Private Jet Royalty

Your ascent into luxury begins now

Privacy Notice  ·  GDPR (EU) 2016/679

Privacy Policy

This notice sets out how Private Jet Royalty™ collects, uses, retains and protects the personal data of users who visit our website or request our brokerage services in private aviation.

Last updated: May 2026

Data Controller

The controller of the personal data collected through this website and its related communication channels is:

Private Jet Royalty™

Via Vincenzo Bellini, 25

Anguillara Sabazia (RM) 00061 — Italy

P.IVA (VAT No.): 14760421009

Email: info@privatejetroyalty.com

Tel: +39 327 004 0370

For any matter relating to the protection of personal data you may write to the email address above, indicating "Richiesta Privacy GDPR" in the subject line.

Personal Data Collected

Depending on how you interact with our services, we may collect the following categories of personal data:

Data provided directly by the user

  • First name and surname
  • Email address
  • Telephone number
  • Flight details: date, route, departure and destination airports, number of passengers
  • Onboard preferences, particular requirements or concierge requests
  • The content of communications exchanged through contact forms, email or messaging platforms (e.g. WhatsApp)

Data collected automatically during browsing

  • IP address and approximate geographic location data
  • Device type, operating system and browser used
  • Pages visited, session duration and traffic source
  • Cookies and similar technological identifiers (see the Cookies section)

Newsletter subscription: for subscribers to our private list we associate with the profile only the country code (ISO 3166-1 alpha-2 standard, for example IT, GB, AE), derived automatically from the connection metadata at the time of subscription. That information is used solely to segment commercial communications and to offer content relevant to the geographic area concerned. Applying the principle of data minimisation (art. 5.1.c GDPR), no IP address is retained for this purpose, no more precise location data is collected (city or coordinates), and the data is never used for any purpose other than marketing. The country code is recorded once, at first contact, and deleted together with the profile if consent is withdrawn.

Note: We do not collect special categories of personal data within the meaning of art. 9 GDPR (health, biometric or health-related data, ethnic origin, political opinions or religious beliefs) save in exceptional, documented circumstances and with the explicit written consent of the data subject.

Purposes and Legal Basis of Processing

Personal data is processed for the following purposes and on the basis of the following conditions of lawfulness set out in the GDPR:

Responding to quotation requests and arranging the requested flight

Contract

art. 6.1.b GDPR

Providing concierge services and personalised assistance

Contract

art. 6.1.b GDPR

Operational communications relating to the flight and the service purchased

Contract

art. 6.1.b GDPR

Analysing web traffic and improving the website (anonymous/aggregated form)

Legitimate Interest / Consent

art. 6.1.f – 6.1.a GDPR

Sending commercial communications and personalised offers

Consent

art. 6.1.a GDPR

Complying with legal, tax and accounting obligations

Legal Obligation

art. 6.1.c GDPR

Preventing fraud and safeguarding the security of the service

Legitimate Interest

art. 6.1.f GDPR

Charter Operators and Third Parties

The nature of the brokerage activity

Private Jet Royalty acts solely as an intermediary/broker in private aviation. It does not own, lease or directly operate any aircraft. Flight services are provided by third-party charter operators, duly certified and holding the licences and operating authorisations required by the applicable aviation regulations (EASA and the competent national authorities).

Sharing with charter operators

In order to arrange the requested flight it is necessary to transmit certain personal information — such as first name, surname, flight details and, where relevant, particular onboard requirements — to the selected charter operator. That transmission takes place only to the extent strictly necessary to perform the service and in compliance with the obligations laid down by the GDPR (art. 28 or, depending on the contractual relationship, art. 26). Partner operators are required to process the data they receive solely for the agreed purpose and in accordance with data protection law.

Other service providers

We also rely on third parties for certain operational and technological functions, including:

  • Web analytics tools (e.g. Google Analytics with IP anonymisation)
  • Business messaging platforms (e.g. WhatsApp Business API)
  • CRM systems for managing client requests
  • GDPR-compliant hosting and cloud infrastructure services

All third-party providers are selected on the basis of their GDPR compliance and are contractually bound to guarantee adequate data protection measures.

Data Retention

Personal data is retained for the period strictly necessary to achieve the purposes for which it was collected, in accordance with the storage limitation principle (art. 5.1.e GDPR):

Quotation request data (pre-contractual)

24 months from the request

Contractual data and flight documentation

10 years (civil and tax obligation, art. 2220 of the Italian Civil Code)

Technical logs and browsing data

12 months

Analytics data (in aggregated/anonymous form)

26 months

Marketing data (subject to explicit consent)

Until consent is withdrawn

Once the applicable period expires, personal data is securely deleted or permanently anonymised, unless further retention is required by specific legal obligations.

Cookies and Tracking Technologies

The website uses cookies and similar tracking technologies. According to their function, we distinguish the following categories:

Technical Cookies

Always active

Necessary for the website to function correctly and to remember the user's preferences (e.g. cookie consent). They do not require the data subject's consent under art. 122 of Legislative Decree 196/2003.

Analytics Cookies

Subject to consent

Used to analyse user behaviour on the website in anonymous or aggregated form, with the aim of improving its content and usability. Active only with the user's explicit consent.

Personalisation Cookies

Subject to consent

Allow the website's content to be adapted to the user's behaviour and interests, offering a more relevant browsing experience. Active only with the user's explicit consent.

You may manage or withdraw your cookie preferences at any time through the consent management banner on the website, or by changing your browser settings. For full details, please see our Cookie Policy.

Rights of the Data Subject

As a data subject under the GDPR, you have the right to exercise the following rights in relation to Private Jet Royalty™ in its capacity as controller:

  • Right of access (art. 15): To obtain confirmation as to whether personal data concerning you is being processed and, if so, to obtain a copy of it.

  • Right to rectification (art. 16): To obtain the correction of inaccurate data or the completion of incomplete data.

  • Right to erasure (art. 17): To request the erasure of your personal data (the "right to be forgotten") where it is no longer necessary in relation to the purposes for which it was collected, or where you withdraw the consent on which the processing is based.

  • Right to restriction (art. 18): To obtain the restriction of processing in certain circumstances, for example while the accuracy of the data is being verified.

  • Right to data portability (art. 20): To receive the personal data concerning you in a structured, commonly used and machine-readable format, and to transmit it to another controller where technically feasible.

  • Right to object (art. 21): To object at any time to the processing of your personal data based on legitimate interest or carried out for direct marketing purposes.

  • Right to withdraw consent: To withdraw at any time the consent previously given, without affecting the lawfulness of processing based on consent before its withdrawal.

  • Right to lodge a complaint (art. 77): To lodge a complaint with the competent supervisory authority. In Italy: Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Roma — www.garanteprivacy.it

How to exercise your rights

Send your request to info@privatejetroyalty.com indicating "Esercizio Diritti GDPR" in the subject line. We will respond within 30 days of receiving the request, as provided by art. 12 GDPR. For particularly complex requests, that period may be extended by a further 60 days, subject to a reasoned notification.

Data Security

We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or unauthorised disclosure, in accordance with art. 32 GDPR. The measures adopted include:

  • Encrypted HTTPS/TLS connections for all data transmitted to and from the website
  • Internal access control based on the principle of least privilege
  • Periodic system monitoring and security updates
  • Internal procedures for handling and notifying any data breach
  • Staff training on data protection and confidentiality

Despite the effort invested, no information system can guarantee absolute security. We invite you to report to us promptly any unauthorised use of your data or any suspected security breach, by writing to info@privatejetroyalty.com.

Limitation of Liability

In addition to the limitations of liability provided by applicable law, the following is stated in relation to the nature of Private Jet Royalty's activity:

PRIVATE JET ROYALTY IS NOT AN AIRLINE AND DOES NOT OWN OR OPERATE ANY AIRCRAFT. ALL SERVICES PROVIDED BY THIRD PARTIES, EVEN WHEN ARRANGED OR SCHEDULED THROUGH PRIVATE JET ROYALTY, ARE THE SOLE RESPONSIBILITY OF THOSE THIRD-PARTY PROVIDERS.

Private Jet Royalty acts solely as an intermediary in sourcing and selecting charter operators on behalf of the client. The specific contractual conditions relating to the flight, including those concerning cancellations, delays, operational safety and carrier liability, are governed by the contract of carriage entered into directly between the client and the certified operator.

Changes to the Privacy Policy

This notice may be updated from time to time to reflect changes in applicable law, in the technologies used or in the operating practices of Private Jet Royalty. The date of the most recent update is shown at the foot of this page.

In the event of substantial changes affecting the rights of data subjects, we will give notice by means of a visible notice on the website or, where appropriate and technically feasible, by direct communication to registered users.

We invite you to review this page periodically so that you are always informed about how we process your personal data.

Last updated: May 2026