Legal
Last updated: 8 September 2026
Privacy policy
This policy describes the personal data AERO GOURMET collects on this site, what we do with it, who else handles it and how long we keep it — field by field, as the site actually works. Anything to ask, correct or delete goes to orders@aerogourmet.com.
What we collect, and why
The quote form is the only place on this site where we collect personal data, and every field on it serves pricing an uplift or loading an aircraft.
Flight and offloading: airport of delivery, delivery date and time in local time, aircraft registration, aircraft type, positioning stand, whether a hi-loader is required, and — when offloading is requested — the airport of destination with its own date and time. An airport taken from our reference is stored with its code.
Order: the order itself, the passenger and crew counts, whether hot meal equipment is on board, and a free-text field for allergies and dietary restrictions. That field, and any dietary list attached to it, is read only by the people working that flight.
Attachments and contact: up to 5 files — a loading sheet, a cabin plan, an order spreadsheet — then first name, last name, email address and a phone number with its country code.
Recorded rather than typed: the page the request came from, its station code where there is one, and the time it arrived.
That is the whole inventory: no visitor account, no profile, no advertising identifier, and nothing bought from a data broker.
How the data is used
Quoting and operating the flight: a coordinator prices the request and comes back with a quotation, and if it becomes an order those details are what the kitchen and the ramp crew work from.
Acknowledging it: an email restates every field you sent, with your attachments, so that you can check it, and a copy reaches our own orders mailbox — that is how the desk picks a request up.
Contacting you about that request, and about a later one that follows from it.
Keeping the form usable: a signed token issued when the page renders, a decoy field a person never sees, a length cap on every field, and a count of requests carrying the same email address in the previous ten minutes. Those four barriers replace a captcha, so no external script loads on the page where you type.
None of it feeds advertising, and we build no behavioural profile from it.
Who else handles it
Three suppliers process this data on our instructions, each for one purpose, and they are named by role because a brand changes without the role changing.
Nobody else receives it. Personal data collected here is never sold, rented or exchanged, and it goes on no marketing list.
- A hosting and application platform, which serves these pages and runs the form.
- A managed database and file storage provider, which holds the request and its files.
- A transactional email provider, which delivers the acknowledgement.
How long it is kept
A request is kept while it is quoted, and afterwards for as long as the operator relationship is live — a quotation history is what prices the next rotation. Its attachments stay with it.
A signed link to an attachment is valid for 30 days and then stops working, which is why the acknowledgement says so. The file stays in private storage, and a fresh link is signed on request.
Ask us to delete a request and we delete it, record and files together, at orders@aerogourmet.com.
Attachments, security and restricted access
Files never travel from your browser to storage. They are sent with the form to our server, which holds a key that never reaches a browser and writes them to private storage the page has no route to.
That store is private: a file is readable only through a signed, expiring link, so it has no guessable address. Files are grouped under their request reference, names are sanitised, and the list of accepted formats is closed.
Access is limited to the coordinators working the request. Our technical logs record the request reference, the number of files and the cause of a failure; a file name is never written to a log, because operators name a loading sheet after its flight.
Access, correction and deletion
Write to orders@aerogourmet.com for a copy of what we hold about you, for a correction or for deletion, quoting the email address the request was sent from so that we can find it. It takes questions about this policy too.
Children
This site addresses airline operations, flight departments, handling agents and households arranging a flight, and we collect nothing knowingly from a child. A dietary note sometimes concerns a child travelling in a party: it is handled like any other, and deleted with the request.