Privacy notice

We are the Civil Aviation Authority (CAA) and we run the Drone and Model Aircraft Registration Service.

We are the data controller for this service.

The data we collect and store in this service

We collect and store your full name, address, date of birth, phone number and email address in order to register you for an operator ID or issue your flyer ID.

We will also use this data to:

  • provide customer support services, which may involve communication by email and telephone. Customer support services involve assisting you with all aspects of the application process. This may include reminding you that it is time to pay or renew your registration or letting you know that you haven't completed the application successfully.
  • send you important safety and regulatory updates by email

If applicable, we also collect and store your drone and model aircraft insurer and insurance policy number.

For organisations, we will also collect and store your organisation’s registration number.

Why we process your personal information

We will process your personal information so that we can perform a task we carry out in the public interest or official authority vested in us in accordance with UK/EU law.

For more information on that task, see the Commission Delegated Regulation (EU) 2019/945 of 12 March 2019 on unmanned aircraft systems and on third-country operators of unmanned aircraft systems (opens in a new tab).

We rely on Legitimate Interests for the processing of your personal data for customer support purposes. It is necessary for ongoing communication with individuals throughout all aspects of the application process and for the period of time we have an ongoing relationship with you. This does not affect your fundamental rights and freedoms as a data subject and you can always request to opt out of certain communications we send to you.

Who sees your personal information and why

This service uses GOV.UK services such as GOV.UK Pay. GOV.UK Pay (payments.service.gov.uk) (opens in a new tab).

GOV.UK will not:

  • transfer your data outside the European Economic Area (EEA)
  • sell or rent your data to third parties
  • share your data with third parties for marketing purposes

We will check that it is you using the service and not someone pretending to be you. This will help to protect your privacy, keep your information safe and prevent identity theft. The check uses identity verification services provided by Experian (opens in a new tab). Experian will only have access to your name, address and date of birth for verification purposes.

We will share, anonymised statistical data with the Department for Transport (DfT) when requested by them. The data we will share is year of birth and partial post-code. This data is used to analyse registration figures and geographical trends in registration.

If we are legally obliged to share your data with law enforcement agencies, such as the Police or the Air Accidents Investigation Branch (AAIB), we will do so.

We may be required to share your data with the authorities appointed by other European Union Aviation Safety Agency (EASA) member states.

How long we keep your data

We will keep your personal information while you have a valid operator ID or flyer ID.

We will also keep it for enforcement purposes for 7 years after your operator ID or flyer ID has been deactivated, expired or revoked.

If you complete your application but your payment isn’t successful, your details will be held for 2 years before deletion.

Incomplete applications will be held for up to 90 days before deletion.

Links to other websites

This privacy notice only applies to this service.

This service contains links to other websites, which have their own terms and conditions and privacy policies. If you go to another website from this service, read the website provider’s privacy notice to find out what it does with your information.

Your rights

You have the right to object to the way your personal data is processed. There are more details about your rights and contact details for our Data Protection Officer in our general privacy notice (opens in a new tab).

You can make an enquiry or make a complaint by emailing FOI.requests@caa.co.uk

You also have a right to complain to the Information Commissioner's Office (opens in a new tab) about how we process your personal data.

Changes to these terms

As a new service we do update this notice from time to time. Please check these terms regularly.

Last updated: October 2023