1. Scope
This policy describes how Air Support Desk LLC governs personal data internally. It complements the Privacy Policy, which describes the same subject from the reader's point of view.
2. Governing Principles
All processing carried out by Air Support Desk is measured against the following principles.
- Lawfulness, fairness and transparency in every collection point.
- Purpose limitation: data collected for enquiries is not repurposed for marketing.
- Data minimisation: we do not add form fields that we do not need.
- Accuracy: we correct information promptly when told it is wrong.
- Storage limitation: defined retention periods with scheduled deletion.
- Integrity and confidentiality: access restricted to those who need it.
- Accountability: decisions about processing are documented.
3. Roles and Responsibility
Air Support Desk LLC acts as the controller for personal data submitted through this website. Our hosting, email and analytics providers act as processors under written terms that restrict them to processing on our instructions.
4. Security Controls
Controls include encryption of data in transit, least-privilege administrative access, multi-factor authentication on all administrative accounts, separation of production and development environments, and periodic review of third-party dependencies.
5. Vendor Assessment
Before a new processor is engaged we assess its security posture, data location, sub-processor practices and deletion commitments. Vendors that cannot meet those requirements are not used, even where they would be convenient.
6. Personal Data Breach Procedure
Suspected incidents are triaged immediately, contained, and assessed for risk to individuals. Where a breach is likely to result in a risk to rights and freedoms, we notify the competent supervisory authority within 72 hours of becoming aware, and notify affected individuals without undue delay where the risk is high.
Every incident, whether or not notifiable, is recorded with its cause, effect and remedial action.
7. Data Subject Requests
Requests to access, correct, delete or port personal data are logged on receipt, verified proportionately, and answered within the statutory period. We do not charge a fee except where a request is manifestly unfounded or excessive.
8. Training and Review
Everyone with access to personal data receives data protection guidance appropriate to their role, and this policy is reviewed at least annually.
How to Contact Us
Questions, requests and formal notices relating to this document should be sent to Air Support Desk LLC, 3301 W Main St, Norman, OK 73072, United States, or by telephone on +1 405-561-0937. Written correspondence is preferred because it creates a clear record for both parties.
We aim to acknowledge substantive correspondence within two business days and to provide a full response within thirty days. Where a request requires verification of identity, the response period begins once verification is complete.