Privacy notice · v1.0 · 2026-11-05
Who we are
Reval Air Ltd (“we”, “us”) trades as Reval Air, a drone and aerial imaging business serving Scotland. We are the controller of the personal data described in this notice.
- Company: Reval Air Ltd, registered in Scotland
- Company number: SC908140
- Registered office: 21 Grayhaugh Wynd, Dundee, Scotland, DD2 5GP
- Contact: use the contact form or write to us at the registered office.
We are a small business and have not appointed a Data Protection Officer. Questions about this notice go to the director, Daniil Sergejev.
What this notice covers
- People who send us an enquiry through this website.
- Our clients and the people we deal with at client organisations.
- People at businesses we contact about our services.
- People and property that may appear in images we capture while flying.
- Visitors to this website.
Enquiries sent through this website
What we collect: your name, organisation (optional), email address, phone number (optional), the site location or postcode, the service you are interested in, your message, and the fact and time that you ticked the box confirming you’ve read this notice.
Why: to reply to your enquiry and, if you ask us to, to prepare a quote.
Lawful basis: if you’re asking about work for yourself (for example your own home or holiday let), we use your details to take the steps you’ve asked for before a possible contract, such as replying and preparing a quote (UK GDPR Article 6(1)(b)), and our legitimate interests in keeping a record of enquiries (Article 6(1)(f)). If you’re writing on behalf of an organisation, we rely on our legitimate interests in answering business enquiries and keeping a record of them (Article 6(1)(f)). We keep enquiries for the period shown under “How long we keep it”. We don’t use enquiry details for marketing unless you’ve separately agreed to it.
How it travels: the form is processed by Cloudflare, which hosts this website. It runs a spam check (Cloudflare Turnstile), emails the enquiry to us through our email delivery provider, and keeps a copy in a temporary inbox on Cloudflare until we copy it into our own records. We don’t keep your IP address.
Clients and people at client organisations
We keep names, work contact details, site details, job records, reports, quotes and invoices. The lawful basis is the performance of our contract with you or your organisation (Article 6(1)(b)), our legal obligations, for example keeping accounting records (Article 6(1)(c)), and our legitimate interests in running and recording our business (Article 6(1)(f)).
People we contact about our services
We may contact people at businesses (for example construction firms, factors and property managers) whose work details are published, such as on a company website or at Companies House. We use their name, role and work contact details on the basis of our legitimate interests in offering our services to businesses (Article 6(1)(f)). Every message says who we are and how to opt out. If you tell us to stop, we stop, and we keep your email address, domain, organisation or postal address on a “do not contact” list so it doesn’t happen again. We don’t send marketing emails to individuals or sole traders without their consent or an existing customer relationship (soft opt-in).
Images captured while flying
Our images are of construction sites, roofs, buildings and land. We plan flights to avoid capturing people. If a person or a vehicle number plate is identifiable in an image, we blur or remove it before the image is delivered or published. Before close-range flights near homes we write to neighbours to let them know. The lawful basis is our legitimate interests, and the interests of our client, in recording the condition or progress of a property (Article 6(1)(f)).
This website
This website sets no cookies. We use Cloudflare Web Analytics, which counts page visits without cookies and without identifying individual visitors. Cloudflare, as our host, processes technical data such as IP addresses to deliver the site and protect it from attack.
Who we share data with
We don’t sell personal data. We use these service providers (processors), who act on our instructions:
| Provider | What for |
|---|---|
| Cloudflare, Inc. | Website hosting, the enquiry form, spam checks (Turnstile), the temporary enquiry inbox, cookie-free analytics |
| Resend (Plus Five Five, Inc.) | Delivering enquiry emails from the website to us |
| Google Workspace (Google Cloud EMEA Limited) | Our email, calendar and document storage: corresponding with you and scheduling visits |
Some of these providers may process data outside the UK. Where they do, the transfer is covered by their data processing terms, which include the safeguards UK law requires: the UK Addendum to the EU standard contractual clauses and, for US providers, the UK Extension to the EU-US Data Privacy Framework.
How long we keep it
- Enquiries and business contacts: deleted 24 months (730 days) after our last contact with you, unless you become a client.
- The temporary enquiry inbox on Cloudflare: removed when we copy the enquiry into our records, and automatically after 30 days at most.
- Residential inspection images: deleted 60 days after we deliver the report.
- Construction-site images: kept for the length of the contract plus 12 months.
- Client records (contact details, job records, reports and quotes): kept for the length of our contract with you or your organisation plus 6 years; invoices as below.
- Property and holiday-let photography: delivered images kept for 2 years so we can re-supply them; unused footage deleted within 90 days of delivery.
- Enquiry emails in our mailbox and our email delivery provider’s logs: the same as enquiries and business contacts above; the delivery provider keeps its own logs under its terms and deletes our data within 90 days of our account closing.
- Website technical data held by Cloudflare: for the periods set out in Cloudflare’s own terms.
- Neighbour notices: our copy of a letter we deliver to neighbours before a close-range flight is addressed to “The occupier” and holds only the address; it is deleted 90 days after the letter is written.
- Invoices and accounting records: kept for as long as the law requires (normally six years from the end of the financial year they relate to).
- “Do not contact” list: kept for as long as we market our services, holding only the email address, domain, organisation or postal address, so we can respect your objection.
Your rights
You have the right to ask for a copy of your personal data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. You can object to direct marketing at any time, and we will always stop. Where we rely on your consent, you can withdraw it at any time. We’ll reply within one month. To use any of these rights, contact us using the details above.
Complaints
If you’re unhappy with how we’ve used your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Changes to this notice
We’ll update this notice when how we use personal data changes. The version and date are shown at the top of this page.