Privacy Policy

Jetcore Support, Inc. ("Jetcore," "we," "us," "our") is an AS9120 Rev. B–certified aerospace parts distributor headquartered in Doral, Florida. This Privacy Policy describes how we collect, use, share, retain, and protect personal information when you visit www.jetcoresupport.com (the "Site") or transact with us as a business customer, supplier, or vendor partner.

This Policy is published in support of our Terms & Conditions of Sale, our Website Terms of Use, our Code of Ethics & Business Conduct, and our Supplier Code Compliance Statement, and is intended to be consistent with all of them. Where any inconsistency exists, the document with the more protective treatment of the data subject controls.

1. Scope

1.1. This Policy applies to (a) visitors to the Site, (b) business contacts at our customer, supplier, vendor, regulatory, and prospective-customer organizations, and (c) any individual whose personal information we receive in the course of operating our aviation-parts distribution business.

1.2. Jetcore sells primarily on a business-to-business basis. We do not knowingly market to or transact with individual consumers acting outside a trade or business context.

2. Definitions

2.1. "Personal Information" or "Personal Data" means information that identifies, relates to, describes, or could reasonably be linked to an identified or identifiable natural person.

2.2. "Sensitive Personal Information" has the meaning given under the California Privacy Rights Act (CPRA) and Article 9 of the EU/UK GDPR. Jetcore does not knowingly collect Sensitive Personal Information as defined by either framework.

2.3. "Processing" means any operation performed on Personal Information, including collection, recording, storage, use, disclosure, transfer, and deletion.

2.4. "Sell" and "Share" have the meanings given under the California Privacy Rights Act (CPRA). Where this Policy uses those terms in the CPRA sense, they appear in quotation marks.

3. Categories of Personal Information We Collect

We collect only what is reasonably necessary to operate our business and meet our legal obligations. Categories include:

3.1. Business contact information — name, job title, work email, work phone, employer name and address.

3.2. Trade-account and order information — purchase orders, quotations, invoices, billing and shipping addresses, payment terms, credit references, tax/VAT identifiers.

3.3. Aviation-operational information submitted in connection with a sale, exchange, or core return — aircraft serial number (MSN), tail/registration number, removal reason and date, life-limited-parts data, hours/cycles, operator identity, and other trace documentation required under our Terms & Conditions or by regulators. This information is treated as customer-confidential per our Terms & Conditions of Sale (§ 14) and our Code of Ethics & Business Conduct (§ 6).

3.4. Payment information — for credit-card transactions, card data is collected and processed by a PCI-DSS-compliant third-party payment processor; Jetcore does not store full card numbers or CVV codes on its systems. For wire/ACH transactions, we retain bank and routing identifiers only as needed to complete and document the transaction.

3.5. Export-compliance screening data — end-use, end-user, and destination information required under ITAR (22 CFR §§ 120–130), EAR (15 CFR §§ 730–774), OFAC sanctions screening, and applicable foreign export laws.

3.6. Site and device data — IP address, browser type and version, device identifiers, operating system, referring URL, pages viewed, timestamps, and approximate geographic location (city/region level).

3.7. Communications — emails, support tickets, RFQs, call notes, and other records of correspondence with Jetcore.

3.8. User-generated content — any content you submit through the Site (RFQ attachments, vendor-account uploads, profile information, messages). See our Website Terms of Use for the license you grant when you submit content.

3.9. Cookies, pixels, and analytics identifiers — see Section 9.

We do not intentionally collect: government identification numbers of individuals (other than business-tax IDs), health data, biometric data, precise geolocation, racial or ethnic data, religious or political opinions, sexual orientation, or other special-category data under GDPR Article 9.

4. How We Use Personal Information (Purposes & Legal Bases)

5. How We Share Personal Information

5.1. Service providers acting on our behalf — cloud hosting and storage providers; email and customer-relationship-management platforms; payment processors; shipping and freight carriers (FedEx, UPS, DHL, freight forwarders); accounting and tax software; denied-party-screening services. These providers are bound by written agreements limiting use of the data to providing services to Jetcore.

5.2. OEMs, suppliers, and repair stations — where necessary to source, repair, exchange, or document a Part, we share order-related information (which may include operator and aircraft identity if required) with the relevant supplier or approved repair facility. Pricing and customer identity information is shared only to the extent strictly necessary, consistent with our customer-confidentiality commitments.

5.3. Analytics providers — we use Google Analytics and Google Tag Manager on the Site. Analytics providers receive IP address, device identifiers, and Site-interaction events. Depending on the configuration of these tools and the legal interpretation of "sale" and "share" under the California Privacy Rights Act (CPRA), this transfer may constitute a "sale" or "share" of Personal Information. California residents may opt out of this transfer using the methods in Section 8.7. We honor the Global Privacy Control (GPC) signal as an opt-out under CPRA.

