1. Data controller
Controller: Nitro Aerospace S.L. (Helipow brand).
Privacy contact: booking@helipow.com
Website: https://helipow.com
2. Information we collect
We collect information needed to run a heliski marketplace and respond to your requests:
- Identity and contact data: name, email, phone, preferred language.
- Booking data: destination, dates, party size, ability level, product preferences (drop, package, gift).
- Payment data: processed by Stripe; we do not store full card numbers on our servers.
- Shipping data (physical gift cards): postal address in the EU/EEA when you request physical delivery.
- Technical data: IP address, device type, browser, pages visited, and cookies or similar identifiers.
- Communications: messages sent via form, email or WhatsApp.
3. How we use information
We process your data to:
- Manage bookings, payments, confirmations, changes and refunds.
- Coordinate the experience with local operators, guides and flight providers.
- Send operational updates about your booking (weather, meeting point, documents).
- Provide customer support and answer questions about charges.
- Improve the site, security and prevent fraud or abuse.
- Meet legal, accounting and anti-money-laundering duties where applicable.
- Send marketing only with your consent or where the law allows; you may unsubscribe at any time.
4. Legal bases (GDPR)
Depending on the case, we rely on: performance of a contract (booking and payment); consent (marketing, non-essential cookies); legitimate interests (security, service improvement, fraud prevention); and legal obligations.
5. Who we share information with
We do not sell your personal data. We may share it only with:
- Local operators and providers needed to deliver the heliski service (guide, flight, hotel, transfers).
- Payment processors (Stripe) and financial partners required to authorise and settle charges.
- Technology providers that host the site, send email/WhatsApp, analytics or support, under processor agreements.
- Competent authorities when required by law.
6. International transfers
Some providers or destinations may be outside the European Economic Area. Where required, we use appropriate safeguards (such as standard contractual clauses or other recognised measures).
7. Retention
We keep data as long as needed for the booking, after-sales support, legal duties and dispute resolution. Marketing data is kept until you withdraw consent or opt out.
8. Security
We apply reasonable technical and organisational measures to protect information: encryption in transit (HTTPS), access controls, environment segregation, and payment processing via PCI DSS–certified providers (Stripe). No system is 100% secure; if you suspect an incident, email booking@helipow.com immediately.
9. Cookies and similar technologies
We use essential cookies for site operation and, where applicable, measurement or preference cookies. You can manage non-essential cookies in your browser settings.
10. Your rights
If you are in the EEA/UK or another jurisdiction with equivalent rights, you may request access, rectification, erasure, restriction, portability and objection, and withdraw consent. Email booking@helipow.com. You may also lodge a complaint with your data protection authority (in Spain, the AEPD).
11. Children
Helipow is not directed at children under 16 without parental supervision. We do not knowingly collect children’s data without a guardian’s consent where the law requires it.
12. Changes
We may update this policy. The current version will be posted at this URL with an updated date. Continued use of the site after a material change means you accept the revised version, unless the law requires additional consent.