Who we are
Events.Aero is run by Volanti.Aero Limited, the company behind Volanti. It is a trading name, not a separate business, and you sign in with the same Volanti Passport account you use for Volanti.
Volanti.Aero Limited is registered in England and Wales (company number 10913654). Our registered address is Office 4185, 58 Peregrine Road, Hainault, Ilford, IG6 3SZ. We decide how your personal data is used, which makes us its "data controller". We are registered with the Information Commissioner's Office (ICO) under number ZB313867.
Questions about this policy or your data? Email [email protected].
The short version
- We collect what we need to list events, take RSVPs and help organisers run their events.
- When you RSVP, the organiser sees your booking so they can plan for you.
- We never sell your data or use it for advertising.
- Analytics cookies are off unless you turn them on.
- You can ask for a copy of your data, or ask us to fix or delete it, at any time.
What we collect and why
The law says we need a reason, called a lawful basis, for each thing we do with your data. We give it for each one below.
- Your account. When you sign in, Volanti Passport gives us your name, email address, an account number and whether your email address is verified. We use them to run your account and show you your RSVPs and tickets. If you are an organiser, we also use them so you can manage your listings. The Volanti privacy charter covers your Passport account itself. Lawful basis: we need it to provide the service you asked for (contract).
- RSVPs and tickets. When you RSVP, we collect your name, email address and how many places you want. Each place gets its own ticket and reference. If you are flying in, we also collect your aircraft registration, aircraft type and where you are flying from. We use all this to confirm your booking, send your tickets, tell you about changes to the event and help the organiser plan. Lawful basis: contract.
- People you add to an RSVP. If you book places for other people, the organiser may ask for their names. You can also give us their email addresses, and we will email each person their own ticket to accept or decline. Only give us someone's details if they are happy for you to. Lawful basis: legitimate interests, which means a reasonable need that does not override your rights. Here, it is getting each person their ticket.
- Stopping abuse. We note the IP address each RSVP came from. We also use Cloudflare's bot check to block automated or abusive bookings. Lawful basis: legitimate interests (keeping free RSVPs fair and the site safe).
- Listing an event. When you list or manage an event, we collect what you enter. That includes any contact details, website or images you publish with the listing, and the names and email addresses of your team. Lawful basis: contract.
- Claiming an event. To claim a listing, you give us your name, email address, phone number, organisation, role and some evidence. We use these only to check your claim and to contact you about it. We never publish them. Lawful basis: legitimate interests (making sure only the real organiser manages a listing).
- Events from public sources. Many listings are built from details organisers have already published, such as event calendars and their own websites. We use automated tools, including AI, to read those pages and pick out the event details. If an organiser published a contact email address or phone number for their event, we may show it so visitors can get in touch. Lawful basis: legitimate interests (helping people find aviation events). If you are named in a listing and want something changed or removed, email us and we will sort it out.
- Usage data. We measure how people use the site. Our own measurement holds no personal data. It scrambles session IDs so they cannot be traced back, and keeps no IP addresses. Google Analytics only sets cookies if you accept analytics cookies on the cookie banner. If you do, it gets a random ID for your browser and the pages you view. Our server also tells it when you RSVP, cancel, accept or decline a ticket, sign in or list an event. It never gets your name or email address. We keep that browser ID with an RSVP only until the event is over. If you do not accept, Google Analytics stores nothing on your device (see our cookie policy). Lawful basis: your consent for analytics cookies, and legitimate interests (understanding and improving the site) for our own measurement.
- Emails to us. If you email us, we keep the conversation so we can help you. Lawful basis: legitimate interests (answering you).
- Logs and errors. Our servers record each request, including the IP address and browser details. We also use monitoring services to find and fix errors. Lawful basis: legitimate interests (keeping the site running and safe).
No computer makes decisions about you on its own that have a legal or similarly serious effect. A person at Events.Aero checks every claim, and every organiser's listing before it goes live.
Who can see your data
- Event organisers. When you RSVP, the organiser's team can see your name, email address and number of places. They can also see the names of the people on your RSVP, how you are arriving and any aircraft details. They can download this to run their event, for example as a list for the gate or the airfield. Once they download it, the organiser is responsible for their copy under data protection law. Our terms say they may use it only to run that event.
- Everyone. Event listings are public, including any contact details published with them. We never publish anything from your account, your RSVPs or your claims.
- The authorities. We give personal data to the police, regulators or courts only when the law says we must.
Service providers
These companies help us run Events.Aero. They follow our instructions and may use your data only to provide their service to us.
- Volanti Passport (Volanti.Aero Limited) for sign-in.
- Amazon Web Services, OVHcloud and DigitalOcean to host the site and store data, managed through Laravel Cloud and Laravel Forge.
- Cloudflare to deliver pages quickly, protect the site and check for bots.
- Resend, Amazon SES or Cloudflare to send RSVP confirmations, tickets and notifications.
- Google Analytics and Fathom Analytics to see how the site is used, as our cookie policy explains.
- Bugsnag and Laravel Nightwatch to spot errors and slow pages.
- Anthropic to read public event information with AI. We never send it your account, RSVP or claim details.
We also use OpenStreetMap to find event locations, and Unsplash and Pexels for stock photos. They get event details only, never personal data.
Transfers outside the UK
Some of these providers, such as Google, Cloudflare, Anthropic and our hosting providers, handle data outside the UK, including in the United States. When they do, the transfer is protected in one of two ways. Either the UK government has approved the arrangement (for the US, this is the "UK-US data bridge"), or the provider has signed the UK's standard contract for international transfers. Both mean your data must be protected to UK standards.
How long we keep data
- Your account: until you ask us to delete it.
- RSVPs and tickets: for as long as the event stays listed, so you and the organiser have a record of who came. Ask us and we will delete yours.
- The IP address and analytics ID saved with an RSVP: deleted once the event is over.
- Claims: for as long as you manage the listing, as a record of who may manage it.
- Server logs: 14 days.
- Records of requests from AI agents: 90 days.
We may keep something for longer if we need it for a dispute, a security problem or a legal claim, or if the law says we must.
Your rights
Under UK data protection law, you can ask us to:
- give you a copy of your data
- correct it
- delete it
- stop or limit how we use it
- send it to you, or to someone else, in a format a computer can read
If you said yes to analytics cookies, you can change your mind at any time. Email [email protected] and we will reply within one month. We may need to check who you are first.
If you are unhappy with how we have handled your data, tell us and we will try to put it right. You can also complain to the ICO at ico.org.uk.
Children
You need to be 16 or over to have an account or make an RSVP. Parents and guardians can add children to their own RSVP, and are responsible for any details they give us about them.
Security
Everything sent to and from Events.Aero is encrypted. Only the people who need personal data can see it, and organisers see bookings for their own events only. If a data breach affects you and puts you at risk, we will tell you and the ICO, as the law requires.
Changes to this policy
When we change this policy, we publish the new version on this page and change the date at the top.