Privacy Policy

Controller: CORE FLIGHT TECHNOLOGIES LLC Last updated: September 30, 2026

This Privacy Policy explains how CORE FLIGHT TECHNOLOGIES LLC (“Core Flight Technologies,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data when you visit coreflighttech.com, create an account, place an order, contact us, subscribe to marketing, use our chat or forms, submit a review, or otherwise interact with us.

1. Controller and Contact Information

The controller responsible for the personal data described in this Policy is:

CORE FLIGHT TECHNOLOGIES LLC 8 The Green, Ste 14197 Dover, Delaware 19901 United States Email: info@coreflighttech.com Phone: +1 740-990-2090

Use the subject line “Privacy Request” when exercising a privacy right. If appealing a decision on a prior request, use “Privacy Appeal.”

2. Personal Data We Collect

Depending on how you interact with us, we may collect:

Identity and contact data: name, company name, billing and delivery address, email address, telephone number, account username, and recipient details.
Order and transaction data: products, options, prices, shipping method, order status, refunds, invoices, payment status, transaction identifiers, and limited payment-method information made available by the payment provider. We do not intend to receive or store full payment-card numbers.
Delivery and customs data: address, telephone number, delivery instructions, tracking data, customs or import information, and documents required by a carrier or authority.
Account data: login and account identifiers, saved addresses, order history, wish-list or comparison activity, and account preferences. Passwords are intended to be stored in protected hashed form by the website platform.
Communications and support data: messages, chat transcripts, form submissions, emails, troubleshooting information, photographs, video, serial information, wiring or installation details, and warranty or return records.
Reviews and user content: product reviews, ratings, comments, uploaded images, and any name or profile information displayed with that content.
Marketing data: subscription status, consent records, email engagement, campaign interactions, interests, and opt-out or suppression records.
Technical and usage data: IP address, browser and device data, identifiers, cookie or similar-technology data, referral source, pages and products viewed, searches, clicks, cart and checkout events, session activity, approximate location derived from IP, and security logs.
Fraud and risk data: transaction risk signals, failed payment information, abuse indicators, login or security events, and information used to prevent fraud and protect the Website.
Affiliate and attribution data: referral identifiers, campaign or affiliate source, and information used to attribute an order or lead.

We do not intentionally request sensitive personal data except where it is reasonably necessary and lawful, such as identification or tax/customs information requested for import clearance. Do not send sensitive information that we have not requested.

3. How We Collect Personal Data

We collect personal data:

directly from you when you order, register, contact us, subscribe, chat, submit a form or review, or request support;
automatically from your browser or device through cookies, pixels, local storage, logs, and similar technologies;
from payment providers, freight forwarders, carriers, customs agents, marketing and analytics providers, affiliate partners, fraud-prevention providers, and other service providers involved in the interaction; and
from public or third-party sources where lawful and relevant to fraud prevention, business-customer verification, or support.

4. Purposes and Legal Bases

Where GDPR, UK GDPR, or another law requiring a legal basis applies, we rely on the following bases as appropriate:

Contract and Pre-Contract Steps

We process identity, contact, order, payment-status, delivery, account, and support data to:

provide product information and respond to pre-sale questions;
accept, process, dispatch, deliver, cancel, refund, repair, replace, and support orders;
provide accounts, order history, tracking, warranty, and customer service; and
communicate about an order, payment, shipment, return, or support request.

Legal Obligations

We process and retain information where necessary to comply with tax, accounting, customs, product-safety, consumer-protection, sanctions, recordkeeping, law-enforcement, and other legal requirements.

Legitimate Interests

Where permitted, we process data for legitimate interests such as:

securing the Website, accounts, transactions, and services;
detecting and preventing fraud, abuse, chargebacks, and prohibited activity;
maintaining, troubleshooting, measuring, and improving the Website and customer experience;
keeping appropriate business, support, warranty, and dispute records;
understanding product and site performance; and
communicating with existing customers about closely related products or services where permitted and subject to opt-out rights.

We balance these interests against the rights and reasonable expectations of the individual.

Consent

Where required, we rely on consent for:

non-essential analytics, advertising, and marketing cookies or similar technologies;
email marketing and promotional messages; and
any other optional processing for which consent is requested.

Consent may be withdrawn at any time without affecting processing already carried out lawfully. Marketing emails include an unsubscribe method.

5. Payments

Payments are processed by Stripe or another provider identified at checkout. Payment providers collect and process payment credentials, authentication information, device data, and fraud signals under their own terms and privacy notices. We receive transaction status, transaction identifiers, limited payment-method details, risk or dispute information, and related records needed to process and support the order.

Do not send full card details by email, chat, or support form.

6. Service Providers and Other Recipients

We may disclose personal data to the following categories of recipients when reasonably necessary:

Website, commerce, hosting, security, and IT providers, including WordPress and WooCommerce-related infrastructure and service providers;
payment and fraud-prevention providers, including Stripe;
freight forwarders, carriers, customs agents, fulfilment providers, and authorities involved in export, import, delivery, loss, or damage handling;
customer relationship, chat, and form providers, including HubSpot;
email marketing providers, including Sender;
analytics and performance providers, including Automattic/Jetpack/WooCommerce Analytics and Burst Statistics;
advertising and measurement providers, including Meta Pixel and Meta Conversions API;
security and anti-abuse providers, including Google reCAPTCHA;
affiliate and attribution providers, including GoAffPro and WooCommerce attribution technologies;
review and customer-feedback services used to publish or verify product feedback;
professional advisers, including accountants, auditors, insurers, lawyers, and consultants;
banks, payment networks, dispute handlers, regulators, courts, and law-enforcement authorities where required or reasonably necessary; and
a buyer, investor, successor, or adviser in connection with a proposed or completed financing, reorganisation, sale, merger, or transfer of all or part of the business, subject to appropriate confidentiality and legal safeguards.

Service providers may act as our processors, independent controllers, or joint participants in processing depending on the service and applicable law. Their own privacy notices may also apply.

7. Analytics, Advertising, and Targeted Advertising

The Website uses analytics and measurement technologies to understand visits, product views, searches, cart activity, checkout progress, campaign attribution, and site performance. It also uses Meta Pixel and Meta Conversions API for advertising measurement and, where enabled, audience or targeted-advertising purposes.

We do not sell personal data for money. However, disclosures involving advertising identifiers, device data, browsing activity, or conversion events may be treated as a “sale,” “sharing,” or processing for targeted advertising under some privacy laws even when no money is exchanged.

Where applicable law provides an opt-out right, users may opt out through the cookie/privacy settings made available on the Website or by sending a Privacy Request. We will process recognised browser-based opt-out preference signals where required by applicable law and supported by the final consent-management configuration.

8. Cookies and Similar Technologies

The Website uses cookies, pixels, local storage, and similar technologies for:

essential site, login, account, cart, checkout, security, and fraud-prevention functions;
preferences and recently viewed products;
analytics, attribution, and performance measurement;
chat, forms, reviews, affiliate attribution, and customer support; and
advertising measurement and targeted advertising where permitted.

Our Cookie Policy will provide service-specific details, purposes, providers, and available controls. Non-essential technologies will be managed through the Website’s consent mechanism where required by law.

Browser controls may block or delete cookies, but disabling essential storage may prevent account, cart, checkout, fraud-prevention, or other site functions from working correctly.

9. International Data Transfers

CORE FLIGHT TECHNOLOGIES LLC is located in the United States, while products may be fulfilled and shipped from Türkiye. Service providers may process personal data in the United States, Türkiye, the European Economic Area, the United Kingdom, and other countries in which they or their subprocessors operate.

Where international-transfer restrictions apply, we use or require an applicable lawful transfer mechanism, such as an adequacy decision, contractual safeguards including approved standard contractual clauses, or another permitted mechanism. Provider-specific locations and safeguards may be available from the relevant provider’s privacy documentation.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose collected, including to provide orders and support, maintain security, comply with tax, accounting, customs, warranty, product-safety, and other legal obligations, resolve disputes, and enforce agreements.

Retention is determined by the type of record, applicable legal limitation and recordkeeping periods, warranty and support needs, dispute or chargeback periods, fraud and security needs, and whether an account or marketing subscription remains active.

Marketing data is retained until consent is withdrawn or an objection or unsubscribe is received, after which limited suppression information may be retained to honour the opt-out. Data may be retained longer when required by law, litigation hold, regulatory request, active dispute, fraud investigation, or security need. When no longer required, data is deleted, anonymised, or securely disposed of according to the applicable system and provider capabilities.

11. Security

We use reasonable administrative, technical, and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, and disclosure. These measures may include access controls, authentication, encrypted transport, service-provider controls, backups, logging, monitoring, and staff or contractor confidentiality obligations.

No system or transmission method is completely secure. Customers are responsible for protecting their account credentials and should contact us promptly if they suspect unauthorised account activity.

12. Privacy Rights

Depending on location and applicable law, individuals may have rights to:

know or confirm whether personal data is processed and obtain access;
correct inaccurate personal data;
request deletion;
receive a portable copy;
restrict or object to certain processing;
withdraw consent;
opt out of targeted advertising, sale or sharing, or certain profiling;
receive information about recipients or categories of recipients;
avoid discrimination for exercising privacy rights;
appeal a refusal of a privacy request; and
complain to an applicable privacy or data-protection authority.

To exercise a right, email info@coreflighttech.com with the subject “Privacy Request.” We may request information reasonably necessary to verify identity and authority. An authorised agent may submit a request where permitted by law, subject to appropriate verification. We will respond within the period required by applicable law.

If a request is denied, the response will explain the basis where required. To appeal, reply or email with the subject “Privacy Appeal.” This process does not prevent a person from contacting the competent regulator or authority.

13. Marketing Choices

Marketing subscription is optional and is not required to place an order. Marketing consent is separate from acceptance of the Terms of Sale.

Users may unsubscribe through the link in a marketing email or contact us. Transactional, security, service, warranty, and order communications may continue where necessary even after a marketing opt-out.

14. Public Content

Product reviews, ratings, comments, names, photographs, or other content submitted for public display may be visible to other visitors. Do not include private, confidential, payment, identity-document, or other sensitive information in public content.

15. Children

The Website and products are not directed to children. We do not knowingly collect personal data from children in a manner prohibited by applicable law. If a parent or guardian believes a child provided personal data unlawfully, contact us so the matter can be investigated and appropriate action taken.

16. Automated Processing

Payment, security, fraud-prevention, and advertising providers may use automated systems to assess transactions, detect abuse, measure events, or create audiences. We do not intend to make solely automated decisions that produce legal or similarly significant effects except where permitted by law, necessary to enter into or perform a contract, or based on valid consent. Rights concerning qualifying automated decisions remain available where applicable.

17. Changes to This Policy

We may update this Policy to reflect changes in law, technology, providers, or business practices. The “Last updated” date will identify the current version. Material changes will be communicated where required by law. A new version applies prospectively and does not change prior processing unlawfully.

18. Contact and Complaints

Privacy questions, requests, or complaints may be sent to: