Last Updated: 26th February 2026

The purpose of this Privacy Notice is to explain how Elevare Aviation LLC (also referred to as “we”, “us” or “our”) collects, uses, processes, stores, shares, and protects personal data that you provide when communicating with us through any channel, including but not limited to our website, flight request forms, email, chat, telephone calls, messaging applications, and other digital or offline communications.
This Privacy Notice is intended to comply with applicable privacy and data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and, where applicable, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”).
Please note that Elevare Aviation does not carry out automated decision-making that produces legal or similarly significant effects on individuals, unless expressly stated otherwise.
1. Identity and contact details of the controllerThe data controller is:
Elevare Aviation LLC
Registered office: [Registered Agent Address], Delaware, United States. Responsible Party: Nicolau CastanheiraFor any privacy or data protection concern, please email nico@flyelevare.com
2. Purposes and legal basis for processingWe collect and process personal data for the following purposes:
a. To provide our services to youThis is the main reason we need to collect personal data. We require information about you in order to:respond to charter requests and service enquiries; prepare quotations and flight options; arrange aircraft charter brokerage and related services; prepare and conclude agreements; send invoices and payment-related communications; organize, coordinate, and follow up flights and related services; communicate with passengers, charterers, assistants, family offices, concierges, and other authorized contacts. In this context, the collection of certain personal data is a contractual requirement, not a statutory one. If required information is not provided, Elevare Aviation may be unable to prepare a quotation, enter into a contract, or provide the requested services.Legal basis under GDPR: processing is necessary to take steps at your request prior to entering into a contract and/or to perform a contract.
b. To improve your customer experience and our servicesWe may process personal data to improve our services, customer experience, and operational efficiency. This may include:understanding client preferences; tailoring communications and service options; remembering trip or catering preferences; improving website performance and usability; analyzing how our website and communications are used; sending updates, service announcements, or marketing communications where permitted by law. Where you have requested or used our services, we may send you information about similar services, unless you opt out. You may unsubscribe from marketing communications at any time by using the unsubscribe link in the communication or by contacting us directly.Legal basis under GDPR: legitimate interests and, where required, consent.
c. To comply with legal and regulatory obligationsIn certain cases, we are required to collect, use, or disclose personal data in order to comply with legal, regulatory, tax, anti-fraud, anti-money laundering, sanctions, aviation security, immigration, customs, or law enforcement obligations.Legal basis under GDPR: compliance with a legal obligation.
d. To protect legitimate business interestsWe may process personal data where necessary to protect our legitimate interests, including:fraud prevention; legal claims and dispute management; internal reporting and administration; IT security and platform protection; enforcing our contractual rights and website terms. Legal basis under GDPR: legitimate interests, except where overridden by your rights and freedoms.
3. Categories of personal data collectedDepending on the nature of your interaction with us, we may collect the following categories of personal data:
a. Contact detailsfull name company name telephone number email address billing or physical address
b. Identity and passenger informationdate of birth nationality passport or identification details visa-related information where required for travel passenger manifest details
c. Travel and service informationdeparture and destination details travel dates and times aircraft preferences catering preferences ground transportation requirements hotel or concierge requests special travel requirements pet travel information
d. Financial and transaction informationinvoicing details payment status transaction-related information limited payment details where relevant through payment service providers
e. Relationship and preference datalanguage preferences communication preferences service history loyalty, referral, or account-related information client and passenger preferences
f. Technical and usage dataIP address browser type device information website interaction data cookie and analytics data records of communications or enquiries
g. Sensitive personal dataWe do not seek to collect sensitive personal data unless strictly necessary for the requested service, legal compliance, or safety requirements. Where needed, this may include health-related or accessibility information relevant to a flight or special assistance request.Where required by law, we will rely on an appropriate legal basis and apply additional safeguards.
4. Sources of personal dataWe may collect personal data:directly from you; from someone acting on your behalf, such as an assistant, family office, corporate travel arranger, concierge, or broker partner; from operators, service providers, and partners involved in your requested services; through our website, forms, cookies, analytics tools, and communications systems; from public sources where relevant for legitimate business purposes.
5. Recipients of personal dataPersonal data may be processed internally by authorized Elevare Aviation personnel on a need-to-know basis.We may also share personal data, where necessary, with the following categories of recipients:licensed aircraft operators and their crews; airport handlers, terminals, FBOs, and ground service providers; ground transportation, hotel, catering, concierge, and other ancillary service providers; cloud hosting, CRM, email, communications, storage, and IT infrastructure providers; website developers, analytics providers, and security providers; payment service providers, banks, and anti-fraud screening providers; legal, tax, compliance, and professional advisers; regulators, courts, public authorities, customs, immigration, law enforcement, or other official bodies where required by law.
6. International transfers of personal dataBecause Elevare Aviation operates internationally and may arrange flights and services involving multiple jurisdictions, your personal data may be transferred to countries outside the European Economic Area and, where relevant, outside your country or state of residence.This may occur, for example, where:your requested itinerary involves international travel; an operator or supplier is located outside the EEA; you are located outside the EEA when communicating with us; an international service provider supports our operations. Where GDPR applies and personal data is transferred internationally, we will seek to ensure that appropriate safeguards are in place, such as:adequacy decisions where available; standard contractual clauses; contractual necessity in connection with your requested services; other lawful transfer mechanisms recognized by applicable law.
7. Retention periodWe retain personal data only for as long as necessary for the purposes described in this Privacy Notice, including to provide requested services, manage client relationships, comply with legal and regulatory obligations, resolve disputes, and enforce agreements.Unless a longer retention period is required or permitted by law, Elevare Aviation will generally retain personal data for a period of up to six (6) years from the date of the last relevant interaction, transaction, or contractual relationship.8. Confidentiality and security measuresWe apply technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include:restricted access controls; authentication and password protection; multi-factor authentication where implemented; role-based permissions; secure cloud environments; session timeouts; contractual confidentiality obligations; staff awareness and privacy handling procedures.
9. Your GDPR rightsIf GDPR applies to the processing of your personal data, you may have the following rights:
a. Right of accessYou may request confirmation as to whether we process your personal data and obtain access to that data and related information.
b. Right to rectificationYou may ask us to correct inaccurate personal data and complete incomplete data.
c. Right to erasureIn certain circumstances, you may ask us to erase your personal data, also known as the “right to be forgotten.”
d. Right to restrict processingYou may request restriction of processing in certain circumstances.
e. Right to objectYou may object to processing based on legitimate interests and to direct marketing.
f. Right to data portabilityWhere legally applicable, you may request a copy of certain personal data in a structured, commonly used, machine-readable format and ask for it to be transmitted to another controller.
g. Right not to be subject to certain automated decisionsYou have the right not to be subject to a decision based solely on automated processing, including profiling, where that decision produces legal or similarly significant effects, subject to applicable exceptions.
h. Right to lodge a complaintYou have the right to lodge a complaint with the competent supervisory authority.
10. California privacy rights under CCPA/CPRAIf you are a California resident and the CCPA/CPRA applies to Elevare Aviation’s processing of your personal information, you may have the following rights:
a. Right to knowYou may request information about the categories of personal information collected, the sources of that information, the business or commercial purposes for collecting it, and the categories of third parties to whom it is disclosed.
b. Right to deleteYou may request deletion of personal information collected from you, subject to certain exceptions.
c. Right to correctYou may request correction of inaccurate personal information.
d. Right to opt out of sale or sharingWhere applicable, you may direct a business not to sell or share your personal information as those terms are defined by California law.
e. Right to limit the use and disclosure of sensitive personal informationWhere applicable, you may request that a business limit certain uses of sensitive personal information.
f. Right to non-discriminationYou have the right not to receive discriminatory treatment for exercising your privacy rights.We do not sell personal information in the ordinary meaning of the word. If our practices ever constitute a “sale” or “sharing” under California law, we will update this notice and provide any required mechanisms.
11. How to exercise your rightsTo exercise your privacy rights, please contact:
Data Protection Officer (DPO)
Email: nico@flyelevare.com
Address: [Registered Agent Address], Delaware, United StatesPlease include:your full name; the email address or phone number used in your communications with us; the right you wish to exercise; sufficient information for us to verify your identity and process your request. Where legally permitted, we may need to verify your identity before acting on a request.If you are an authorized agent acting on behalf of another person, we may request proof of your authority and may take steps to verify the identity of the individual concerned.
12. Marketing communicationsIf you no longer wish to receive marketing or promotional communications from Elevare Aviation, you may opt out at any time by:clicking the unsubscribe link in the relevant email; or contacting us directly. We may still send non-marketing communications where necessary for service, transactional, legal, or operational purposes.
13. Cookies and similar technologiesOur website may use cookies and similar technologies to operate effectively, remember preferences, analyze site usage, improve performance, and support communications and marketing.For more information, please refer to our Cookies Policy or cookie settings notice.
14. Third-party websitesOur website may include links to third-party websites, platforms, or services. We are not responsible for the privacy practices, content, or security of those third parties. You should review their privacy notices separately.
15. Changes to this Privacy NoticeWe may update this Privacy Notice from time to time to reflect changes in law, regulation, business practices, or services. Any updated version will be posted on the relevant page of our website with the revised effective date.
16. Contact and complaintsIf you have questions or concerns about this Privacy Notice or how we process personal data, please contact:Data Protection Officer (DPO)
Email: nico@flyelevare.com