This is the privacy notice of Coracademy Limited. We respect your privacy and are committed to protecting your personal data.
Coracademy Limited is the controller responsible for your personal data. We are registered in England and Wales, Company Number 16270855. Our registered address is 23 Flat Holm Walk, Sully, CF64 5WE, United Kingdom. For all data matters, contact us at admin@coracademy.co.uk.
We may collect the following categories of personal data:
We do not collect any Special Categories of Personal Data, nor any information about criminal convictions or offences.
We collect personal data directly from you when you complete our contact form, register interest in a course, create an account for one of our Coratools (including the UK SORA SAIL Calculator), or correspond with us by email or telephone.
We also collect limited technical data automatically when you visit our website, including cookies. See our Cookie Policy for details.
We use your personal data to respond to your enquiries, process course registrations, run Coratools accounts, and improve our services. We rely on the following lawful bases:
We do not make decisions about you by automated means that have legal or similarly significant effects. The ratings and documents the UK SORA SAIL Calculator produces are calculations about a proposed drone operation, not decisions about you as a person, and they are reviewed by the relevant authority.
The UK SORA SAIL Calculator requires an account and is intended for people aged 18 or over acting for a business. Name, email address and a password are required to create an account; company, role and SORA experience are optional. Your account data (name, company, role, email address, SORA experience, your updates choice and the date you accepted the tool's terms) is stored with our authentication provider, Supabase, and used to run your account, to respond to support requests and, only where you have ticked the box, to keep you informed about Coracademy tools, courses and UK SORA updates. You can change that choice at any time from "Your account" inside the tool.
The answers you enter into the tool (your operation, aircraft, areas and mitigations) are sent to our server solely to calculate your results and build your documents. They are processed in memory for the duration of each request and are not stored by us. Any assessment you save is saved to a file on your own device. Our server keeps ordinary technical logs (request times and error messages) for a short period to keep the service running.
If you switch on "Save my assessments to my account" inside the tool, your assessment answers are stored in your account (with Supabase) so you can continue from any device. They stay there until you delete them, switch the setting off (which deletes them) or ask us to delete the account. The setting is off unless you choose it.
To delete your account, email admin@coracademy.co.uk from the address you signed up with.
Security. All traffic to our website and tools is encrypted (HTTPS). Account data and saved assessments are stored encrypted by our provider; passwords are stored only as one-way hashes, so nobody, including us, can read them; and each account can only read its own saved assessments. Access to our providers' dashboards is limited to the company's directors.
Delegate portal. Enrolled course delegates are issued with a personal username and password to sign in to the private delegate portal. When you sign in, we keep a simple server-side record for access-control reasons: your delegate username, the fact and time of the sign-in, which area of the portal you opened (the tool or the slides, and which slide session), and the time your session was last active. This record is stored with Supabase. It never includes anything you enter into the delegate tool or any document it produces, and it does not record your IP address. Anything you enter into the delegate tool, and every document it exports, stays on your own device and is not sent to or stored by us. We keep these sign-in records for the duration of the course and a reasonable period afterwards, then delete them.
We may share your data with IT service providers that process it on our behalf: Netlify (hosts our website and runs the tool calculations), Supabase (account authentication and database), Amazon Web Services (hosts our enquiry backend), Resend (sends our emails), Microsoft 365 (our email and documents), Google (Google Analytics, only after you accept cookies), Cloudflare (website analytics and content delivery) and MapTiler (map tiles in the SORA tool; receives your device's IP address when the map loads). We also share data with professional advisers and HMRC where required. We do not sell your data or share it with third parties for marketing purposes without your explicit consent.
International transfers. Netlify, Google and Resend process data in the United States; the other providers may do so. Where personal data leaves the UK, the transfer is protected by the UK International Data Transfer Addendum (or the EU standard contractual clauses with the UK addendum) contained in each provider's data processing agreement, copies of which we keep.
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, including legal and accounting requirements:
Under data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to receive the data you gave us in a portable format, and to withdraw any consent you have given at any time (which does not affect processing already carried out). To exercise any of these rights, contact us at admin@coracademy.co.uk; we respond within one month. Account holders can see and change what we hold under "Your account" inside the tool, and can unsubscribe from any email using the link in it.
If you are dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their privacy notices.
We may update this notice from time to time. The date at the top of this page indicates when it was last revised.
For any data protection queries, contact us at admin@coracademy.co.uk.