Privacy Policy

Drone Pilot Network (Pty) Ltd

Effective Date: 10 February 2025
Last Updated: 27 May 2026

1. INTRODUCTION

Drone Pilot Network (Pty) Ltd (“DPN”, “we”, “us”, or “our”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, process, and protect your information when you use our website and services.
By accessing or using our platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our privacy practices, you must not use our services.

Company Details:

Legal Name: Drone Pilot Network (Pty) Ltd
Registration: Drone Pilot Network (Pty) Ltd – 2025/562646/07
Address: Unit 8b, Pearl of Hout Bay, 8 Victoria Avenue, Hout Bay, Cape Town 7806, South Africa
Website: www.dronepilotnet.com
Contact: contact@dronepilotnet.com
Information Officer / Data Protection Officer: legal@dronepilotnet.com

2. INFORMATION WE COLLECT

2.1 Personal Data

We collect personal data that can be used to identify you directly or indirectly. You voluntarily provide this information when you:

Account Creation:

Full name, email address, and password
Account credentials and login preferences
Profile pictures
Date of birth and age verification information

Drone Operator or Company Listings:

Full name and company name (where applicable)
Contact email and phone number
Physical address (city, state/province, country)
Professional biography and qualifications
Service categories and specialisations
Professional images and videos for portfolio display
Pricing information and service rates
Business registration numbers and tax information
Professional references and testimonials

Job Posting Activities:

Name and contact details (email, phone number)
Project location and geographical requirements
Detailed job descriptions and specifications
File uploads related to project requirements
Budget information and timeline preferences
Project photographs and site documentation
Special requirements and technical specifications

Credit Purchase Transactions:

Payment information processed through third-party payment gateways
Important: We do not store full credit card details on our servers
Billing address and transaction history
Credit usage patterns and account balance information
Invoice details and payment receipts
Refund requests and dispute information

Communications with DPN:

Content of support communications and emails
Survey responses and feedback submissions
Associated contact details and communication preferences
Social media interactions and public posts mentioning our services

DPN Badge Verification Submissions:

Remote Pilot Licences and aviation authority certifications
Drone registration certificates and aircraft documentation
Operational authorisations and permits
Insurance certificates and coverage documentation
Professional training certificates and continuing education records
Background check results (where applicable)

2.2 Non-Personal Data (Usage Data & Tracking Technologies)

We automatically collect information that does not directly identify you but relates to your platform usage:

Log Data:

Internet Protocol (IP) address and geographic location
Browser type, version, and configuration settings
Pages visited within our service and navigation patterns
Time and date of visits and session duration
Time spent on individual pages and user engagement metrics
Unique device identifiers and diagnostic data
Search queries and filter preferences
Click-through rates and conversion metrics

Device Information:

Hardware model and device specifications
Operating system version and mobile network information
Screen resolution and display preferences
Device performance and compatibility data
Mobile carrier information and connection type

Cookies and Tracking Technologies:

Cookies for session management and preference storage
Web beacons and pixels for engagement tracking
Similar tracking technologies for analytics and personalisation
User preference settings and customisation choices
Local storage and session storage data
HTML5 storage

Referral Data:

Information about the URL that referred you to our website
Source of traffic and marketing campaign attribution
Search terms and keywords used to find our platform
Social media and advertising platform referral information
Email campaign tracking and engagement metrics

2.3 Information from Third Parties

We may receive information about you from third parties, including:

Payment processors providing transaction verification
Aviation authorities for licence verification
Background check providers (where applicable)
Marketing partners and advertising platforms
Data aggregators and public databases
Other users who refer you to our platform

2.4 Inferred Information

We may infer additional information about you based on your activity:

Preferences and interests based on usage patterns
Skill level and experience based on profile activity
Location preferences based on search and job posting patterns
Service quality indicators based on client feedback

2.5 Voluntary and Mandatory Information

Some information is mandatory for account creation and service delivery. Failure to provide mandatory information means we cannot create your account or deliver our services. Other information is voluntary – you may decline to provide it without losing access to core platform features, though it may limit your profile completeness and discoverability.

