AviLoft
1. Controller and contact
AviLoft, Belgium, acts as controller for account, subscription, support and Marketplace administration data. Customer loft owners may also act as controllers for personal data they enter in their private workspace.
Privacy requests can be sent to the support address shown below.
2. Data we process
Account and application data: name, email address, language, country, loft or brand name, account status and consent records.
Service data: pigeons, pedigrees, health and breeding records, race results, uploaded media, generated documents, subscription and support information.
Billing data: selected plan, billing period, Stripe customer and subscription references, payment status, billing address, tax information and invoice records. AviLoft does not receive or store full card details.
Marketplace data: listings, seller contact details, offers, buyer details, reservations, sale status, declared final sale price and commission records.
Technical data: security logs, IP address, device and browser information, session identifiers and language or cookie preferences.
3. Purposes and legal bases
We process account and subscription data to perform the service contract; registration review, security and platform integrity for legitimate interests; invoicing and records to meet legal obligations; and optional marketing only with consent.
Marketplace data is processed to publish listings, transmit offers, document acceptance, support sales, calculate agreed commissions, prevent abuse and resolve support questions.
4. Recipients and processors
Data is accessible only to authorised AviLoft administrators, the relevant customer workspace and, for public listings, visitors to the Marketplace. Buyer details are shared with the relevant seller when needed for an offer or reservation.
Hosting, email, storage, monitoring and payment providers may process data under contract. The production list of processors and any international-transfer safeguards must be maintained by AviLoft.
Stripe processes payment, billing and fraud-prevention data as AviLoft's payment provider. Stripe's own privacy information applies where Stripe acts independently as a controller.
5. Retention and security
We retain data only as long as needed for the service, security, disputes and legal obligations. Account data normally remains for the account lifetime; rejected or incomplete applications should be removed after the defined review period; transaction and invoice data may be retained for statutory accounting periods.
AviLoft uses access controls, tenant separation, encryption in transit, backups and operational safeguards. No online service can guarantee absolute security.
6. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent at any time without affecting earlier lawful processing.
You may also complain to the Belgian Data Protection Authority or another competent supervisory authority. We may need to verify your identity before fulfilling a request.
7. Cookies and local storage
AviLoft currently uses only strictly necessary technologies: a session cookie for sign-in, a CSRF security cookie, a language preference cookie and local storage to remember that this notice was acknowledged. These support a service you requested and are not used for advertising or cross-site tracking.
Strictly necessary cookies do not require consent, but we explain them transparently. If AviLoft later adds analytics, advertising or other optional cookies, they will remain disabled until you make a free, specific and informed choice. Rejecting optional cookies will not block access, and consent will be as easy to withdraw as to give.
8. Changes
We may update this notice when the service, suppliers or legal requirements change. The current version and effective date will remain available on this page.