Effective date: 21 September 2024

1. Who we are
   AerialDrone.lk is operated by Rentitem.lk (Pvt) Ltd. Registered address: No. 10/6, Ruhunukala Mawatha, Colombo 08, Sri Lanka. Service coverage: Sri Lanka (islandwide) and Maldives. Contacts: info@aerialdrone.lk, Hotline/WhatsApp +94 77 771 2030, Sales +94 77 718 6500, Technical Support +94 78 418 6500.
2. Scope of this policy
   This policy applies to our website (AerialDrone.lk), social media pages, messaging channels including WhatsApp, and all drone services we provide. It covers personal data collected from clients, talent or participants at shoots, website visitors, vendors, and trainees.
3. What personal data we collect
   We may collect the following categories of personal data: identity and contact data such as name, NIC or passport details when needed for permits, email, phone, address, and company details; booking and project data such as service requests, locations, schedules, shot lists, consent forms, permits, and insurance details; payment data such as invoice details and payment confirmations (payments are processed via third‑party gateways as described in section 9); communications data such as emails, calls, WhatsApp messages, and support tickets; website and technical data such as cookies, IP address, device and browser data, pages viewed, and referral sources; media we capture including aerial photos and videos that may include people, vehicles, properties, geolocation, and timestamps; training and certification data such as attendance, exam results, and license or permit numbers where applicable.
4. How we collect data
   We collect data directly from you via website forms, calls, WhatsApp, and in person on set; automatically via our site and analytics cookies; and from third parties such as event planners, production houses, hotels or venues, payment providers, and public sources including location maps and aviation notices.
5. Why we use your data
   We use personal data to deliver services including planning shoots, obtaining authorizations, executing flights, editing and delivering media, and providing training; for operations including quotes, contracts, billing, and customer support; for safety and compliance such as flight logging, airspace and permit checks, insurance requirements, and incident reporting; for marketing with consent, including portfolio, testimonials, case studies, and updates; and to maintain website performance and security, including analytics, fraud prevention, and bug fixing.
6. Our legal bases
   We rely on one or more of the following legal bases: contract to provide the service you requested; consent for activities such as marketing communications, featuring identifiable persons or properties in our portfolio, and non‑essential cookies; legal obligation relating to aviation, safety, tax, and accounting requirements; and legitimate interests in running and improving our business, ensuring on‑set safety, and protecting our rights, balanced against your privacy.
7. Cookies and analytics
   We use essential cookies for site functionality. With your consent, we may use analytics and advertising cookies such as Google Analytics or Tag Manager and Meta Pixel to understand site usage and measure campaigns. You can control cookies through our banner and your browser settings; blocking some cookies may affect site performance.
8. Media, consent and on‑location notices
   Aerial filming may capture individuals, vehicles, licence plates, and private property. We seek written consent from clients and, where required, from participants and venues. For public spaces and events, we use reasonable on‑location notices. Clients should inform us in advance about no‑film areas, sensitive sites, the presence of minors, or special restrictions. We will take steps to avoid or blur such content where feasible.
9. Payments
   Card and digital payments are processed by third‑party payment gateways or banks. We do not store full card numbers on our servers. These providers process data under their own privacy terms.
10. Sharing your data
    We may share data with operational partners including freelance pilots, visual observers, editors, production houses, and equipment or service vendors only as necessary for your project; with compliance and safety bodies including the Civil Aviation Authority of Sri Lanka, venue or security authorities, insurers, and law enforcement when legally required; and with technology providers including hosting, email, CRM, analytics, payment processors, and cloud storage. We require recipients to follow confidentiality, security, and data‑processing commitments.
11. International transfers
    We operate projects in the Maldives and may use global cloud services. When data is transferred outside Sri Lanka, we implement appropriate safeguards such as contractual protections and strict access controls.
12. Retention
    Project files, including aerial media, are typically retained for 12 to 36 months after final delivery unless you ask us to keep or remove them sooner or the law requires longer. Business, tax, and safety records are kept as required by law. Marketing data is kept until you opt out.
13. Your rights
    Subject to applicable law, you may request access to your data and a copy of it; request correction of inaccurate or incomplete data; request deletion where data is no longer needed or where processing is based on consent and you withdraw it; object to or restrict certain processing, including direct marketing; and withdraw consent at any time when processing is based on consent. To exercise your rights, email info@aerialdrone.lk or WhatsApp +94 77 771 2030. We will verify your identity and respond within a reasonable time.
14. Security
    We use role‑based access, encryption in transit, secure backups, and vetted vendors. No method is completely secure, and we will notify you of material breaches as required by law.
15. Children and sensitive locations
    Our services are intended for adults. If minors are present at shoots, consent must be provided by a parent or guardian or the responsible institution. We comply with restricted or controlled areas and venue rules. Clients must inform us of any privacy‑sensitive premises such as residences, schools, hospitals, or religious sites so we can plan accordingly.
16. Third‑party links
    Our website may link to external sites. Their privacy practices are their own and you should review their policies.
17. Marketing choices
    You can opt out of marketing emails, SMS, or WhatsApp at any time via the unsubscribe option or by contacting us. If you previously consented to feature your project in our portfolio and wish to withdraw, contact us and we will remove future usage and, where feasible, archive existing posts.
18. Changes to this policy
    We may update this policy from time to time. Material changes will be highlighted on this page with a new effective date.
19. How to contact us
    Email: info@aerialdrone.lk. Hotline or WhatsApp: +94 77 771 2030. Postal: Rentitem.lk (Pvt) Ltd, No. 10/6, Ruhunukala Mawatha, Colombo 08, Sri Lanka. Opening hours: Monday to Saturday 08:00 to 20:00; Sunday 09:00 to 18:00.

Note: This policy is written for clarity and is not legal advice. If your project involves special privacy requirements such as NDAs or sensitive sites including government facilities, please inform us so we can provide a custom addendum.