Privacy Policy

This Privacy Policy applies to all individuals who access or use our Services. It specifically applies to:

• Drone Operators: Individuals or entities that operate drones using our UTM services.
• Technology Users: Individuals or entities that utilize our technology and services for drone operation and management.
• Service Providers: Entities that partner with us to provide additional services related to drone operation.
• End Users: Individuals who are affected by or interact with the drone services provided by our users.

Across this Notice, we will be using some important definitions as follows :

• Data: Collect all information you submit via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws.
• Data Protection Laws: Any applicable personal data protection laws and regulations in the Sultanate of Oman, including Royal Decree No. 6/2022 (Oman Personal Data Protection Law – PDPL), its executive regulations, and any amendments thereto.
• Personal Data: Refers to any information that relates to an identifiable person, either directly or indirectly. In this context, it refers to the personal data you provide to us through this website.
• "User" or "you": any party that accesses the Website and is not either
  • employed by Serb and acting in the course of their employment or
  • engaged as a consultant or otherwise providing services to Serb and accessing the Website in connection with the provision of such services.
• "We," "us," and "our": refer to [Serb], the owner and operator of this website, along with its affiliates and subsidiaries. These terms are used to denote the organization responsible for collecting, using, and protecting your personal information as described in this privacy policy.
• Website: the website that you are currently using https://flyserb.com/en, and any sub-domains of this site unless expressly excluded by their own terms and conditions.

User Responsibilities:

• Users are responsible for maintaining their device settings to ensure notifications remain enabled and accessible.

When you create an account, you provide us with personal and non-personal information. You can also choose to add a phone number or payment information to your account. Even if you aren't signed in to your account, you might choose to provide us with information, like an email address to communicate with or receive updates about our services.

2.1 Personal Information (PI)

• Full Name
• Date of Birth
• Gender
• Address
• Civil ID
• Mobile Number
• Email address

2.2 Operational and Technical Data

• Drone type and manufacturer
• Flight request location, zone, altitude, and timing
• Permit and approval references
• Operational logs and compliance records

This data is considered safety-critical and regulatory data and may be retained for longer periods as required by aviation, security, or public safety regulations.

When do we collect information?

We collect information from you when you register on our site, place an order, subscribe to a newsletter, fill out a form, or enter information on our site. All data is collected solely through user input.

All users must be at least 18 years of age to create an account or access Serb's Services. The Services are not intended for use by minors, and Serb does not knowingly collect personal data from individuals under the age of 18.

Personal data is collected and processed primarily for regulatory compliance, aviation safety, licensing, operational approvals, and lawful drone operations under the Civil Aviation Authority (CAA). Serb may use automated systems, including artificial intelligence or machine-learning tools, solely for operational purposes, such as data validation, compliance monitoring, safety alerts, system optimization, and service improvement.

How do we use your information?

We may use such information in the following ways :

• To personalize the user's experience and to allow us to deliver the type of content and product offerings in which you are most interested.
• To improve our website in order to better serve you.
• To allow us to better service you in responding to your customer service requests.
• To administer a contest, promotion, survey or other site feature.
• To quickly process your transactions.
• To send periodic emails regarding your order or other products and services.

• All data is stored in a protected database on a cloud server based in Oman or the country of operation.
• Serb uses SHA256 hashing for some sensitive data and employs HTTPS protocols to protect user data during transmission.
• Retention Policies:
  • Serb retains user access logs for 365 days for auditing purposes.
  • System logs are maintained to store performance data.
• Compliance & Legal Requests:
  • Serb may use Personal Information and Log Data if required to comply with legal requests from public safety and government authorities.
• Data Sharing Policy:
  • Serb does not share users' physical addresses or phone numbers with third parties.
• Data Retention:
  • Personal Data is retained for as long as necessary for its original purpose.
  • If the purpose changes, the retention period may be adjusted accordingly.
• Additional Uses of Personal Data:
  • Preserving database integrity.
  • Carrying out ongoing services.
  • Research, analytics, and statistical purposes.
  • Ensuring compliance with applicable laws and regulations.
• Account Deletion Policy:
  • Users may request account deletion by contacting Serb.
  • Verification Process:
    • To prevent unauthorized requests, Serb will verify the identity of the requester before proceeding.
  • Impact of Account Deletion:
    • Users will lose access to all associated services and features.
    • All linked data will be either removed or archived.
  • Exceptions:
    • Data may not be deleted if needed to:
      • Resolve legal disputes.
      • Comply with legal obligations.
      • Address unresolved claims, disputes, or outstanding credits.