5.4. Regulators and law enforcement — where required by law, subpoena, court order, or governmental request, or to comply with US export-control, sanctions, anti-counterfeit, or customs requirements.

5.5. Professional advisors — auditors, legal counsel, insurers, and certification bodies (e.g., our AS9120 registrar), under duties of confidentiality.

5.6. Successors in interest — in the event of a merger, acquisition, financing, or sale of business assets, Personal Information may be transferred to the successor entity, subject to the protections of this Policy.

5.7. We do not sell Personal Information for monetary consideration. We do not engage in targeted advertising, profiling that produces legal or similarly significant effects on individuals, or sharing of Personal Information with social-media or advertising platforms for cross-context behavioral advertising. Our use of Google Analytics may, however, constitute "sharing" under the CPRA's broad definition; see Section 5.3.

6. International Data Transfers

6.1. Jetcore is headquartered in the United States. Personal Information that we collect is processed and stored primarily in the United States.

6.2. Where Personal Information is transferred from the European Economic Area, United Kingdom, or Switzerland to the United States, we rely on appropriate safeguards including, as applicable, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU–US Data Privacy Framework (and the UK and Swiss extensions thereof) where Jetcore has self-certified.

6.3. By submitting Personal Information to Jetcore, you understand that it may be processed in the United States.

7. Retention

7.1. AS9120 quality and traceability records — minimum seven (7) years from end of transaction.

7.2. Export-control records — minimum five (5) years under EAR; minimum five (5) years under ITAR; longer where customer contract requires.

7.3. Tax and accounting records — as required by US federal and Florida state law (typically 7 years).

7.4. Trade-account records (active customers) — duration of relationship plus seven (7) years.

7.5. Marketing-contact records — until you unsubscribe or withdraw consent, plus a suppression record so we do not re-contact you.

7.6. Website analytics — Google Analytics default retention (currently 26 months), or shorter where required.

7.7. General correspondence not falling into the above — up to three (3) years, then deleted or anonymized.

8. Your Rights

8.1. Right to access — request a copy of the Personal Information we hold about you.

8.2. Right to correct — request correction of inaccurate or incomplete Personal Information.

8.3. Right to delete — request deletion of your Personal Information, subject to legal retention requirements.

8.4. Right to portability — receive a copy of Personal Information you provided to us in a structured, commonly used format.

8.5. Right to restrict or object to processing — including objection to processing based on legitimate interests, and the right to opt out of marketing communications at any time.

8.6. Right to withdraw consent — where processing is based on consent, you may withdraw consent at any time.

8.7. California-specific rights (CCPA/CPRA) — California residents have the rights to know, delete, correct, opt out of "sale" or "sharing," limit the use of sensitive personal information (we do not knowingly collect it), and non-discrimination for exercising privacy rights. To opt out of analytics-related "sharing," you may: (a) enable the Global Privacy Control (GPC) browser signal — we honor it as a valid opt-out; (b) decline non-essential cookies through the cookie banner on the Site; (c) install the Google Analytics Opt-Out Browser Add-on; or (d) email quality@jetcoresupport.com with the subject line "CCPA Opt-Out."

8.8. Right to lodge a complaint — EU/UK/Swiss residents may complain to their local supervisory authority. California residents may contact the California Privacy Protection Agency.

8.9. How to exercise your rights — email quality@jetcoresupport.com with the subject "Privacy Request." We will respond within 30 days (or 45 days for CCPA, with one permitted 45-day extension). We may need to verify your identity before fulfilling the request.

8.10. Authorized agents — California residents may designate an authorized agent with written authorization to submit a request on their behalf.

9. Cookies, Pixels & Analytics

9.1. We use cookies and similar technologies for: (a) essential functions (session management, security), (b) functional preferences (language, viewport), and (c) analytics (Google Analytics, Google Tag Manager).

9.2. We do not currently use advertising cookies, third-party retargeting pixels, or social-media tracking pixels for behavioral advertising.

9.3. You may decline non-essential cookies through the cookie banner on the Site or through your browser settings. Declining analytics cookies may reduce functionality but will not block transactions.

9.4. We honor the Global Privacy Control (GPC) signal as an opt-out of "sale"/"sharing" under CCPA/CPRA.

10. Security

10.1. Jetcore maintains administrative, technical, and physical safeguards reasonably designed to protect Personal Information, including:

TLS encryption for data in transit;
Access controls and least-privilege user provisioning;
Multi-factor authentication on administrative accounts;
Periodic security review and patch management;
Employee training on confidentiality, anti-counterfeit, and cyber hygiene;
AS9120-aligned controls over records, including segregation of customer-confidential data.

