LEGAL

Privacy Policy

Last updated: March 23, 2026

Pending legal review

I. Who We Are

Aero J.L., S.A. de C.V. ("Aero JL") is the data controller responsible for the processing of your personal data. Our offices are located at Calle 5, Hangar 45, San Pedro Totoltepec, Toluca, Estado de Mexico, 50226, Mexico.

II. Personal Data We Collect

We collect the following categories of personal data:

  • Full name
  • Email address
  • Phone number (with country code)
  • Company or organization name
  • Travel details: origin, destination, dates, number of passengers, aircraft preference
  • IP address and browser information
  • Cookie and tracking data (with your consent)
  • Marketing attribution data (UTM parameters, referrer, landing page)

III. How We Use Your Data

Necessary purposes (no additional consent required):

  1. Processing and responding to your charter flight quote requests
  2. Coordinating flight operations and logistics
  3. Communicating about your bookings and account
  4. Complying with Mexican aviation regulations and legal obligations

Purposes requiring your consent:

  1. Sending promotional emails about empty leg deals, new routes, and services
  2. Displaying personalized advertisements on third-party platforms
  3. Sending our monthly newsletter
  4. Analyzing site usage patterns to improve our services

IV. Sensitive Data

For air ambulance services, we may collect health-related information necessary to configure the appropriate medical equipment and crew. This data is classified as sensitive under the LFPDPPP and is processed exclusively for the purpose of providing the medical transport service you request. We obtain explicit consent before collecting any health data.

V. Data Transfers

Your personal data may be transferred to the following third-party service providers, all of which maintain appropriate data protection standards:

  • Supabase, Inc. (United States) — database hosting and authentication
  • Resend, Inc. (United States) — transactional and marketing email delivery
  • Twilio, Inc. (United States) — WhatsApp Business messaging
  • Google LLC (United States) — website analytics (with your consent)
  • Meta Platforms, Inc. (United States) — advertising measurement (with your consent)
  • Vercel, Inc. (United States) — website hosting

By submitting your data through our website or WhatsApp, you consent to these transfers. You may withdraw this consent at any time using the mechanism described below.

VI. Your Rights (ARCO)

Under the LFPDPPP, you have the right to:

  1. Access: Request a copy of the personal data we hold about you
  2. Rectification: Correct inaccurate or incomplete data
  3. Cancellation: Request deletion of your data when it is no longer necessary
  4. Opposition: Object to the processing of your data for specific purposes

To exercise any of these rights, send an email to datos@aerojl.com with the following information: your full name, a description of the data concerned, and which right you wish to exercise. We will respond within 20 business days and implement any changes within 15 business days after that.

VII. Withdrawing Consent

You may withdraw your consent for non-essential data processing at any time. To unsubscribe from marketing emails, click the unsubscribe link in any email. To revoke other consent, email datos@aerojl.com. To manage cookie preferences, use the cookie settings panel at the bottom of any page.

VIII. Cookies and Tracking

We use cookies and similar technologies in three categories:

  • Essential cookies: Required for site functionality (language preference, authentication). Always active.
  • Analytics cookies: Help us understand how visitors use our site (Google Analytics). Loaded only with your consent.
  • Marketing cookies: Used to measure advertising effectiveness (Meta Pixel). Loaded only with your consent.

You can manage your cookie preferences at any time using the "Cookie settings" option available at the bottom of every page.

IX. Data Retention

We retain your personal data only as long as necessary for the purposes described above. Quote request data is retained for 5 years for business and regulatory compliance. Marketing data is retained until you withdraw consent. Analytics data is retained in anonymized form.

X. Changes to This Notice

We may update this privacy notice to reflect changes in our practices or legal requirements. Any significant changes will be posted on this page with an updated date. We encourage you to review this notice periodically.