Privacy Policy

This Privacy Policy explains how SERB ("we", "us," or "our") collects, uses, and protects your data. This policy applies to all users of SERB's drone UTM services and technology, accessible via our web application and mobile applications for iOS and Android devices (collectively, the "Services").

By accessing or using the Services, you confirm that you have read and understood this Privacy Policy. You also acknowledge that SERB may collect and use your information in accordance with applicable laws, this Privacy Policy, and our Terms of Use.

SERB is the data controller for personal data collected in connection with your use of our Services.

Introduction:

We build a range of services that help you obtain your license to operate and manage your drone safely and according to the applicable laws and regulations in Oman, our services include the following:

• Obtaining permits
• Registering pilots and drones
• Booking flights
• Registering courses

We provide a variety of plans from which you can choose to enjoy our services. Each of our plans has its own set of perks. Our plans are as follows:

• Nawras
• Osfur

1. Scope and Application:

This Privacy Policy applies to all individuals who access or use our Services. It specifically applies to:

• Drone Operators: Individuals or entities that operate drones using our UTM services.
• Technology Users: Individuals or entities that utilize our technology and services for drone operation and management.
• Service Providers: Entities that partner with us to provide additional services related to drone operation.
• End Users: Individuals who are affected by or interact with the drone services provided by our users.

Across this Notice, we will be using some important definitions as follows:

• Data: Collect all information you submit to the Drone deck via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws.
• Data Protection Laws: any applicable law relating to the processing of personal Data, including but not limited to the Directive 96/46/EC (Data Protection Directive).
• Personal Data: Refers to any information that relates to an identifiable person, either directly or indirectly. In this context, it refers to the personal data you provide to us through this website.
• "User" or "you": any party that accesses the Website and is not either
  • employed by SERB and acting in the course of their employment or
  • engaged as a consultant or otherwise providing services to SERB and accessing the Website in connection with the provision of such services.
• "We," "us," and "our": refer to [SERB], the owner and operator of this website, along with its affiliates and subsidiaries. These terms are used to denote the organization responsible for collecting, using, and protecting your personal information as described in this privacy policy.
• Website: the website that you are currently using https://flyserb.com/en, and any sub-domains of this site unless expressly excluded by their own terms and conditions.

User Responsibilities:

• Users are responsible for maintaining their device settings to ensure notifications remain enabled and accessible.

2. Information We Collect:

When you create an account, you provide us with personal and non-personal information. You can also choose to add a phone number or payment information to your account. Even if you aren't signed in to your Account, you might choose to provide us with information --- like an email address to communicate with or receive updates about our services.

2.1 Personal Information (PII)

• Full Name
• Date of Birth
• Gender
• Address
• Civil ID
• Mobile Number

2.2 Non-Personal Information (Non-PII)

• Drone Type
• Drone Manufacturer
• Flight Request Location
• Date

When do we collect information?

We collect information from you when you register on our site, place an order, subscribe to a newsletter, fill out a form, or enter information on our site. All data is collected solely through user input.

3. Age requirements:

All users must be at least 18 years of age to use this service. By accessing and using our platform, you confirm that you meet this age requirement and agree to comply with all applicable laws and regulations.

If you're a parent or legal guardian, and you allow your child to use the services, then these terms apply to you and you're responsible for your child's activity on the services.

4. Use of personal data

All information is gathered strictly for the purpose of obtaining CAA approvals/permission.

Serb does not utilize any artificial intelligence or machine learning methods to process data.

How do we use your information?

We may use such information in the following ways:

• To personalize the user's experience and to allow us to deliver the type of content and product offerings in which you are most interested.
• To improve our website in order to better serve you.
• To allow us to better service you in responding to your customer service requests.
• To administer a contest, promotion, survey or other site feature.
• To quickly process your transactions.
• To send periodic emails regarding your order or other products and services.

5. Data Storage and Security:

• All data is stored in a protected database on a cloud server based in Oman or the country of operation.
• SERB uses SHA256 hashing for some sensitive data and employs HTTPS protocols to protect user data during transmission.
• Retention Policies:
  • SERB retains user access logs for 365 days for auditing purposes.
  • System logs are maintained to store performance data.
• Compliance & Legal Requests:
  • SERB may use Personal Information and Log Data if required to comply with legal requests from public safety and government authorities.
• Data Sharing Policy:
  • SERB does not share users' physical addresses or phone numbers with third parties.
• Data Retention:
  • Personal Data is retained for as long as necessary for its original purpose.
  • If the purpose changes, the retention period may be adjusted accordingly.
• Additional Uses of Personal Data:
  • Preserving database integrity.
  • Carrying out ongoing services.
  • Research, analytics, and statistical purposes.
  • Ensuring compliance with applicable laws and regulations.
• Account Deletion Policy:
  • Users may request account deletion by contacting SERB.
  • Verification Process:
    • To prevent unauthorized requests, SERB will verify the identity of the requester before proceeding.
  • Impact of Account Deletion:
    • Users will lose access to all associated services and features.
    • All linked data will be either removed or archived.
  • Exceptions:
    • Data may not be deleted if needed to:
      • Resolve legal disputes.
      • Comply with legal obligations.
      • Address unresolved claims, disputes, or outstanding credits.

