We are the Civil Aviation Authority (CAA) and we run the Drone and Model Aircraft Registration Service.
We are the data controller for this service.
The data we collect and store in this service
We collect and store your full name, address, date of birth, phone number and email address in order to register you for an operator ID or issue your flyer ID.
We will also use this data to:
- provide customer support services, which may involve communication by email and telephone
- send you important safety and regulatory updates by email
If applicable, we also collect and store your drone and model aircraft insurer and insurance policy number.
For organisations, we will also collect and store your organisation’s registration number.
Why we process your personal information
We will process your personal information so that we can perform a task we carry out in the public interest or official authority vested in us in accordance with UK/EU law.
For more information on that task, see the Commission Delegated Regulation (EU) 2019/945 of 12 March 2019 on unmanned aircraft systems and on third-country operators of unmanned aircraft systems (opens in a new tab).
Who sees your personal information and why
This service uses several GOV.UK services. GOV.UK (opens in a new tab) is managed by the Government Digital Service (GDS) (opens in a new tab) on behalf of the Crown.
GDS will not:
- transfer your data outside the European Economic Area (EEA)
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
GDS will process your information in accordance with their privacy notice (opens in a new tab).
We will check that it is you using the service and not someone pretending to be you. This will help to protect your privacy, keep your information safe and prevent identity theft. The check uses identity verification services provided by Experian (opens in a new tab). Experian will only have access to your name, address and date of birth for verification purposes.
We will share, anonymised statistical data with the Department for Transport (DfT) when requested by them. The data we will share is year of birth and partial post-code. This data is used to analyse registration figures and geographical trends in registration.
If we are legally obliged to share your data with law enforcement agencies, such as the Police or the Air Accidents Investigation Branch (AAIB), we will do so.
We may be required to share your data with the authorities appointed by other European Union Aviation Safety Agency (EASA) member states.
How long we keep your data
We will keep your personal information while you have a valid operator ID or flyer ID.
We will also keep it for enforcement purposes for 7 years after your operator ID or flyer ID has been deactivated, expired or revoked.
Links to other websites
This service contains links to other websites, which have their own terms and conditions and privacy policies. If you go to another website from this service, read the website provider’s privacy notice to find out what it does with your information.
You have the right to object to the way your personal data is processed. There are more details about your rights and contact details for our Data Protection Officer in our general privacy notice (opens in a new tab).
You can make an enquiry or make a complaint by emailing FOI.firstname.lastname@example.org
You also have a right to complain to the Information Commissioner's Office (opens in a new tab) about how we process your personal data.
Changes to these terms
As a new service we do update this notice from time to time. Please check these terms regularly.
Last updated: March 2021