Last updated: 27 April 2026 · Data controller: DRS SPV 1 LIMITED, England & Wales
This Privacy Policy explains how DRS SPV 1 LIMITED ("ZuluHi", "we", "us", "our") collects, uses, stores, and protects your personal data when you use our Part-66 logbook compliance analysis service. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
DRS SPV 1 LIMITED is the data controller for personal data collected through our website and platform. We are registered in England and Wales (Company No. 15409253).
If you have any questions about how we handle your data, please contact our data protection point of contact at team@zuluhi.com.
We collect the following categories of data:
| Category | Data collected | How collected |
|---|---|---|
| Account data | Email address, password (hashed), account creation date | When you register |
| Transaction data | Plan purchased, amount, date, Stripe payment reference | When you make a purchase |
| Configuration data | Regulatory framework selected (EASA/UK CAA), licence category, training route, licence type | When you configure your analysis |
| Logbook documents | PDF files you upload (temporarily — see Section 4) | When you upload your logbook |
| Report data | Your generated compliance report and analysis results | Generated automatically post-upload |
| Communications | Messages sent via support email or Q&A (Pro/Expert plans) | When you contact us |
| Technical data | IP address, browser type, device type, pages visited, session duration | Automatically via cookies and server logs |
We do not collect payment card details — these are handled directly and securely by Stripe, our payment processor. We receive only a transaction reference.
We use the data we collect for the following purposes:
We will never use your data for unsolicited marketing without your explicit consent.
We treat your logbook documents as particularly sensitive. Here is exactly what happens to your files from the moment you upload them to the moment they are destroyed.
You are responsible for ensuring you have the legal right to upload any documents you submit. By uploading a logbook, you confirm that it is your own or that you have the explicit authorisation of the licence holder.
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
| Processing activity | Legal basis |
|---|---|
| Account creation and management | Contract — necessary to provide the Service |
| Payment processing and issuing reports | Contract — necessary to fulfil your purchase |
| Logbook processing and report generation | Contract — the core service you have paid for |
| Fraud prevention and security | Legitimate interests — to protect our platform and users |
| Improving our analysis engine (anonymised data only) | Legitimate interests — to improve accuracy of the Service |
| Compliance with legal obligations | Legal obligation |
| Marketing communications (if opted in) | Consent |
We do not sell your personal data. We share it only with the following categories of trusted third parties, and only to the extent necessary to provide the Service:
All third-party processors are bound by data processing agreements in compliance with UK GDPR. We require that they process your data only for the specified purposes and maintain appropriate security measures.
We may disclose your data to law enforcement or regulatory authorities where required to do so by law.
We aim to keep your data within the UK and European Economic Area (EEA). Where we use service providers based outside the UK/EEA, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or standard contractual clauses.
If you have questions about specific transfers, please contact team@zuluhi.com.
| Data type | Retention period |
|---|---|
| Logbook documents (uploaded files) | Deleted immediately after report generation |
| Compliance reports | Retained in your account indefinitely — accessible until you close your account |
| Account data (email, preferences) | Retained while your account is active + 30 days after closure |
| Transaction records | 7 years (required by UK financial regulations) |
| Support communications | 3 years from last contact |
| Technical/server logs | 90 days |
When retention periods expire, data is securely and permanently deleted.
As a UK resident, you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you
Ask us to correct inaccurate or incomplete data
Request deletion of your data where there is no lawful reason to retain it
Ask us to limit how we use your data in certain circumstances
Receive your data in a structured, machine-readable format
Object to processing based on legitimate interests or for direct marketing
Where processing is based on consent, you can withdraw it at any time
Request human review of decisions made by automated means that significantly affect you
To exercise any of these rights, contact us at team@zuluhi.com. We will respond within one calendar month. We may need to verify your identity before processing your request.
We use cookies and similar technologies to make our platform work and to understand how it is used. The cookies we use fall into the following categories:
We do not use advertising or tracking cookies. You can manage cookie preferences in your browser settings. Disabling non-essential cookies will not affect your ability to use ZuluHi.
ZuluHi is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us at team@zuluhi.com and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page.
We encourage you to review this Policy periodically. Continued use of ZuluHi after any changes constitutes acceptance of the updated Policy.
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
DRS SPV 1 LIMITED
Registered in England & Wales · Company No. 15409253
Data enquiries: team@zuluhi.com
Website: zuluhi.com
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: