Legacy Privacy Statement


To avoid confusion and doubt and where various references are made to CAE, CAE OAA, Oxford Aviation Academy, etc., this shall be made to respect the organisational establishment and corporate governing structure and shall at all times refer to the operations of Oxford Aviation Academy (Oxford) Limited, t/a CAE Oxford Aviation Academy.

We respect the privacy of each user accessing the Web Shop ("you," "your") and are committed to protecting your privacy. We have structured the Website so that, in general, you can visit and browse without identifying yourself or revealing any personal information. We ensure that any personal information provided by you to us will be processed in accordance with the six principles of the General Data Protection Regulation (GDPR) and the Privacy Policy set out below.

Personal data

Personal information means data or information about an identifiable person, recorded in any form, which data or information includes but is not limited to the name, e-mail address, mailing address, contact number. Visitors of this website are not requested to reveal any personal information. However, on a voluntary basis, you may provide and disclose personal information to us in using certain features of our site.

Processing of Personal Data

CAE uses the personal data collected from its customers to conclude an agreement to provide merchandise as required from our Web Shop.

CAE therefore collects, uses, administers, records, transfers and stores (“processes”) personal data to be able to perform the agreed provision of merchandise in an efficient and cost-effective manner. CAE also processes personal data:

  • to carry out, manage and/or maintain our relationship with customers (or, and to manage communications and other dealings. In this respect personal data is shared with affiliated companies;
  • to invoice and to process payments, to respond to enquiries or complaints.

CAE also processes data to comply with applicable laws, and, generally, for any other purposes that are reasonably necessary or related to the relationship between CAE and our customers All of the above collectively referred to as “Purposes”.

CAE will only process your personal data in accordance with the Regulations and further guidelines or orders issued pursuant thereto, taking into account the latest amendments. CAE reserves the right to update and amend this Privacy Statement from time to time as may be necessary or desirable in connection with our legitimate business interests, for instance the introduction of new products/services or changes in the Regulations.

Transfer of personal data

Should CAE plan to merge or be acquired by another business entity, CAE may share personal data with the other company and their respective advisors. The acquirer or the new combined entity will be required to follow this privacy policy with respect to personal data of our customers. Except as otherwise mentioned herein, CAE shall not disclose to or share personal data with any third party without the prior consent of the customer.

Security of Personal Data

CAE regards your personal data as an asset that must be protected. We are committed to ensuring that your personal data is stored securely, only accessible by authorised persons and only transferred in accordance with this Privacy Statement and after the implementation of appropriate technical and organisational measures in compliance with the Regulations. Nonetheless there are third parties that may unlawfully try to access systems or intercept transmissions or communications containing personal data. CAE continuously uses its reasonable efforts in line with industry standards to protect personal data of customers but cannot absolutely guarantee that such unlawful actions will not occur. CAE has in place a data breach response plan.

In order to ensure that personal data is not kept longer than necessary, CAE periodical reviews the need for certain personal data processed.

Third Party Websites

Parts of our Website contain links to third party websites not owned by us including those belonging to third parties ("Third Party Websites") for your convenience and information. If you use these links, you will leave the Website. When you access a Third Party Website, please understand that we do not control the content of that Third Party Website and are not responsible for their privacy practices.

We suggest that you carefully review the privacy policies of each Third Party Website that you visit. This Privacy Policy does not cover the information practices of those Third Party Websites linked to our Website. Third Party Websites may send their own cookies to users, collect personal data, or solicit personal information. Third Party Websites may operate very different privacy practices to this Website. Links to Third Party Websites on the Website do not imply that we endorse those Third Party Sites or agree with any of the views or information set out on such Third Party Websites.

What are your rights over your Personal Data?

You, as the individual (data subject) whose personal data is processed by CAE for the aforementioned purposes, have the following rights:

  • the right to access your personal data
  • the right to obtain a copy of your personal data
  • the right to request an update or correction from CAE.

Insofar as the processing of personal data by CAE is based on your consent, you reserve the right to withdraw this consent. However, withdrawal will not prevent CAE from processing personal data if it is not based on your consent, but is required for one of the aforementioned purposes.

You also have the right to object to the processing of your personal data by CAE, to restrict the processing or to request its erasure insofar as there is an existing basis in accordance with the Regulations. CAE will respond to any such requests in accordance with the Regulations.

You have the right to lodge a complaint with the competent personal data protection authority if you believe that CAE's personal data processing is not in compliance with regulations, or if CAE does not respond to your requests in timely and/or appropriate manner, or if they are not answered at all.

CAE will only store your personal data for the duration necessary and in a manner permitted by the Regulations or other applicable laws.

Please contact us to update any of your personal data or to request access to your personal data by addressing the Data Protection Officer.

Changes to this Privacy Statement

We will post any changes to this Privacy Statement on our Website from time to time. Please be sure to regularly check this Privacy Policy before using the Website. Regardless of any changes we make to this Privacy Policy, we will always use your personal data in accordance with the Privacy Policy in place at the time you provide your information and the Data Protection Act 1998, unless you give your express consent for us to do otherwise.

Contact Details and Further Information

If you have any questions in connection with this statement or the processing of personal data by CAE in general, or if you have feedback, questions or requests for information, you can contact CAE Oxford Aviation Academy’s Data Protection Officer:

Ken Chapman
Data Protection Officer
Oxford Aviation Academy (Oxford Limited)
London Oxford Airport, Langford Lane, Kidlington, Oxfordshire, OX5 1QX, United Kingdom.
Email: gdpr-oxforddpo@cae.com
Telephone: +44 (0)1865 840342

If you send us personal data via e-mail, we will use it to respond to your information request. If you e-mail us, or give us your e-mail address, we will keep a record of it. We will not give your e-mail address to any unauthorised third parties. Note that communications via e-mail or otherwise are governed by and subject to our Website Terms of Use set out on the Website.

When you e-mail us please remember that the content of your e-mail is not secure and could be intercepted. Accordingly, please keep the amount of confidential or personal information to a minimum and we will do likewise when we reply.


The Regulations may require CAE to obtain your consent e.g. if certain elements of the personal data processed by CAE are considered to be special categories of personal data. In such cases, CAE will obtain a separate declaration of consent or alternatively organize appropriate company agreements with the Works Council.

If you submit your personal data to CAE (irrespective of the manner or form), you agree to the terms of this data protection statement and to its processing in accordance with the Regulations.

Further information on your rights and CAE’s obligations can be found on the Information Commissioner’s Office website (www.ico.org.uk).