Privacy policy

1. Details of the data controller

Name of the data controller: Flybuilt Inc.

Registered office: 677 N. Washington Blvd. #57, Sarasota, FL 34236, USA

Postal address: P.O. BOX 222447, Hollywood, FL 33022

Flybuilt Inc. (hereinafter: the "Controller", "we") is committed to protecting your personal data. The purpose of this Privacy Policy is to inform you about the data processing activities we carry out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. Purposes and legal bases of processing

Purpose of processing	Legal basis (GDPR)	Data processed
Contact, request for quotation	Art. 6(1)(b) – performance of a contract	Name, e-mail, phone number, message
Appointment booking	Art. 6(1)(b) – performance of a contract	Name, e-mail, phone number, appointment
Sending newsletters	Art. 6(1)(a) – consent	Name, e-mail address
Operating the website, analytics	Art. 6(1)(f) – legitimate interest	IP address, browser data, cookies
Customer support (ticket system)	Art. 6(1)(b) – performance of a contract	Name, e-mail, content of the message
Accounting obligations	Art. 6(1)(c) – legal obligation	Billing data

3. Use of cookies

Our website uses cookies to improve the user experience, to ensure the operation of the website and for analytics purposes. Cookies are small text files stored by your browser.

Strictly necessary cookies

Required for the basic operation of the website. They may be used without consent.

Analytics cookies

Google Analytics – to measure traffic and user behaviour. Activated only with consent.

Marketing cookies

Facebook Pixel, Google Ads – for remarketing and advertising purposes. Activated only with consent.

You can change or withdraw your cookie settings at any time in your browser or via the "Cookie settings" item in the website footer. Without consent, the analytics and marketing measurement codes (Google Analytics, Meta Pixel) are not loaded.

The Meta Pixel (Meta Platforms Inc.) is used to measure the effectiveness of our ads: it records which pages a visitor arriving from a Facebook or Instagram ad has viewed. Meta processes the data in accordance with its own data policy.

4. Data transfers and processors

We may transfer your personal data to the following processors in order to provide our services:

GoHighLevel (HighLevel Inc.) – CRM, e-mail marketing, appointment booking
Google LLC – Analytics, Ads, Workspace (e-mail)
Meta Platforms Inc. – Facebook, Instagram ads
Stripe Inc. – processing of online payments
Supabase Inc. – database and backend infrastructure

⚠️ Transfers to third countries: Some of our processors operate in the United States. Transfers take place on the basis of the EU–US Data Privacy Framework (DPF) or by applying the Standard Contractual Clauses (SCC) approved by the European Commission.

5. Retention periods

Contact data: 1 year from the closing of the enquiry
Contract data: 5 years from the termination of the contract
Accounting records: 8 years (legal obligation)
Newsletter subscription: until unsubscription
Cookie data: max. 2 years, or until consent is withdrawn

6. Your rights (GDPR Articles 15–22)

You have the following rights in relation to your personal data:

Right of access

You may request information about the data we process about you.

Right to rectification

You may request the correction of inaccurate data.

Right to erasure

You may request the deletion of your personal data (right to be forgotten).

Right to restriction

You may request the restriction of processing.

Data portability

You may request that your data be provided in a machine-readable format.

Right to object

You may object to processing based on legitimate interest.

You can exercise your rights at flybuilt.studio@gmail.com. We respond to your request within 30 days.

7. Data security

The Controller applies appropriate technical and organisational measures to protect your personal data, including but not limited to:

SSL/TLS encryption during data transfer
Access restriction and password protection
Regular backups
Data processing agreements (DPA) concluded with processors

8. Legal remedies

If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Address: 1055 Budapest, Falk Miksa utca 9-11.

Phone: +36 (1) 391-1400

Website: www.naih.hu

You may also turn to the courts if you consider that the Controller has infringed your rights relating to the protection of personal data.

9. Amendments to this policy

The Controller reserves the right to amend this Privacy Policy. The amended version enters into force upon publication on the website. In case of material changes, data subjects will also be notified by e-mail.

Date of last amendment: 13 February 2025