Mandatory Information:

Full name and email address – required for account registration
Password – required for account security
Phone number – required for OTP verification before posting Drone Job listings or applying for the DPN Badge
Agreement to the Terms of Service and Privacy Policy – required for platform access

Voluntary Information:

Professional biography, portfolio images, and service descriptions
Pricing information and service rates
Profile photograph

DPN Badge Verification – Additional Mandatory Information:

Remote Pilot Licence and aviation authority certifications – required for badge eligibility

3. HOW WE COLLECT INFORMATION

We collect information through:

Direct Collection:

Registration and profile creation processes
Two-step verification forms with OTP confirmation
Document uploads for DPN Badge verification
Job posting and quote request forms
Account management and preference updates
File uploads for project specifications
Customer service interactions and support requests
Voluntary surveys and feedback forms

Automatic Collection:

Cookies and session tracking technologies
Google Maps API integration for location services
Website analytics and user behaviour tracking
GeoDirectory location management system
Referral URL tracking and traffic source analysis
Server logs and error tracking systems
Cloudflare security and performance monitoring
Performance monitoring and optimisation tools

Third-Party Sources:

Payment processors (PayFast and PayPal) for transaction data
SMS verification services (Twilio) for authentication
Email service providers for communication tracking
Social media platforms for profile enrichment
Public databases and government registries

4. HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

4.1 Service Provision

Creating and managing user accounts and profiles
Facilitating connections between drone professionals and clients
Processing credit purchases and managing account balances
Managing job postings, applications, and quote requests
Providing customer support and technical assistance
Displaying professional listings and company profiles
Processing payments and managing invoicing
Facilitating communication between users

4.2 Verification and Security

Verifying professional credentials for DPN Badge eligibility
Confirming regulatory compliance in respective jurisdictions
Preventing fraud and unauthorised platform access
Maintaining platform security and data integrity
Authenticating user identity through OTP verification
Conducting background checks where necessary
Monitoring for suspicious activity and policy violations

4.3 Communication

Sending transactional notifications and account updates
Providing customer support responses and assistance
Delivering marketing communications (with appropriate consent)
SMS verification codes via Twilio services
Project-related communications between users
Newsletters and platform update notifications
Safety alerts and regulatory compliance updates

4.4 Platform Improvement

Analysing usage patterns and user engagement metrics
Improving website functionality and user experience
Developing new features and service enhancements
Conducting research and platform analytics
Optimising search results and matching algorithms
A/B testing new features and user interfaces
Personalising content and recommendations

4.5 Legal and Regulatory Compliance

Complying with applicable laws and regulations
Responding to legal requests and court orders
Protecting our rights and defending against legal claims
Ensuring aviation safety and regulatory compliance
Conducting audits and maintaining business records

4.6 Business Operations

Managing business relationships and partnerships
Conducting market research and competitive analysis
Planning and executing business strategies
Mergers, acquisitions, and business transfers

5. LEGAL BASIS FOR PROCESSING

We process your personal information based on the following legal grounds:

Contractual Necessity:

Processing required to provide our marketplace services and fulfil our terms of service, including account management, payment processing, and service delivery.

Legitimate Interests:

Operating our business, preventing fraud, improving our services, ensuring platform security, and conducting marketing activities (where not overridden by your fundamental rights and interests).

Consent:

Where you have provided explicit, informed, and freely given consent, particularly for marketing communications, optional services, and non-essential cookies.

Legal Compliance:

Meeting regulatory requirements, including aviation authority regulations, financial compliance obligations, tax requirements, and responding to legal requests.

Vital Interests:

Protecting the vital interests of individuals, including emergency situations and safety-critical communications.

