Last updated: 6 August 2026
1. Who this policy covers
This policy applies to visitors, applicants, and members using the SriLankan Virtual Airlines website and Crew Center. The virtual airline acts as the controller of data collected for its own community activities.
2. Data we may process
Depending on the services used, records may include name, email address, country or hub, pilot identifier, rank, account status, online-network identifier, IP and security logs, virtual flight data, simulator telemetry, flight reports, messages sent to staff, and technical information required to maintain the service.
3. Why data is used
Data is processed to create and secure accounts, assess applications, operate pilot services, record virtual flights, calculate statistics and ranks, prevent abuse, provide support, organise community activities, maintain technical reliability, and comply with applicable legal obligations.
4. Public roster and activity
Limited member information may appear publicly, such as pilot name, identifier, hub, rank, accumulated hours, accepted flight activity, or ranking position. Sensitive contact details and login credentials are not intended for public display. Members should contact support if published information is inaccurate.
5. Lawful bases
Where applicable, processing is based on performance of the member relationship, legitimate interests in operating and securing the community, consent for optional features, and compliance with legal obligations.
6. Sharing and third parties
Information is accessible only to authorised staff and service providers where required for hosting, security, email, mapping, or related technical functions. Online-network identifiers may be verified with the relevant network when needed for membership or partnership administration. We do not sell personal data to advertisers.
7. Retention
Data is retained for as long as reasonably necessary for membership, operational history, security, dispute resolution, and legal requirements. Some flight records may remain in aggregated statistics after account closure where they no longer directly identify the member.
8. Security
Reasonable technical and organisational safeguards are used, including access controls, password hashing provided by the account system, restricted database access, and security logging. No internet service can guarantee absolute security.
9. Your choices and rights
Subject to applicable law, users may request access, correction, deletion, restriction, objection, or portability of their personal data. Requests may require identity verification and may be limited where records must be retained for security or legal reasons.
10. International access
Members may access the service from different countries. Hosting providers and online aviation services may process data in other jurisdictions under their own safeguards and policies.
11. Minors
Applicants who are below the age at which they may independently consent to online services in their jurisdiction should obtain permission from a parent or legal guardian.
12. Contact and complaints
Privacy requests should be submitted through virtual-airline support. Users may also have the right to complain to the competent data-protection authority in their country.