This Privacy Policy describes how AeroSparks collects, uses, stores, and protects your personal data in compliance with the Personal Data Protection Act, 2022 of the United Republic of Tanzania.
Last updated: 16 July 2026
AeroSparks ("we", "us", "our") is an air charter and flight operations company registered in the United Republic of Tanzania. We are committed to protecting your personal data and respecting your privacy rights in accordance with the Personal Data Protection Act, 2022 (the "PDPA") and its implementing regulations.
This policy applies to all users of our platform, including customers, passengers, crew members, staff, and external service providers. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Full name, date of birth, passport number, nationality, gender, and photograph (when provided for flight manifests).
Email address, phone number, company name, and billing address.
Payment method (card, wire transfer, cash deposit), transaction records, and payment receipts. We do not store full credit card numbers — payment processing is handled securely by our payment provider (Stripe).
Booking references, origin/destination airports, departure dates/times, passenger counts, baggage information, and special service requests.
Flight plans, loadsheets, crew assignments, maintenance reports, pilot expense reports, and cost entries associated with your bookings.
IP address, browser type, device information, and usage logs collected automatically when you use our platform.
To process bookings, issue tickets, generate manifests, and operate flights on your behalf.
To comply with Tanzanian Civil Aviation Authority requirements, immigration, customs, and air navigation regulations. Passenger manifest data is shared with relevant authorities as required by law.
To issue invoices, process payments, manage refunds, and maintain financial records.
To send booking confirmations, flight status updates, support ticket responses, and operational notifications.
To maintain safety records, conduct flight operations safely, and respond to incidents as required by aviation regulations.
You have consented to the processing of your personal data for the purposes described in this policy.
Processing is necessary to fulfil our contractual obligations to provide flight booking and charter services to you.
Processing is required to comply with Tanzanian aviation, immigration, and tax laws, including the Civil Aviation Act and the Personal Data Protection Act, 2022.
Processing is necessary for our legitimate business interests in operating safe and efficient flight services.
Your personal data is stored on cloud infrastructure located in the United States, hosted by our platform provider (Base44). All data is encrypted at rest and in transit using industry-standard encryption protocols.
Our platform provider maintains SOC 2 Type II and ISO 27001 certifications, with continuous monitoring, penetration testing, and a bug bounty program.
As your data is stored outside Tanzania, we rely on Standard Contractual Clauses and the platform provider's GDPR-compliant Data Processing Agreement to ensure appropriate safeguards are in place for the transfer of personal data outside Tanzania, in accordance with Section 55 of the Personal Data Protection Act, 2022.
We engage trusted sub-processors (cloud hosting, payment processing, email delivery) who are bound by strict data processing agreements. A current list of sub-processors is available upon request.
You may request a copy of all personal data we hold about you. This can be downloaded directly from your account settings ("Download My Data").
You may request correction of inaccurate or incomplete personal data. You can update your profile information directly in your account settings.
You may request deletion of your personal data, subject to legal retention obligations (e.g., aviation and tax records that must be retained by law). Account deletion is available in your account settings under "Danger Zone."
You may receive your personal data in a structured, machine-readable format and transmit it to another controller.
You may object to the processing of your personal data for direct marketing or other purposes based on legitimate interests.
Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
You have the right to lodge a complaint with the Personal Data Protection Commission of Tanzania if you believe your data protection rights have been violated.
Retained for the duration of the service and for a minimum of 5 years thereafter, as required by Tanzanian Civil Aviation Authority regulations.
Retained for a minimum of 7 years as required by Tanzanian tax law.
Retained as required by aviation security and immigration regulations.
If you opt out of marketing communications, marketing preferences are removed within 30 days.
When you delete your account, personal data is permanently removed from our active systems. Data retained for legal compliance will be securely stored and deleted when the retention period expires.
Passenger manifest data, flight plans, and operational information may be shared with the Tanzanian Civil Aviation Authority, immigration, customs, and air navigation service providers as required by law.
Payment data is shared with our payment provider (Stripe) for the sole purpose of processing transactions.
Limited data may be shared with ground handlers, fuel suppliers, and airport operators as necessary to fulfil your booking.
We may disclose personal data if required to do so by law, court order, or government authority, or to protect our rights and safety.
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or wish to lodge a complaint about how we handle your personal data, please contact our Data Protection Officer:
Data Protection Officer
Sparkling Wings Limited
Email: dpo@aerosparksglobal.com
Address: Dar es Salaam, United Republic of Tanzania
You also have the right to lodge a complaint with the Personal Data Protection Commission of Tanzania if you believe your rights under the PDPA have been violated. The Commission can be contacted through their official channels.
© 2026 AeroSparks. This Privacy Policy is reviewed and updated regularly.