Public Task:

Performing tasks carried out in the public interest, including supporting aviation safety and regulatory compliance.

6. INFORMATION SHARING AND DISCLOSURE

6.1 Service Providers

We share information with trusted third-party service providers under strict contractual obligations:

Payment Processing:

PayFast and PayPal for transaction processing
Financial information shared in accordance with payment card industry standards
Anti-fraud services for transaction verification

Communications:

Twilio for SMS verification services
Email marketing service providers, if and when implemented
Email delivery services and communication platforms

Technical Services:

Google Maps for location and mapping services
GeoDirectory for location data management
FlowMattic for automation and workflow management
Web hosting and technical infrastructure providers
Cloudflare for CDN, DDoS protection, and security services – all visitor traffic is routed through Cloudflare
Content delivery networks and cloud storage services
Analytics and performance monitoring services

Professional Services:

Legal advisors and compliance consultants
Accounting and auditing firms
Background check providers
Identity verification services

6.2 Professional Connections

We facilitate connections between drone professionals and clients through our marketplace
Profile information is displayed to potential clients as part of our directory service
Communication between users may be facilitated through our platform
Project details and requirements are shared with relevant professionals
Reviews and ratings are displayed publicly to build trust

6.3 Legal Requirements

We may disclose information when required by law, including:

Compliance with legal processes, subpoenas, and court orders
Aviation authority investigations and regulatory compliance
Law enforcement requests with appropriate legal basis
Protection of our rights, property, and safety of users
Prevention and investigation of illegal activities
National security and public safety requirements

6.4 Business Transfers

In the event of a merger, acquisition, or sale of business assets, user information may be transferred as part of the transaction, subject to:

Equivalent privacy protections for transferred data
User notification of the transfer
Opportunity to object or delete data before transfer
Compliance with applicable data protection laws

6.5 Aggregate and Anonymised Data

We may share aggregate, anonymised, or de-identified information that cannot reasonably be used to identify you for:

Industry research and market analysis
Academic research and public policy development
Business intelligence and trend analysis
Marketing and promotional activities

7. INTERNATIONAL DATA TRANSFERS

As a global platform based in South Africa, we may transfer your information internationally:

Cross-Border Transfers:

Data may be processed in countries where our service providers operate
We ensure appropriate safeguards are in place for international transfers
European users benefit from GDPR adequacy decisions or appropriate safeguards
We implement Standard Contractual Clauses where required
Regular assessment of data protection levels in recipient countries

Service Provider Locations:

Payment processors may process data in various jurisdictions
Communication services may route data through international networks
Cloud hosting services may store data in multiple geographic locations
Customer support may be provided from multiple jurisdictions

Transfer Safeguards:

Certification schemes and codes of conduct
Regular monitoring of third-party compliance
Data localisation where legally required

8. DATA SECURITY

We implement comprehensive security measures to protect your information:

Technical Safeguards:

End-to-end encryption of sensitive data in transit and at rest
Secure server infrastructure with regular security patches and updates
Multi-factor authentication and access controls
Regular security monitoring, threat detection, and incident response
Secure coding practices and regular security testing
Data loss prevention and backup systems
Network security and firewall protection

Administrative Safeguards:

Comprehensive staff training on data protection and privacy principles
Strict access controls with need-to-know basis limitations
Regular review and updating of security policies and procedures
Incident response procedures for potential data breaches
Background checks for personnel with access to sensitive data
Confidentiality agreements and ongoing security awareness training

Physical Safeguards:

Secure, certified data centres with restricted access
Environmental controls and 24/7 monitoring systems
Biometric access controls and visitor management
Secure destruction of physical media containing personal data

Breach Response:

Incident response team and escalation procedures
Breach notification to authorities within 72 hours where required
User notification for high-risk breaches
Post-incident analysis and security improvement measures

9. DATA RETENTION

General Retention Policy:

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy:

Active Account Data:

