We are the Civil Aviation Authority (CAA) and we run the Drone and Model Aircraft Registration Service.
We are the data controller for this service.
The data we collect and store in this service
We collect and store your full name, address, date of birth and email address in order to register you for an operator ID or issue your flyer ID.
We will also use your email address to send you important safety and regulatory updates.
Why we process your personal information
We will process your personal information so that we can perform a task we carry out in the public interest or official authority vested in us in accordance with UK/EU law.
For more information on that task, see the Air Navigation (Amendment) Order 2018 (opens in a new window).
Who sees your personal information and why
This service uses several GOV.UK services. GOV.UK (opens in a new window) is managed by the Government Digital Service (GDS) (opens in a new window) on behalf of the Crown.
GDS will not:
- transfer your data outside the European Economic Area (EEA)
- sell or rent your data to third parties
- share your data with third parties for marketing purposes
GDS will process your information in accordance with their privacy notice (opens in a new window).
We will check that it is you using the service and not someone pretending to be you. This will help to protect your privacy, keep your information safe and prevent identity theft. The check uses identity verification services provided by Experian (opens in a new window). Experian will only have access to your name, address and date of birth for verification purposes.
We will share your data with a third party for customer support purposes. This customer support provider is based in the EU and is called Teleperformance (opens in a new window). They are a global organisation but the CAA only use their UK services. They have access to your full registration information, but do not have access to any payment information. Teleperformance will only access your data in the event that you contact them for customer support and assistance. They do not have routine access to your data and will not access it unless you contact them.
On request, anonymised statistical data is shared with Department for Transport (DfT). Year of birth and partial post code information is shared. This data is used to analyse registration figures and geographical trends in registration.
We may be required to share your data with police and law enforcement agencies.
How long we keep your personal information and why
We will keep your personal information while you have a valid operator ID or flyer ID. We will also keep it for enforcement purposes for 7 years after your operator ID or flyer ID has been deactivated, expired or revoked.
Links to other websites
This service contains links to other websites, which have their own terms and conditions and privacy policies. If you go to another website from this service, read the website provider’s privacy notice to find out what it does with your information.
You have the right to object to the way your personal data is processed.
There are more details about your rights and contact details for our Data Protection Officer in our general privacy notice (opens in a new window).
You can make an enquiry or make a complaint by emailing FOI.firstname.lastname@example.org
You also have a right to complain to the Information Commissioner's Office (opens in a new window) about how we process your personal data.
Changes to these terms
Please check these terms regularly. We can update them at any time without notice.
Last updated: February 2020