10.2. No method of transmission over the Internet or storage system can be guaranteed 100% secure. Jetcore makes no warranty that these safeguards will prevent every possible incident.

11. Data-Breach Notification

11.1. If we determine that a security incident has resulted in the unauthorized acquisition or disclosure of unencrypted Personal Information that creates a risk of harm, we will notify affected individuals and applicable regulators in accordance with applicable law:

EU/UK GDPR — without undue delay and, where feasible, within 72 hours of becoming aware (to regulators); affected individuals where high risk.
Florida Information Protection Act (FIPA, F.S. § 501.171) — within 30 days unless a law-enforcement delay applies.
Other US state breach-notification laws — within the applicable statutory deadlines.

12. Children

12.1. The Site is directed exclusively to business users. We do not knowingly collect Personal Information from children under thirteen (13). If we learn we have inadvertently collected such information, we will delete it promptly. Parents or guardians may contact quality@jetcoresupport.com.

13. Third-Party Links

13.1. The Site may contain links to third-party websites. Jetcore is not responsible for the privacy practices or content of those sites.

14. Marketing Communications — CAN-SPAM & State Law Compliance

14.1. Where permitted by law, we may send operational and limited marketing emails to business contacts at customer and prospective-customer organizations. Our marketing emails comply with the U.S. CAN-SPAM Act (15 U.S.C. §§ 7701 et seq.), including:

accurate "From," "To," and "Reply-To" headers;
non-deceptive subject lines;
identification of the message as an advertisement where applicable;
inclusion of our valid physical postal address (1325 NW 93rd Court, Suite B-106, Doral, FL 33172);
a functioning unsubscribe mechanism in every commercial email.

14.2. Opt-out window — unsubscribe requests will be honored within ten (10) business days of receipt, as required by CAN-SPAM. You may also opt out at any time by emailing quality@jetcoresupport.com with the subject line "Unsubscribe."

14.3. Operational communications excluded — order confirmations, shipment updates, recall notices, AS9120 notices, export-compliance notices, and other transactional or relationship messages are not subject to unsubscribe and will continue while a trade relationship exists, consistent with CAN-SPAM's "transactional or relationship message" exception.

14.4. State law consent (where applicable) — for jurisdictions that require express opt-in consent for commercial email (e.g., Canada CASL, EU/UK GDPR ePrivacy), we obtain consent before sending marketing messages and provide an unsubscribe mechanism in every message.

14.5. Profiling — we do not engage in profiling or automated decision-making that produces legal or similarly significant effects on individuals.

15. Subscription & Auto-Renewal Disclosures

15.1. Jetcore does not currently offer auto-renewing paid subscriptions, memberships, or negative-option billing arrangements on the Site. If Jetcore offers such a service in the future, the following will apply at the point of enrollment, as required by the FTC Restore Online Shoppers' Confidence Act (ROSCA, 15 U.S.C. §§ 8401 et seq.) and applicable state auto-renewal laws (including California Bus. & Prof. Code § 17602):

clear and conspicuous disclosure of all material terms before billing;
express affirmative consent to the recurring charge;
a simple online cancellation mechanism;
advance notice of any material change to the recurring charge.

15.2. Email newsletter or stock-alert subscriptions are not paid subscriptions and are governed by Section 14.

16. Confidentiality of Customer-Submitted Operational Data

16.1. Aviation-operational information submitted in connection with a sale, exchange, RFQ, or core return — including aircraft identity, removal reasons, operator data, and trace documentation — is treated as customer-confidential information of the submitting organization, consistent with § 14 of our Terms & Conditions and § 6 of our Code of Ethics & Business Conduct. Such information is used only for the underlying transaction, regulatory compliance, and where strictly necessary, to communicate with the relevant supplier, repair station, or regulator.

17. Changes to this Policy

17.1. We may update this Policy from time to time. The "Effective" date and revision number at the top indicate when it was last updated. Material changes will be posted prominently on the Site at least thirty (30) days before they take effect.

17.2. Prior versions are available on request from quality@jetcoresupport.com.

18. Contact Us

Jetcore Support, Inc.

Attn: Quality / Privacy Requests

1325 NW 93rd Court, Suite B-106

Doral, FL 33172, USA

Email: quality@jetcoresupport.com

Phone: +1 (786) 516-4121

For sales and general inquiries: sales@jetcoresupport.com

For invoicing and payment: accounting@jetcoresupport.com