Privacy Policy
Personal Wings, Inc. · Effective Date: 02/19/2026 · Last Updated: 02/19/2026
Who We Are
Personal Wings, Inc., a Delaware corporation (“Company,” “we,” “us,” or “our”), is a professional and jet aviation education company operating PersonalWings.com (primary site) and shop.personalwings.com (Shopify storefront for physical products) (collectively, the “Site”). We offer online aviation training courses, digital content, and physical aircraft accessories, including pitot tube covers, static port covers, and aircraft-specific tools.
For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR), Personal Wings, Inc. is the data controller responsible for your personal data collected through both PersonalWings.com and shop.personalwings.com.
Registered address: 5119 Alejo Street, San Diego, CA 92124
Privacy contact: privacy@personalwings.com
Scope of This Policy
This Privacy Policy applies to all personal data we collect from you when you:
- Visit or use PersonalWings.com or shop.personalwings.com;
- Create an account or register for any Product;
- Purchase physical products through shop.personalwings.com or digital content through PersonalWings.com;
- Communicate with us by email, phone, or through AI-assisted support tools;
- Subscribe to our email list or marketing communications;
- Interact with our content on third-party platforms (e.g., YouTube, social media).
This Policy should be read alongside our Terms and Conditions. By using our Site or Products, you confirm you have read and understood this Policy.
Data We Collect
We collect the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Identity Data | First name, last name, username or account ID | Provided by you at registration or checkout |
| Contact Data | Email address, phone number, billing and shipping address | Provided by you at checkout or account creation |
| Transaction Data | Products purchased, order history, payment method type (not full card numbers), billing records | Generated when you make a purchase via PersonalWings.com or shop.personalwings.com (Shopify) |
| Shopify Storefront Data | Shopify customer account details, order status, shipping tracking, cart activity on shop.personalwings.com | Collected via Shopify platform when you use shop.personalwings.com |
| Financial Data | Payment method details (processed and stored by Stripe, PayPal, or Shopify Payments — we do not store full card numbers) | Payment processors |
| Course & Usage Data | Course progress, lesson completion, quiz results, login timestamps, content accessed | Automatically collected via our LMS and Site |
| Technical Data | IP address, browser type and version, device type, OS, time zone, referring URL, pages visited, session duration | Automatically collected via cookies and analytics |
| Communications Data | Content of emails, support tickets, AI support chat interactions, feedback, and survey responses | Provided by you when contacting us |
| Marketing Preferences | Email opt-in/opt-out status, communication preferences | Provided by you or inferred from your behavior |
| Aviation Context Data (optional) | Aircraft type(s) owned or operated, certificates held, operational role (where voluntarily provided) | Provided by you, used to personalize content |
We never collect: Social Security Numbers, government-issued ID numbers, full payment card numbers, or health or medical data. We do not collect any special categories of sensitive personal data as defined under GDPR Article 9.
How We Collect Your Data
4.1 Directly From You
We collect data you provide when creating an account, completing a purchase (on PersonalWings.com or shop.personalwings.com), filling out a form, subscribing to our email list, contacting our support team, or voluntarily providing information about your aviation background or preferences.
4.2 Automatically
When you visit our Site, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies. See Section 9 for full cookie details. The Shopify platform at shop.personalwings.com also collects certain technical and behavioral data automatically as part of its storefront operation.
4.3 Through Third Parties
We may receive data about you from third-party sources, including:
- Payment processors (Stripe, PayPal, Shopify Payments) — transaction confirmation and fraud signals;
- Shopify, Inc. — order, customer account, and storefront interaction data from shop.personalwings.com;
- Email service providers — delivery and engagement data;
- Analytics platforms — aggregated Site usage data;
- AI support providers — interaction logs from AI-assisted customer support sessions (see Section 7).
How We Use Your Data
We use your personal data only for legitimate, specified purposes, including:
| Purpose | Data Used |
|---|---|
| Process and fulfill physical product orders (via shop.personalwings.com) | Identity, Contact, Transaction, Financial, Shopify Storefront |
| Provide access to digital products and courses | Identity, Contact, Course & Usage |
| Process payments and manage subscriptions | Financial, Transaction |
| Provide customer support (including AI-assisted) | Identity, Contact, Communications |
| Send transactional emails (receipts, access links, shipping updates) | Identity, Contact |
| Send marketing communications (with consent) | Identity, Contact, Marketing Preferences |
| Personalize content and course recommendations | Usage, Aviation Context, Marketing Preferences |
| Improve Site performance and user experience | Technical, Usage (anonymized or aggregated) |
| Detect and prevent fraud and abuse | Technical, Transaction, Financial |
| Comply with legal obligations | As required by applicable law |
We do not sell your personal data to third parties for advertising or commercial purposes, and we do not allow third-party advertisers to collect your personal data through our Site.
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your personal data under the following legal bases, as required by GDPR Article 6:
| Legal Basis | When We Rely on It |
|---|---|
| Contract Performance (Art. 6(1)(b)) | Processing necessary to fulfill your purchase, provide course access, or ship physical products via shop.personalwings.com |
| Legitimate Interests (Art. 6(1)(f)) | Fraud prevention, Site security, improving our Products, sending transactional communications, analytics (where not overridden by your interests) |
| Consent (Art. 6(1)(a)) | Marketing emails, non-essential cookies, AI support interaction logging where disclosed |
| Legal Obligation (Art. 6(1)(c)) | Tax record-keeping, responding to valid legal requests, fraud reporting |
Where we rely on Consent as the legal basis, you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. To withdraw consent, contact us at privacy@personalwings.com.
AI-Assisted Support & Your Data
🤖 AI Disclosure — Read This Section
How We Use Artificial Intelligence in Customer Support
Personal Wings, Inc. uses third-party artificial intelligence (AI) API services to assist in responding to customer inquiries, answering product questions, and delivering certain Site functionality (“AI Support Tools”).
What this means for your data:
- Messages and queries you submit through AI-assisted support channels may be processed by our third-party AI API provider(s);
- We configure AI tools to minimize the personal data transmitted — we do not intentionally send financial data, full order details, or sensitive personal information to AI providers;
- AI providers process data on our behalf as data processors under appropriate data processing agreements (DPAs), and are contractually prohibited from using your data to train their general models without consent;
- AI interaction logs may be retained by us for quality assurance and support improvement for a period not exceeding 12 months, after which they are deleted or anonymized;
- AI-generated responses are informational only. They do not constitute aviation regulatory advice, safety guidance, or any form of professional certification.
Your choices: You may request support from a human team member at any time by emailing support@personalwings.com. You may also request deletion of your AI interaction logs under Section 13.
7.1 AI Providers — Data Processing
Our current AI support providers process data in accordance with their own published privacy policies and our data processing agreements with them. AI providers we may use include: [INSERT AI PROVIDER NAMES, e.g., OpenAI, Anthropic, Google]. Links to their respective privacy and data processing policies are available upon request at privacy@personalwings.com.
If AI providers are located outside the EEA, data transfers are governed by appropriate safeguards as described in Section 11.
Third-Party Processors and Service Providers
We share your personal data with trusted third-party service providers only to the extent necessary to operate our business and fulfill your orders. All processors are bound by contractual data protection obligations and may not use your data for their own purposes.
| Provider / Category | Purpose | Data Shared |
|---|---|---|
| Shopify, Inc. | E-commerce platform hosting shop.personalwings.com; order management, customer accounts, storefront infrastructure | Name, email, shipping address, order history, payment method type, storefront interaction data. Shopify’s privacy policy: shopify.com/legal/privacy |
| Stripe | Payment processing and subscription management | Name, email, payment method, billing address |
| PayPal | Payment processing | Name, email, payment details |
| Email Service Provider [e.g., Mailchimp, ConvertKit] |
Transactional and marketing emails | Name, email, marketing preferences |
| LMS Platform [e.g., Teachable, Kajabi] |
Course delivery, access management, progress tracking | Name, email, course activity data |
| Analytics Platform [e.g., Google Analytics] |
Site performance and usage analytics | Technical data, anonymized usage data |
| AI Support API Provider(s) | AI-assisted customer support | Support query content (minimized; see Section 7) |
| Shipping / Fulfillment [e.g., UPS, USPS, FedEx] |
Physical product shipping and delivery | Name, shipping address, order details |
| Hosting / CDN [e.g., WP Engine, Cloudflare] |
Site hosting, performance, and security | Technical data, IP addresses |
We do not share your personal data with advertisers, data brokers, or unrelated third parties for their own marketing purposes.
8.1 Legal Disclosures
We may disclose personal data where required to do so by law, court order, or valid legal process, or where necessary to protect the rights, property, or safety of Personal Wings, Inc., our users, or others.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies (pixels, web beacons, local storage) to operate the Site, analyze usage, and deliver relevant content. Under GDPR, we obtain your consent before placing non-essential cookies. Please note that shop.personalwings.com (Shopify) sets its own cookies necessary for storefront operation, cart functionality, and fraud prevention.
| Category | Type | Purpose | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Required | Session management, authentication, cart/checkout function, security | No — Site cannot function without these |
| Functional | Optional | Remembering login preferences, language settings, recently viewed content | Yes — via cookie preference center |
| Analytics / Performance | Optional | Understanding how visitors use the Site, page performance metrics | Yes — via cookie preference center |
| Marketing | Optional | Tracking conversions, retargeting, cross-site interest data | Yes — requires explicit opt-in consent (EEA) |
You can manage your cookie preferences at any time via our cookie preference center [INSERT COOKIE CONSENT TOOL LINK], or by adjusting your browser settings. Note that disabling certain cookies may affect Site functionality.
For more detail on specific cookies set by our third-party services (e.g., Shopify, Google Analytics, Stripe), please refer to those providers’ respective cookie policies.