6. How We Share Your Personal Data:

In cases of regulatory violations, SERB may cooperate with law enforcement and regulatory authorities by providing necessary information, as required by law.

6.1 Third-Party Integrations

• Mobile Verification: Only the mobile number is shared for verification.
• Thawani Payment Gateway: Email and Name are shared for payment processing.

6.2 Sharing with Government Authorities & Law Enforcement

• Log Data is aggregated with other users' data to provide general drone operation insights to:
  • Drone manufacturers.
  • Third-party partners.
  • Law enforcement agencies.
  • Civil Aviation Authority (CAA).
• SERB may access and share Personal Information with law enforcement or other government agencies if:
  • Required by applicable law.
  • Necessary to comply with court orders or government requests.
  • Required to prevent fraud or illegal activity.
  • Necessary to protect the rights and safety of users.

6.2 Data Protection for Commercial Use

SERB will not share or sell your personal data for any commercial purposes under any circumstances.

a. Commitment to Privacy: SERB is committed to protecting your personal data and ensuring it is used solely for the purpose of providing, maintaining, and improving the UTM services.

b. No Commercial Sharing or Selling: Your personal data, including but not limited to your name, contact information, flight details, and location data, will never be sold, rented, or shared with third parties for advertising, marketing, or any other commercial purposes.

c. Restricted Use of Data: Data collected through the UTM system is only used for operational purposes, including regulatory compliance, safety alerts, and improving user experience.

d. Transparency and Control: Users will always have control over how their data is used and shared. You may contact SERB to request details about the data collected or to make changes to your privacy settings.

e. Legal Exceptions: In compliance with applicable laws and regulations, SERB may share your data with authorized government entities or law enforcement agencies, but only when explicitly required to ensure public safety or regulatory compliance.

f. Data Security Measures: We implement robust security measures to protect your data from unauthorized access, misuse, or breach.

7. User Controls:

• Emergency notifications will include critical updates regarding situational awareness and regulatory compliance.
• User data may be processed to ensure timely delivery of these alerts for operational safety.
• Signed-in users can review and update information via the "My Account" section.
• Users can access and modify data through the account settings screen within the Services.
• Personal information can be reviewed and updated by logging into the SERB App and visiting the account profile page.

8. Cookies and Tracking:

• We use cookies and similar technologies to enhance your experience, analyze website traffic, and improve our services. Cookies are small text files stored on your device that help us recognize your preferences and customize your experience.
• Types of Cookies We Use
  • a. Essential Cookies: Necessary for the functioning of our website or application.
  • b. Performance Cookies: Used to analyze how users interact with our website to improve functionality.
  • c. Functional Cookies: Help remember your preferences and settings.
  • d. Advertising Cookies: Used for targeted advertisements based on your browsing habits.
• Your Choices: You can manage or disable cookies through your browser settings. However, please note that disabling certain cookies may affect the website's functionality.

9. Data Security:

• Security is integrated into SERB's services to protect user information.
• SERB complies with industry-standard security certifications and ensures data protection during transmission and at rest.
• Access Restrictions:
  • User profiles are password-protected.
  • Only authorized SERB personnel can access account information.
• Fraud Protection:
  • SERB will never contact users proactively to request personal account details, including passwords.
• User Responsibility:
  • Users should:
    • Choose strong passwords.
    • Limit device and browser access.
    • Sign out after using their accounts.
• Limitations:
  • No internet transmission or electronic storage method is 100% secure.
  • SERB employs commercially acceptable security techniques, but absolute security cannot be guaranteed.

10. Changes to This Privacy Policy:

• SERB reserves the right to modify this Privacy Policy at any time.
• Notification of Changes:
  • Major changes will be communicated through the Services, email, or push notifications.
• User Consent:
  • Continued use of Services after notification implies consent to modifications.
• Review Encouragement:
  • Users are encouraged to review this Privacy Policy regularly for updates.

11. Liabilities: For All Users

• Legal Balance:
  • These terms are designed to fairly balance rights and obligations between users and SERB.
• Limitations:
  • Liability limitations comply with applicable laws.
  • These terms do not limit liability for:
    • Fraud or fraudulent misrepresentation.
    • Death or personal injury caused by negligence or willful misconduct.
• SERB's Liability:
  • SERB is only liable for breaches of these terms or additional service-specific terms, as permitted by law.

12. Contact Information:

If you have any questions or concerns regarding this Privacy Policy, please contact the SERB Support Team.