◆ Legal
Privacy Policy
Last updated: June 1, 2026
1. Who We Are
Priority 1 Air Rescue ("P1AR," "we," "us") operates the website priority1airrescue.com and provides aircrew mission training, staffing, and equipment services. Our parent company is Emberline.
Data controller contacts:
- United States: 1924 North Higley Road, Mesa, AZ 85205
- France: Aerocampus Aquitaine, 1 RTE de Cenac, 33360 Latresne, FR
- GDPR inquiries: GDPR@Priority1AirRescue.com
- General: info@priority1airrescue.com
- GDPR inquiries: GDPR@Priority1AirRescue.com
- General: sales@priority1airrescue.com
2. Data We Collect
2.1 Contact Form Submissions
When you submit our contact form, we collect the information you provide: name, email address, organization, phone number, audience type, platform type, training need, and timeline. This data is transmitted to our form processor (Web3Forms) and forwarded to our team via email.
Legal basis: Legitimate interest (responding to your inquiry) and, where applicable, pre-contractual steps at your request (GDPR Art. 6(1)(b)).
2.2 Analytics (PostHog)
If you accept cookies via our consent banner, we use PostHog to collect:
- Pages visited, navigation paths, and page leave events
- Scroll depth and engagement metrics
- Button clicks, link clicks, and dead click detection
- Heatmaps (mouse movement and click position tracking)
- Session recordings (all form inputs are masked)
- Core Web Vitals and network timing data
- Autocaptured UI interactions (element clicks, form submissions)
- Device type, browser, and approximate location (derived from IP address)
Legal basis: Consent (GDPR Art. 6(1)(a)). Analytics are not activated until you click "Accept" on the cookie banner.
PostHog data is hosted in the United States.PostHog's privacy practices are described at posthog.com/privacy.
2.3 Bot Protection (Cloudflare Turnstile)
Our contact form uses Cloudflare Turnstile to distinguish human visitors from bots. Turnstile processes browser signals to issue a verification token. It does not use traditional tracking cookies.Cloudflare's privacy policy applies to this processing.
Legal basis: Legitimate interest (preventing spam and abuse).
2.4 Content Management (Sanity)
Our blog and editorial content is delivered via Sanity, a headless content management system. Sanity's CDN may process your IP address and standard request headers when serving content and images. Sanity does not set cookies or collect personal data beyond standard CDN access logs.Sanity's privacy policy applies to this processing.
Legal basis: Legitimate interest (delivering website content).
2.5 Server Logs
Our hosting provider may collect standard server logs including IP address, browser user agent, pages requested, and timestamps. These are used for security monitoring and are not combined with other data sources.
3. Cookies and Storage
| Name | Purpose | Type | Consent Required |
|---|---|---|---|
| cookie-consent | Stores your cookie preference | localStorage | No (essential) |
| ph_* | PostHog analytics — session identity, feature flags, and event queue | Cookie + localStorage | Yes |
| cf_clearance | Cloudflare Turnstile verification | Cookie | No (security) |
4. How We Use Your Data
- To respond to your training, staffing, or equipment inquiries
- To deliver website and blog content
- To understand how visitors use the site and improve the experience (with consent)
- To protect the site from spam and abuse
- To comply with legal obligations
We do not sell your personal data. We do not use your data for automated decision-making or profiling that produces legal effects.
5. Data Sharing
We share data only with the following processors:
- Web3Forms — processes contact form submissions and delivers them to our team via email
- PostHog — analytics processing (only with your consent)
- Cloudflare — bot protection and, if applicable, CDN/hosting services
- Sanity — content management system and CDN for blog/editorial content
- Vercel — website hosting and edge delivery
We may disclose data if required by law or to protect our rights, safety, or property.
6. International Transfers
We operate facilities in the United States and France. Contact form data and analytics data may be processed in the United States. Where data is transferred from the EEA/UK to the US, we rely on the EU-US Data Privacy Framework, standard contractual clauses, or your explicit consent as appropriate.
7. Data Retention
- Contact form data: Retained for as long as necessary to respond to your inquiry and for up to 24 months thereafter for follow-up purposes, unless you request earlier deletion.
- Analytics data: Retained according to PostHog's default retention period (currently 12 months for event data).
- Cookie consent preference: Stored in your browser until you clear local storage.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing of your data
- Port your data to another service
- Object to processing based on legitimate interest
- Withdraw consent at any time (for analytics — decline cookies or clear your browser storage)
GDPR (EEA/UK): You have all rights listed above. You also have the right to lodge a complaint with your local supervisory authority (e.g., CNIL in France, ICO in the UK).
CCPA (California): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, contact GDPR@Priority1AirRescue.com. We will respond within one month of receiving your request.
9. Children
Our services are not directed at individuals under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us and we will delete it promptly.
10. Security
We protect your data with HTTPS encryption, security headers (HSTS, content type protection, frame denial), bot protection, and input masking on session recordings. No system is 100% secure, but we take reasonable measures appropriate to the sensitivity of the data we process.
11. Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be noted by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.
12. Contact
For privacy-related questions or to exercise your rights:
- Email: GDPR@Priority1AirRescue.com
- Phone: +1 (480) 621-6023
- Mail: Priority 1 Air Rescue, 1924 North Higley Road, Mesa, AZ 85205