Privacy Policy

Elite Drone Shows Pty Ltd (ABN 80 670 919 921) operates this website, the EDS Flight Deck mobile application (iOS and Android), and the related operations portals at elitedroneshows.com.au. In this policy "EDS", "we", "us" and "our" refer to Elite Drone Shows Pty Ltd.

We are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We collect the following categories of personal information:

• Contact information — name, email address, mobile phone number, and (for client accounts) company name.
• Account credentials — a password hash (bcrypt; we never store plaintext passwords) and a unique user ID.
• Operational data — flight briefings, show rosters, signed waivers, and visitor inductions you create or acknowledge inside the app.
• Device telemetry — anonymous browser/app version, crash reports, and feature interaction events (collected via PostHog) used to improve the product.
• Site coordinates — latitude/longitude of show sites you create. We do not track real-time location of any user device.

• To deliver flight briefings, show rosters, and approval workflows to authorised crew and clients.
• To send transactional SMS and email notifications via TextMagic and Resend (e.g. roster confirmations, weather alerts).
• To verify visitor inductions and on-site safety acknowledgements.
• To diagnose faults and improve the app — anonymously where possible.
• To meet our legal and regulatory obligations to CASA, ASIC, and state work-health-and-safety regulators.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Your data is only shared with service providers strictly needed to operate the service:

• MongoDB Atlas (Sydney, AU region) — encrypted database hosting.
• TextMagic (UK) — outbound SMS notifications.
• Resend (US) — transactional email delivery.
• Microsoft Graph / SharePoint — secure document storage for signed waivers and briefings.
• Monday.com — CRM and contact management.
• GroupMe — crew messaging (only for staff who explicitly opt in).
• PostHog (US, EU mirror) — anonymous product analytics.

We require all providers to maintain appropriate security controls and to process data only on our instructions.

Operational records (flight briefings, signed inductions) are retained for a minimum of 7 years to satisfy CASA record-keeping requirements. Client account data is retained for the life of your account; you may request deletion at any time per Section 7.

We use industry-standard security controls including TLS in transit, encryption at rest, bcrypt password hashing, JWT session tokens with rotation, and least-privilege access for our staff. No system is perfectly secure; if we ever discover a breach affecting your data we will notify you and the OAIC in accordance with the Notifiable Data Breaches scheme.

You can at any time:

• Request a copy of the personal information we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your account and associated data (subject to the retention obligations in Section 5).
• Lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

To exercise any of these rights, email privacy@elitedroneshows.com.au.

EDS Flight Deck is a B2B operations app and is not directed at children under 16. We do not knowingly collect data from children.

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent change. We will notify account holders of material changes by email.

Privacy Officer
Elite Drone Shows Pty Ltd
privacy@elitedroneshows.com.au
elitedroneshows.com.au