Privacy Policy

1. Introduction

Aviation Box Ltd ("we", "us", or "our") operates QuickCart Pro. This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data. We are committed to protecting your privacy and complying with GDPR and other applicable data protection laws.

2. Information We Collect

Personal Data

While using our Service, we may ask you to provide certain personally identifiable information:

• Email address
• First and last name
• Payment information (processed securely by Stripe)
• Billing address
• Device information and hardware fingerprint

Usage Data

We automatically collect certain information when you use the Service:

• IP address
• Browser type and version
• Pages visited and time spent
• Unique device identifiers
• Operating system information
• Click-through and usage patterns

3. How We Use Your Information

We use the collected data for various purposes:

• To provide and maintain our Service
• To process your subscription and payments
• To enforce our one-device-per-license policy
• To notify you about changes to our Service
• To provide customer support
• To detect, prevent and address technical issues
• To monitor usage and improve the Service
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Contract: Processing necessary for the performance of our subscription service
• Legitimate Interests: For fraud prevention, security, and service improvement
• Legal Obligation: To comply with applicable laws and regulations
• Consent: Where you have given explicit consent for specific processing

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Stripe for payment processing, email service providers for notifications
• Legal Requirements: When required by law or to respond to legal process
• Business Transfers: In connection with any merger, sale of company assets, or acquisition
• Protection of Rights: To protect the rights, property, or safety of Aviation Box Ltd and our users

We do NOT sell, trade, or rent your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Encrypted database storage
• Regular security audits and updates
• Limited access to personal data on a need-to-know basis
• Secure password hashing (bcrypt)
• PCI DSS compliant payment processing through Stripe

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account data: As long as your account is active
• Transaction records: 7 years for legal and tax purposes
• Usage analytics: 24 months
• Marketing communications: Until you unsubscribe

8. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@quickcartpro.com

9. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session and authentication
• Remember your preferences and settings
• Analyze usage patterns and improve the Service
• Provide security features

You can control cookies through your browser settings. Disabling cookies may limit some features of the Service.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If you become aware that a child has provided us with personal data, please contact us immediately.

12. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we will provide notice via email or through the Service.

14. Data Protection Officer

For any privacy-related questions or concerns, you can contact our Data Protection Officer:

15. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).