Data Retention
We retain your personal data only as long as necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.
| Data Type | Retention Period |
|---|---|
| Account and identity data | Duration of account, plus 3 years after closure |
| Transaction and financial records | 7 years (IRS / tax compliance) |
| Shopify order and customer data | Duration of Shopify customer account, plus 3 years; subject to Shopify’s own data retention practices |
| Course progress and completion data | Duration of active account access, up to 5 years |
| Marketing communication data | Until opt-out, then deleted within 30 days |
| AI support interaction logs | 12 months, then deleted or anonymized |
| Technical / server log data | 90 days (rolling) |
| Shipping address (physical orders) | 3 years after last order |
When retention periods expire, data is securely deleted or anonymized in a manner that prevents re-identification. You may request early deletion under Section 13.
International Data Transfers
Personal Wings, Inc. is a Delaware corporation based in San Diego, California, United States. If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data transfer restrictions, your personal data will be transferred to and processed in the United States.
We ensure that any such transfers are made with appropriate safeguards in place, which may include:
- Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our agreements with third-party processors;
- Adequacy decisions where applicable;
- Data Processing Agreements (DPAs) with all relevant sub-processors, including Shopify, Inc.
You may request a copy of the applicable transfer safeguards by contacting us at privacy@personalwings.com.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure, including:
- HTTPS/TLS encryption for all data transmitted between your browser and our Site;
- Payment card data handled exclusively by PCI-DSS compliant processors (Stripe, PayPal, Shopify Payments) — we do not store full card numbers on our servers;
- Access controls limiting personal data access to authorized personnel only;
- Regular review of data handling practices and security measures.
No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities as required by applicable law (GDPR: within 72 hours of becoming aware).
Your Rights
Depending on your location, you have the following rights regarding your personal data. EEA/UK residents have rights under the GDPR / UK GDPR. We honor these rights for all users where operationally feasible.
Request a copy of the personal data we hold about you and information on how we process it.
Request correction of inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where there is no compelling reason for continued processing (“right to be forgotten”).
Request restriction of processing in certain circumstances, such as while a dispute is being resolved.
Receive your personal data in a structured, machine-readable format and transfer it to another controller.
Object to processing based on legitimate interests or for direct marketing purposes at any time.
Right not to be subject to solely automated decisions that produce significant legal or similar effects on you.
Withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.
How to Exercise Your Rights
Submit a written request to privacy@personalwings.com with the subject line “Privacy Rights Request” and a description of your request. We will respond within 30 days (GDPR: one calendar month). We may request proof of identity to process your request.
Right to Lodge a Complaint (EEA/UK)
If you are located in the EEA and believe we have processed your personal data in violation of the GDPR, you have the right to lodge a complaint with your local supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu. UK residents may contact the Information Commissioner’s Office (ICO).
California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information. As a company with its principal place of business in San Diego, California, Personal Wings, Inc. takes these obligations seriously.
14.1 Your California Rights
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, business purposes, and third parties with whom we share it;
- Right to Delete: Request deletion of personal information we have collected from you, subject to legal exceptions;
- Right to Correct: Request correction of inaccurate personal information;
- Right to Opt-Out of Sale/Sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising;
- Right to Limit Use of Sensitive Personal Information: We do not process sensitive personal information as defined under CCPA/CPRA beyond what is necessary for the services you requested;
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
14.2 Submitting California Requests
Submit verifiable consumer requests to privacy@personalwings.com with the subject line “California Privacy Request.” We will respond within 45 days. We may extend response time by an additional 45 days where necessary, with notice.
Children’s Privacy
Our Site and Products are intended for users who are 18 years of age or older. We do not knowingly collect personal data from individuals under the age of 18. If we learn that we have inadvertently collected personal data from a minor, we will take prompt steps to delete such data.
If you believe a minor has provided us with personal data, please contact us immediately at privacy@personalwings.com.
Third-Party Links and Platforms
Our Site may contain links to third-party websites, platforms, or services (including YouTube, payment processors, and social media). This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any site you visit — including Shopify’s Privacy Policy which governs data collected through shop.personalwings.com infrastructure.
We are not responsible for data collected through embedded third-party tools (e.g., YouTube video embeds, social share buttons) unless explicitly stated. Where possible, we configure third-party embeds to minimize data collection prior to interaction.
Updates to This Policy
We may update this Privacy Policy from time to time. Material changes — for example, changes to how we use your data, the types of data we collect, or changes to your rights — will be communicated by:
- Email notice to your address on file, and/or
- A prominent notice on our Site, with the updated effective date reflected at the top of this page.
Your continued use of the Site or Products after the updated Policy takes effect constitutes acceptance of the revised Policy. If you do not agree with the changes, you must stop using our Products and may request deletion of your data as described in Section 13.
Privacy Inquiries & Data Requests
Contact Us About Your Privacy
For privacy-related questions, data rights requests, or concerns about this Policy:
Mailing Address
📬 Personal Wings, Inc.
5119 Alejo Street
San Diego, CA 92124
EEA / GDPR Representative
[If required: EU Rep Name]
[EU Rep Address]
Required if regularly processing EEA resident data — consult counsel
General Questions
rich@personalwings.com
My Homebase
Montgomery Airfield KMYF
San Diego, CA