Privacy Policy

Updated on the 26th April 2018 to prepare for the General Data Protection Regulation being introduced in the European Union on the 25th May 2018

About this policy

At LiveFlight Limited, the privacy of our visitors is of extreme importance to us. This privacy policy document outlines the types of personal information is received and processed by LiveFlight Limited. We only collect data essential to the running of the LiveFlight service and limit the amount of personally identifiable data stored.

If you require any more information or have any questions about our privacy policy, please feel free to contact us by email at [e-mail].

 

Authentication

User authentication and identification is provided through Facebook and Google (acting as data sub-processors). Secure connections to these providers are established and the OAuth2 technology is used to ensure data is transferred securely and that LiveFlight Limited is provided with only the essential data it requires to operate.

LiveFlight Limited holds the user's name and the user's email address - this is used for identification, authentication and for notifying the user of any service-level announcements (including subscription reminders).

Cookies, Web Beacons and IP Addresses

LiveFlight Limited uses cookies to store information about visitors preferences, record user-specific information on which pages the user access or visit, customise Web page content based on visitors browser type or other information that the visitor sends via their browser.

LiveFlight Limited will also collect your IP address, Device Type and User Agent as part of our web server logs. This is used to help administer the site, to analyse usage in order to improve the service and to prevent fraudulent and unauthorised use of any LiveFlight Limited services. This data is deleted automatically after 90 days.

Personal Information Held

LiveFlight Limited only collects personally identifiable data that is essential to the operation of the LiveFlight service. The source, usage and storage duration is outlined below:

Information Source	Shared With	Purpose	Duration
User’s Name Facebook or Google authentication (OAuth2)	None	Identification	Until user terminates account
User’s Email Facebook or Google authentication (OAuth2)	Stripe	Identification: to authenticate the user on the LiveFlight platform and to associate them with a subscription purchased using Stripe. Communication: subscription and general notifications (unless user opts out).	Until user terminates account
User’s Stripe Customer and Card Identifier Stripe API	None	Identification: to create a charge to a specific Card registered to a specific Customer should a user register multiple cards - the identifier is used to match the card details stored securely on Stripe’s service.	Until user terminates account
User’s Session IP Address / Device Type (User Agent) LiveFlight API Clients (iOS and/or web)	Stripe, Google Analytics, Google Fabric	Identification: per-session authentication to allow features such as rate limiting to function correctly when user is using multiple devices. Fraud protection: identify if fraudulent activity when collecting card data occurs (shared with Stripe should fraud or a chargeback be raised).	90 days

Note: the following information may be collected through or displayed via the LiveFlight, but is processed by third parties and never stored in LiveFlight Limited databases:

Credit Card Information (card number, name, CVC, zip code)

Collected through the LiveFlight website for subscribing to a LiveFlight Horizon subscription. This information is collected via the Stripe Checkout service and is processed by Stripe; an identifier is stored on LiveFlight, but personal data is processed by this third party.

User’s Profile Picture

The profile picture is stored and loaded directly from a third party authentication service (either Facebook or Google) and is not stored by LiveFlight Limited at any point.

Personal Information Storage

• Stored in at least one Amazon Web Services-hosted database in Ireland, EU (PostgreSQL).

• Can be stored in read-only clones (on-demand) of said database to be used for optimising performance - this data is mirrored from the central database.

• Stored in Amazon Web Services-hosted database backups for 7 days.

• Third-party services may collect and process personally identifiable data, specifically the IP address and session user agent, outlined in this Privacy policy. These third parties will highlight their processing of personally identifiable data in their Privacy policies.

Handling Data Breaches:

Breaches are to be reported within 72 hours to the local authorities by LiveFlight Limited's DPO, reporting what data has been lost, what the consequences are and the countermeasures taken. If the data was unencrypted, the data subject (user) must be informed. This will be handled by the DPO.

Your User Rights:

• Exercising "data subject" rights, specifically requesting access to all personal data stored in LiveFlight Limited databases. Users should contact LiveFlight Support to arrange this, through social media outlets or by emailing [e-mail]. If a request for this is received, the DPO is informed who will prepare and deliver this data as soon as possible.

• Updating personal information - as we use Facebook and Google for authentication, this data is updated automatically should you modify it on Facebook or Google. Should this fail to happen, please contact us through social media outlets or by emailing [e-mail].

• Automatic data deletion. Session information (IP address, user agent and device type accessed from) is deleted after 90 days, other personally identifiable data is deleted when you terminate your account (unless stated in our Data policy which can be provided on request).

• Request data deletion. You should contact LiveFlight support to arrange this through social media outlets or by emailing [e-mail]. This will result in the termination of your account.

• Request termination of processing. This would require the termination of your account and the subsequent deletion of your personally identifiable data.

Advertising

• Google, as a third party vendor, uses cookies to serve ads on LiveFlight Limited products.

• Google’s use of the DART cookie enables it to serve ads to users based on their visit to LiveFlight Limited products and other sites on the Internet.

• Users may opt out of the use of the DART cookie by visiting the Google ad and content network privacy policy at the following URL - http://www.google.com/privacy_ads.html

Some of our advertising partners may use cookies and web beacons on our site. We primarily use Google Adsense for advertising purposes.

These third-party ad servers or ad networks use technology to the advertisements and links that appear on LiveFlight Limited’s products send directly to your browsers. They automatically receive your IP address when this occurs. Other technologies (such as cookies, JavaScript, or Web Beacons) may also be used by the third-party ad networks to measure the effectiveness of their advertisements and / or to personalize the advertising content that you see.

LiveFlight Limited has no access to or control over these cookies that are used by third-party advertisers.

In addition, LiveFlight Limited uses the AdMob library by Google on iOS to provide advertisements. Interest-based advertisments may be shown based on your IDFA (this can be disabled on your device), and Google may use this identifier to serve ads to users based on their visit to LiveFlight and other sites on the Internet or apps on the App Store. More information is provided in Google’s Privacy Policy (https://www.google.com/intl/en/policies/privacy/).

You should consult the respective privacy policies of these third-party ad servers for more detailed information on their practices as well as for instructions about how to opt-out of certain practices. LiveFlight Limited’s privacy policy does not apply to, and we cannot control the activities of, such other advertisers or web sites.

Analytics

Google Analytics is a web analysis service provided by Google. Google utilises the data collected to track and examine usage of LiveFlight Limited products, to prepare reports on its activities and share them with other Google services and the developer and directors of LiveFlight Limited.
Google may use the data collected to contextualize and personalize the ads of its own advertising network. LiveFlight Limited uses these analytics to analyse and improve the service based on how it is used.

Google Analytics collects only the IP address assigned to you on the date you visit this site, rather than your name or other identifying information. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Although Google Analytics plants a permanent cookie on your web browser to identify you as a unique user the next time you visit this site, the cookie cannot be used by anyone but Google. Google’s ability to use and share information collected by Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You can prevent Google Analytics from recognizing you on return visits to this site by disabling cookies on your browser.

Anonymous user statistics are collected using Google’s Firebase Analytics. The data collected cannot be used to identify individual users, and is used to gather statistics on how the platform and app is used in order to obtain feedback on how to improve the app. Users can opt-out of mobile analytics by disabling Ad Tracking on their device. See the Firebase Analytics terms for more information: https://firebase.google.com/terms/analytics

Crash Reporting

LiveFlight Connect and LiveFlight for iOS use Crashlytics to receive information on app crashes. The data collected is anonymous (generic device information), and is used to fix issues for other users and to improve the app and service. Crashlytics is provided by Google's Fabric.

Crashlytics also tracks your basic usage of Connect and/or LiveFlight for iOS. This information is not personally identifiable and is used by LiveFight Limited in conjunction with crash reports to analyse and improve the service based on how it is used.

For more, information, see the Crashlytics Privacy Policy.

Disabling Cookies

If you wish to disable cookies, you may do so through your individual browser options. More detailed information about cookie management with specific web browsers can be found at the browsers’ respective websites.

Terminating your account

Should you wish to close your account and delete any personally identifiable data from LiveFlight Limited's databases, please contact LiveFlight support to arrange this through social media outlets or by emailing [e-mail]. Your data will be deleted and you will be notified of this.

Data Protection Officer:

Cameron Carmichael Alonso

[e-mail]