the United States. Where you subscribe to the mailing list, you consent to the international transfer of your email address. We do not transfer other personal data outside the GCC region.

We will update this page when our practices change. The "Last updated" date at the top reflects the most recent change.

This policy and any matters arising from it are governed by the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL). Your statutory rights under the data protection law of your country of residence are not affected.