Privacy Policy
How Aerospace Design Ltd collects, uses and protects personal data.
Aerospace Design Ltd (“ADL”, “we”, “us”) is committed to protecting the personal data of the people we deal with. This notice explains what personal data we collect, why we collect it, how long we keep it and the rights you have over it. It applies to visitors to www.adluk.co, people who contact us, and the customers, partners, suppliers and candidates we work with.
ADL is registered with the Information Commissioner’s Office (ICO) as a data controller. We are a small company and are not required to appoint a Data Protection Officer; our data protection lead is Mital Lakhani, Director of Engineering Operations.
Who to contact
For any question about this notice or your personal data, or to exercise any of the rights below, email mital@adluk.co or write to ADL, 77 Garwood Crescent, Grange Farm, Milton Keynes MK8 0PR, United Kingdom.
The information we collect
When you visit our website
Our web server records standard log information: the pages requested, the date and time, the browser type and the IP address of the device making the request. We use this to keep the site secure and to understand which pages are read. See our Cookie Policy for details of the cookies the site sets.
When you contact us
If you email us, use the contact form or call, we hold the information you give us, typically your name, organisation, contact details and the content of your enquiry, so that we can reply and keep a record of the correspondence.
When we work together
For customers, partners and suppliers we hold business contact details, contract and project correspondence, and the information needed to carry out and invoice the work. Where a contract requires security clearance or vetting, we process the details necessary to confirm that clearance in accordance with the customer’s requirements and UK Government policy.
When you apply to work with us
If you apply for a role or an associate position, we hold your CV, application correspondence and interview notes, and, where a role requires it, the information needed to carry out right-to-work, reference and security checks. We tell you at the time which checks apply.
We do not collect personal data from children, and we do not buy or sell personal data.
Why we use it and our lawful basis
- To respond to enquiries and provide our services — performance of a contract, or steps taken at your request before entering into one.
- To run our business (accounting, record keeping, security, quality management) — our legitimate interests as a company, balanced against your rights.
- To meet legal and regulatory obligations, including tax, export control, security vetting and defence-sector requirements — legal obligation.
- To keep our website secure and improve it — legitimate interests. Any non-essential analytics cookies are set only with your consent.
We do not use your personal data for automated decision-making or profiling, and we do not send marketing emails without your consent.
Who we share it with
We share personal data only where it is needed to deliver the work or run the business: with the customer or prime contractor on a programme where you are a named contact; with our professional advisers (accountants, legal); and with the IT service providers who host our email, files and website. All of these act under contract and may only use the data for the purpose we set. We will disclose personal data where the law requires it.
Our systems are hosted in the United Kingdom. Where a provider processes data outside the UK, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or an adequacy decision.
How long we keep it
We keep personal data only as long as we need it for the purpose it was collected, and then delete or anonymise it. As a guide: website server logs, up to 12 months; enquiry correspondence, up to 2 years after our last contact; customer, supplier and project records, for the life of the contract plus 7 years to meet accounting, tax and defence-contract record requirements; unsuccessful job applications, 6 months after the decision unless you ask us to keep your details.
How we protect it
ADL holds Cyber Essentials Plus certification and operates an ISO 9001 quality management system. We use access controls, encryption, multi-factor authentication and regular backups, and we restrict access to personal data to the people who need it for their work.
Your rights
Under UK data protection law you have the right to ask for a copy of the personal data we hold about you (a subject access request); to have inaccurate data corrected; to have data deleted where there is no good reason for us to keep it; to object to or restrict our processing in certain circumstances; to receive the data you gave us in a portable form; and to withdraw consent at any time where consent is the basis for processing. To exercise any of these rights, contact us using the details above. We will respond within one month.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Social media
If you follow or interact with ADL’s LinkedIn page we can see that you have done so, and we use that information only to understand how people engage with what we publish. We do not use it to target advertising. You can control how organisations can reach you through your own LinkedIn settings.
Links to other websites
This notice covers www.adluk.co only. Links to other sites, including LinkedIn, are governed by those sites’ own privacy notices.
Changes to this notice
We review this notice at least annually and whenever our processing changes. This version replaces the notice dated 3 January 2026.