Privacy Policy & Passenger Data Charter
1. Introduction & Scope of Discretion
Gateway Storypuls Aviation Hospitality Group Ltd. ("Gatewaystorypuls," "we," "our," or "the Group") operates luxury hospitality, private aviation liaison desks, and high-altitude dining facilities worldwide. This Privacy Policy details our protocols for the lawful collection, cryptographic storage, strict processing, and eventual erasure of personal identifying data (PII) obtained from guests, aircraft owners, charter passengers, and online visitors across gatewaystorypuls.com.
We adhere rigorously to international data protection statutes, notably Regulation (EU) 2016/679 (General Data Protection Regulation / GDPR), the UK Data Protection Act 2018, the California Consumer Privacy Act (CCPA/CPRA), and the Texas Data Privacy and Security Act (TDPSA).
2. Categories of Information Collected
Given the bespoke nature of our aviation-integrated accommodations, we collect the following structured datasets:
- Flight & Passenger Manifest Telemetry: Aircraft tail numbers, call signs, FBO handling requests, estimated time of arrival (ETA), passport identification for customs liaison, and VIP security entourage manifests.
- Personal Identifiers: Legal names, titles, residential addresses, corporate affiliations, telephone contact numbers, and encrypted communication handles.
- Financial & Payment Information: Payment card tokenizations, wire verification credentials, and authorized corporate billing accounts processed through Tier-1 PCI-DSS Level 1 compliant gateways.
- Cabin Customization Profiles: Enriched oxygen preferences, mattress firmness settings, bespoke circadian illumination rhythms, dietary allergens, and specialized sommelier preferences.
- Technical & Session Data: Masked IP addresses, browser fingerprinting strings, cookie preferences, and navigational flow across our digital manifest.
3. Legal Grounds & Lawful Basis for Processing
We process your personal information under the following legal frameworks established under Article 6 of the GDPR:
- Contractual Necessity: Delivering confirmed suite reservations, coordinating private tarmac clearance, fulfilling dining bookings, and issuing flight-style boarding passes.
- Legal & Regulatory Compliance: Aviation security audits, international immigration compliance, hotel guest registration requirements under municipal laws, and anti-money laundering (AML) protocols.
- Legitimate Interests: Maintaining high-security perimeters, optimizing building atmospheric controls, and protecting proprietary aircraft liaison networks.
- Explicit Consent: Sending curated culinary digests and optional flight event invitations, which may be withdrawn at any time.
4. Data Storage, Cryptography & Third-Party Processors
All sensitive passenger data is encrypted at rest using AES-256 bit protocols and transmitted over secure TLS 1.3 tunnels. We maintain data centers with ISO/IEC 27001 certification. We do not sell, rent, or trade your personal information to third-party marketing entities. Disclosures are strictly limited to authorized partners necessary for fulfillment:
- FAA / TSA / EASA verified flight handling agents and Fixed-Base Operators (FBOs).
- Secure payment processing gateways and banking institutions.
- Municipal immigration and customs authorities where legally mandated by civil aviation safety laws.
5. Your Rights Under GDPR, UK-GDPR & CCPA
Regardless of your geographic jurisdiction, Gatewaystorypuls extends the following unequivocal rights regarding your personal records:
- Right to Access: You may request an unredacted copy of all personal records held in our guest registry.
- Right to Rectification: You may correct outdated dietary, passport, or contact information at any time.
- Right to Erasure ("Right to be Forgotten"): Upon conclusion of your departure and expiration of mandatory tax retention windows, you may demand the complete purge of your records.
- Right to Restriction & Objection: You may restrict processing for analytics or direct marketing.
- Non-Discrimination: Exercising CCPA rights will never impact the level of five-star service or rates provided.
6. Data Protection Officer (DPO) Contact Information
To exercise your statutory rights or submit a formal inquiry to our privacy team, please contact our Data Protection Officer:
Office of the Data Protection Officer
Gateway Storypuls Aviation Hospitality Group Ltd.
742 Skyway Promenade, Suite 1900, Hangar District, Dallas-Fort Worth, TX 75261, USA
Email: [email protected]