BHABritish Helicopter Association

Privacy Policy

Last updated: 5 May 2026.

This Privacy Policy explains how The British Helicopter Association Limited ("we", "us", "our", "the Association") collects and uses personal data through this website (bhalimited.com). It is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are (data controller)

The British Helicopter Association Limited, company number 00945248, registered office Unit C2 West Entrance, Fairoaks Airport, Chobham, Woking, Surrey, GU24 8HU, United Kingdom, is the data controller for personal data collected via this website.

2. What we collect and why

2.1 Information you give us via the contact form

  • Name — to address you in our reply.
  • Organisation (optional) — to understand the context of your enquiry.
  • Email address — to reply to you.
  • Enquiry type and message — to handle your enquiry.
  • Consent record — your indication that you have read this Policy.

Lawful basis: consent (Article 6(1)(a) UK GDPR) and our legitimate interest in responding to enquiries directed to us (Article 6(1)(f)).

2.2 Technical information

Our hosting provider's web server may log standard technical information (such as IP address, request timestamp, requested URL and user-agent) for security, abuse prevention and operational reasons. This processing relies on our legitimate interest in maintaining a secure and functioning website (Article 6(1)(f)).

2.3 Cookies

We use only essential cookies and equivalent local storage. See our Cookie Policy for details.

3. How we use your information

  • To respond to your enquiry.
  • To keep records of correspondence where appropriate.
  • To detect, prevent and respond to abuse, fraud or security incidents.
  • To comply with our legal obligations.

We do not use the personal data submitted through this website for marketing, profiling or automated decision-making.

4. Sharing

We do not sell your personal data. We share personal data only with:

  • Our hosting and email service providers acting as data processors on our behalf, under appropriate contractual safeguards.
  • Authorities, regulators or other parties where we are legally required to do so, or where necessary to defend our legal rights.

5. International transfers

Where any of our processors process personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place (for example, an adequacy decision or the UK International Data Transfer Agreement / Addendum to the EU SCCs).

6. Retention

Enquiry correspondence is retained only for as long as needed to handle the enquiry and any reasonable follow-up, and to keep a sensible administrative record. Server logs are retained for a short period for security purposes and then deleted or aggregated.

7. Your rights

Under UK data protection law, you have the right to:

  • Access your personal data.
  • Request correction of inaccurate data.
  • Request erasure where applicable.
  • Restrict or object to certain processing.
  • Data portability where applicable.
  • Withdraw consent at any time, where processing is based on consent.

To exercise these rights, please contact us using the details on our Contact page.

8. Complaints

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk.

9. Security

We use HTTPS encryption for all pages of this website and apply appropriate technical and organisational measures to protect personal data. No system can be guaranteed completely secure; please do not send sensitive personal information through the contact form unless necessary.

10. Children

This website is not directed at children. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the most recent change was made.