Account and profile information retained while account remains active
Verification documents and professional credentials maintained for credibility
Transaction history preserved for accounting and legal requirements
Communication records kept for customer service and dispute resolution

Specific Retention Periods:

Financial Records: 7 years for tax and accounting purposes
Communication Records: 3 years for customer service quality
Marketing Data: Until consent is withdrawn or 3 years of inactivity
Technical Logs: 12 months for security and performance monitoring
Verification Documents: Duration of professional status plus 2 years

Account Deletion:

Personal information deleted within 30 days of account closure request
Legal and regulatory compliance data retained as required by law
Anonymised data may be retained indefinitely for statistical purposes
Backup systems purged within 90 days of deletion request

Inactive Account Management:

Accounts inactive for 3+ years may be archived or deleted
90-day notice provided before deletion of inactive accounts
Essential data may be retained for fraud prevention

10. YOUR RIGHTS AND CHOICES

10.1 Access and Control

You have the right to:

Request access to your personal information held by us
Obtain a copy of your personal data in a structured, commonly used format
Update and correct inaccurate or incomplete information
Delete your account and associated personal information
Restrict processing of your personal data in certain circumstances
Object to processing based on legitimate interests
Data portability to transfer your information to another service

10.2 Communication Preferences

Opt out of marketing communications at any time
Manage notification preferences in your account settings
Unsubscribe from any email newsletter using the unsubscribe link in the email or by contacting us directly
Choose preferred communication channels (email, SMS, in-app)
Set frequency preferences for non-essential communications

10.3 Verification and Professional Information

Control what professional information is displayed in your profile
Manage verification document uploads and DPN Badge status
Update certification and licence information as needed
Choose visibility settings for contact information

10.4 Privacy Settings

Control visibility of your profile information to different user types
Manage location sharing preferences and geographic visibility
Adjust communication and notification settings
Control cookie preferences and tracking technologies

10.5 Exercising Your Rights

Submit requests through your account settings or by contacting us directly
Identity verification may be required for security purposes
Response provided within 30 days (or as required by applicable law)
No charge for reasonable requests (excessive requests may incur fees)
Right to lodge complaints with relevant supervisory authorities

11. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies for:

Essential Functions:

User authentication and session management
WooCommerce transaction processing and shopping cart functionality
Account security and fraud prevention
Load balancing and website performance optimisation

Analytics and Improvement:

Website usage analysis and performance monitoring
User experience optimisation and A/B testing
Feature development and usage analytics
Error tracking and debugging

Marketing and Personalisation:

Personalised content recommendations
Targeted advertising and campaign measurement
Social media integration and sharing
Cross-device tracking and user recognition

Third-Party Services:

Google Maps functionality and location services
Payment processor integration and fraud detection
Communication service delivery and tracking
Social media plugins and sharing tools

Cookie Management:

Browser settings to accept, reject, or delete cookies
Opt-out mechanisms for advertising and tracking cookies
Cookie preference centre for granular control
Regular review and consent renewal for non-essential cookies

For detailed information about our cookie usage, please refer to our separate Cookie Policy.

12. CHILDREN’S PRIVACY

Age Restrictions:

Our services are not intended for children under 18 years of age
We do not knowingly collect information from children under 13
European users under 16 require verifiable parental consent
Professional licensing requirements serve as age validation

Professional Services Focus:

Our platform primarily serves professional drone operators and commercial clients. Professional drone operation typically requires:

Aviation authority licences with minimum age requirements
Commercial certifications and insurance coverage
Business or professional qualifications
Legal capacity to enter into commercial contracts

Parental Rights:

Parents may contact us to request removal of any child’s information
We will verify parental identity before responding to requests
Immediate suspension of any account identified as belonging to a minor
Cooperation with parents and guardians in addressing privacy concerns

13. REGION-SPECIFIC PROVISIONS

13.1 South African Users (POPIA Compliance)

Under the Protection of Personal Information Act:

You have rights to access, correct, and delete personal information
We process information lawfully, fairly, and transparently
We implement appropriate security measures for your information
You may lodge complaints with the Information Regulator of South Africa (https://inforegulator.org.za/complaints/ | https://inforegulator.org.za/contact-us/)
DPN maintains a PAIA (Promotion of Access to Information Act) Manual, available on our Legal & Compliance page, which sets out the information held by DPN and the procedure for requesting access to that information
Cross-border transfer restrictions apply to sensitive information
Direct marketing by electronic communication (email, SMS) requires your prior written consent under POPIA section 69 unless you are an existing customer. You may withdraw this consent at any time, free of charge, by using the unsubscribe link in any marketing communication or by contacting legal@dronepilotnet.com
Under POPIA section 71, you have the right to object to decisions made about you solely by automated means where those decisions produce legal or similarly significant effects, and to request human review of such decisions

13.2 European Users (GDPR Compliance)

Under the General Data Protection Regulation:

Legal basis for processing is clearly identified for each purpose
You have enhanced rights including data portability and erasure
We provide clear consent mechanisms for optional services
You may lodge complaints with relevant supervisory authorities
Right to object to automated decision-making and profiling
Data Protection Impact Assessments for high-risk processing
Breach notification requirements within 72 hours
As a South African company, we monitor our Article 27 GDPR obligations regarding EU Representative designation and will appoint one if our scale of EU data processing requires it

13.3 California Users (CCPA/CPRA Compliance)

Under the California Consumer Privacy Act and California Privacy Rights Act:

You have rights to know, delete, and opt-out of sale of personal information
We do not sell personal information to third parties for monetary consideration
You may designate an authorised agent for privacy requests
We will not discriminate against you for exercising privacy rights
Right to correct inaccurate personal information
Right to limit use and disclosure of sensitive personal information
Annual disclosure of data processing practices

13.4 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate, including:

Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
Australia’s Privacy Act and Notifiable Data Breaches scheme
Brazil’s Lei Geral de Proteção de Dados (LGPD)
Other regional and national privacy regulations as applicable

14. AUTOMATED DECISION-MAKING AND PROFILING

Automated Systems:

We may use automated decision-making systems for:

Fraud detection and prevention
Risk assessment for professional verification
Content moderation and spam prevention
Matching professionals with relevant job opportunities
Personalised search results and recommendations

Your Rights:

Right to request human review of automated decisions
Right to challenge automated decisions affecting you
Right to object to profiling for marketing purposes
Explanation of automated decision-making logic where legally required

15. UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect:

Changes in our business practices or services
New legal requirements or regulatory changes
Enhanced privacy protections or user rights
Feedback from users and regulatory authorities
Technological developments affecting data processing

Notification of Changes:

Email notification for material changes affecting your rights
Prominent website notice for significant policy updates
Updated policy posted with clear effective dates
Continued use constitutes acceptance of updated terms
Option to delete account if you disagree with changes

16. CONTACT INFORMATION

Privacy Inquiries:

For questions about this Privacy Policy or your personal information:

Email: legal@dronepilotnet.com
Postal Address: Unit 8b, Pearl of Hout Bay, 8 Victoria Avenue, Hout Bay, Cape Town 7806, South Africa
Website Contact Form: contact@dronepilotnet.com
Information Officer / Data Protection Officer: Ryan Gouws | legal@dronepilotnet.com

Data Protection Requests:

Access, correction, or deletion requests
Privacy complaint resolution and mediation
Cookie and tracking preference management
General privacy and security questions
Breach reporting and incident response

Response Times:

Acknowledgment within 2 business days
Full response within 30 days (or as required by law)
Complex requests may require additional time with notification
Urgent security matters addressed immediately

This Privacy Policy is designed to be transparent about our data practices while ensuring compliance with applicable privacy laws worldwide. We encourage you to read this policy carefully and contact us with any questions or concerns.