How we handle personal data for SpottingLog and this website.
The SpottingLog Plane Spotters log book and Plane Spotting Database are provided through the web application at app.spottinglog.com. This marketing website is served from spottinglog.com (including subdomains such as www).
For data protection purposes, SpottingLog is the controller of personal data described in this policy, unless we state otherwise.
This policy explains what personal data we may collect, why we use it, how long we keep it, and your rights. It applies to visitors to this marketing site and to users who create an account and use the SpottingLog application.
Account and log-book data (app). When you register and use SpottingLog, we process information you provide and generate through normal use of the service — for example name, email address, password (stored using strong one-way hashing), country of residence where collected, subscription and billing-related records held by our payment provider, aircraft sightings you log, photos you upload, trips, locations, support messages and similar content needed to run your account.
Technical and security data. We may process server logs, IP addresses, browser type, device identifiers, timestamps and similar technical information to secure the service, prevent abuse, troubleshoot issues and meet legal obligations.
Marketing website. If you use our contact or enquiry forms when available, we process the details you submit so we can respond. We do not require you to create an account to read this website.
We use personal data to provide, maintain and improve SpottingLog; to authenticate you; to process subscriptions and trials; to communicate with you about the service (including security, billing and product updates where appropriate); to respond to support requests; and to comply with law. Where required, we rely on appropriate lawful bases under UK GDPR / GDPR (such as performance of a contract, legitimate interests balanced against your rights, or consent where we ask for it).
We do not sell your personal data. We share data with trusted service providers who help us run SpottingLog (for example hosting, email delivery and payment processing). They may only process data on our instructions and subject to appropriate safeguards. Payment card handling is carried out by our payment provider; we do not store full card numbers on our own servers.
Our infrastructure and subprocessors may be located in the United Kingdom, the European Economic Area or other countries. Where personal data is transferred outside the UK/EEA, we use appropriate safeguards recognised under applicable data protection law (such as standard contractual clauses or adequacy decisions) where required.
We keep personal data only for as long as needed for the purposes described in this policy, including to provide the service, meet legal, tax and accounting requirements, resolve disputes and enforce our agreements. When data is no longer required, we delete or anonymise it in line with our internal retention practices.
Depending on applicable law, you may have the right to access, correct, delete or restrict processing of your personal data, to object to certain processing, to data portability and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a supervisory authority (in the UK, the Information Commissioner’s Office).
To exercise your rights in relation to your SpottingLog account, use in-app account tools and the Help Centre where available, or contact us as set out below. We may need to verify your identity before responding.
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. No method of transmission over the internet is completely secure; we encourage you to use a strong, unique password and to keep your login details confidential.
SpottingLog is not directed at children under 16, and we do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us and we will take steps to delete it.
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be communicated through the app or by email where appropriate.
For privacy questions relating to SpottingLog, please use the Help Centre in the app if you have an account, or our contact page on this website.