Privacy Policy

Who we are

Crew Portfolio is a closed travel community for verified airline and aviation professionals. The service is operated by 1550 Digital, Principality of Andorra ([REGISTERED ADDRESS]), which is the data controller for the personal information described here.

This Privacy Policy applies to the website at crewportfolio.com and any subdomains we operate. For any privacy enquiry, or to exercise your rights, contact hello@crewportfolio.com.

What we collect and why

Membership application: when you apply we collect your name, work email address (used to verify your employer) and a personal email address (used as your account login and to contact you). Registration is passwordless, so we do not ask you to create or store a password. We use this data to confirm your eligibility, create your account and send essential account email.

Your membership card: once your account is approved we generate a digital membership card that shows your name and a short-lived security code, presented as a rotating QR code, so a hotel can confirm you are a current member at check-in. The code is derived from your account and a rotating token. It carries no other personal information.

Contact form: if you send us a message we collect the name, email and message text you submit, plus the reason you choose from the dropdown. We use this only to respond to you.

Server logs: our hosting provider records standard request data (IP address, timestamp, browser user agent) for security and abuse prevention. These logs are kept for a short rolling window.

We do not run advertising trackers, sell data, or share personal information with third parties for marketing.

Our legal basis for using your data

Andorran data protection law (Qualified Law 29/2021, of 28 October, on the protection of personal data) requires us to have a lawful basis for each use of your data. We rely on the following.

Performance of a contract, or steps to enter one: creating and running your account, verifying your eligibility, providing your membership card and sending essential account email.

Legitimate interests: keeping the community closed and secure, preventing fraud and the sharing of member rates, keeping short-term server logs and responding to enquiries you send us. We balance these interests against your rights.

Consent: we will ask for your consent before setting any non-essential cookie or sending you marketing. You can withdraw consent at any time.

Legal obligation: where we are required to keep records to comply with the law.

How we verify membership

During registration your work email is checked against a list of recognised airline, low-cost carrier, ground-handling and industry domains. If it matches, an activation email is sent to that work email. Clicking it confirms you can receive mail at that address and approves your account. The work email is not used for marketing.

This check is automated but it does not produce a legal or similarly significant decision without human involvement. If your work email is not recognised, you can let us know via the contact form to request a manual review.

Crew Portfolio is preparing to launch. Approved members currently join a waitlist and we hold your registration until we open.

Service providers we use

Brevo sends our transactional account email (account activation and contact-form notifications). Brevo processes the email address and message content only for delivery.

Mapbox renders the location maps on property pages. When a map loads, Mapbox may receive your IP address and set or read data in your browser in order to serve the map tiles.

YouTube (in privacy-enhanced mode) hosts the occasional property video. No tracking cookie is set unless you choose to play a video.

A content delivery network serves the small code library that draws your membership-card QR code and our fonts.

Our hosting provider stores the website database and uploaded media and processes personal data only as required to operate the service.

Where your data is stored and sent

Member data is stored on servers operated by our hosting provider, KnownHost, on servers located in Amsterdam, the Netherlands. Some transactional email may be processed in the European Economic Area through Brevo. As the controller, 1550 Digital is established in the Principality of Andorra, which the European Union recognises as providing an adequate level of data protection.

Where data moves between these locations it is protected by an adequacy decision or other appropriate safeguards.

How long we keep it

Account data is kept while your membership is active. If you ask us to close your account we delete personal identifiers. We may retain a minimum record (date of registration, work email domain) for fraud prevention.

Contact-form messages are kept for up to twelve months after the last reply, then deleted.

Your rights

Under Andorran data protection law (Qualified Law 29/2021) you have the right to ask us to: give you a copy of the personal information we hold about you, correct it if it is wrong, delete it, restrict how we use it, provide it in a portable format, or object to a particular use, including any automated decision-making. Where we rely on your consent, you can withdraw it at any time.

To exercise any of these, email hello@crewportfolio.com. We will respond within one month.

Complaints

If you believe we have mishandled your information you can complain to the Andorran Data Protection Agency (Agència Andorrana de Protecció de Dades, APDA), the supervisory authority for data protection in Andorra, at apda.ad.

Changes to this policy

We will refresh this policy when our practices change. The "Last reviewed" date at the top of the page shows the most recent revision.