In cases of regulatory violations, Serb may cooperate with law enforcement and regulatory authorities by providing necessary information, as required by law.

6.1 Third-Party Integrations

• Mobile Verification: Only the mobile number is shared for verification.
• Payment Gateway: Email and Name are shared for payment processing.

6.2 Sharing with Government Authorities & Law Enforcement

• Log Data is aggregated with other users' data to provide general drone operation insights to :
  • Drone manufacturers.
  • Third-party partners.
  • Law enforcement agencies.
  • Civil Aviation Authority (CAA).
• Serb may access and share Personal Information with law enforcement or other government agencies if :
  • Required by applicable law.
  • Necessary to comply with court orders or government requests.
  • Required to prevent fraud or illegal activity.
  • Necessary to protect the rights and safety of users.

6.3 Data Protection for Commercial Use

Serb will not share or sell your personal data for any commercial purposes under any circumstances.

a. Commitment to Privacy: Serb is committed to protecting your personal data and ensuring it is used solely for the purpose of providing, maintaining, and improving the UTM services.

b. No Commercial Sharing or Selling: Your personal data, including but not limited to your name, contact information, flight details, and location data, will never be sold, rented, or shared with third parties for advertising, marketing, or any other commercial purposes.

c. Restricted Use of Data: Data collected through the UTM system is only used for operational purposes, including regulatory compliance, safety alerts, and improving user experience.

d. Transparency and Control: Users will always have control over how their data is used and shared. You may contact Serb to request details about the data collected or to make changes to your privacy settings.

e. Legal Exceptions: In compliance with applicable laws and regulations, Serb may share your data with authorized government entities or law enforcement agencies, but only when explicitly required to ensure public safety or regulatory compliance.

f. Data Security Measures: We implement robust security measures to protect your data from unauthorized access, misuse, or breach.

• Emergency notifications will include critical updates regarding situational awareness and regulatory compliance.
• User data may be processed to ensure timely delivery of these alerts for operational safety.
• Signed-in users can review and update information via the "My Account" section.
• Users can access and modify data through the account settings screen within the Services.
• Personal information can be reviewed and updated by logging into the Serb App and visiting the account profile page.

• We use cookies and similar technologies to enhance your experience, analyze website traffic, and improve our services. Cookies are small text files stored on your device that help us recognize your preferences and customize your experience.
• Types of Cookies We Use
  • Essential Cookies: Necessary for the functioning of our website or application.
  • Performance Cookies: Used to analyze how users interact with our website to improve functionality.
  • Functional Cookies: Help remember your preferences and settings.
  • Advertising Cookies: Used for targeted advertisements based on your browsing habits.
• Your Choices: You can manage or disable cookies through your browser settings. However, please note that disabling certain cookies may affect the website's functionality.

• Security is integrated into Serb's services to protect user information.
• Serb complies with industry-standard security certifications and ensures data protection during transmission and at rest.
• Access Restrictions:
  • User profiles are password-protected.
  • Only authorized Serb personnel can access account information.
• Fraud Protection:
  • Serb will never contact users proactively to request personal account details, including passwords.
• User Responsibility:
  • Users should:
    • Choose strong passwords.
    • Limit device and browser access.
    • Sign out after using their accounts.
• Limitations:
  • No internet transmission or electronic storage method is 100% secure.
  • Serb employs commercially acceptable security techniques, but absolute security cannot be guaranteed.

• Serb reserves the right to modify this Privacy Policy at any time.
• Notification of Changes:
  • Major changes will be communicated through the Services, email, or push notifications.
• User Consent:
  • Continued use of Services after notification implies consent to modifications.
• Review Encouragement:
  • Users are encouraged to review this Privacy Policy regularly for updates.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the Serb Support Team through the official channels listed on the Serb website or application.