Privacy Policy: Left Hand Seat

Last Updated: October 26, 2026

At Why Go Digital Ltd, we take your privacy as seriously as we take flight safety. This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).

Left Hand Seat (lefthandseat.com) is a UK directory that connects flight schools and aeromedical examiners (AMEs) with prospective pilots. Left Hand Seat is owned and operated by Why Go Digital Ltd, a company registered in England and Wales.

1. Data Controller

Why Go Digital Ltd, trading as Left Hand Seat, is the "Data Controller" for the information you provide.

Contact Email: admin@lefthandseat.com

Physical Address: 1 Brookside, Orwell, Royston, SG8 5TQ

2. Information We Collect

To get you off the ground, we collect the following types of data:

  • Identity Data: Company name and company information.
  • Contact Data: E-mail address, phone number, and billing address.
  • Technical Data: IP address, browser type, and usage patterns via cookies.
  • Course Data: Types of courses and prices.
  • Google Data (optional): Only if a business chooses to connect its Google account. See section 8.

3. How We Use Your Data

We only process your data when we have a legal basis to do so:

  • Contractual Necessity: To manage your listing to provide flight training.
  • Legal Obligation: To comply with aviation authority regulations.
  • Consent: For sending you our newsletter or marketing updates (which you can opt-out of at any time).
  • Legitimate Interest: To improve our website performance and user experience.

4. Data Retention

We keep all of your data, including any Google data, for the lifetime of your subscription.

5. Your Rights under GDPR

As a user, you have the following rights regarding your data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Ask us to fix inaccurate or incomplete information.
  • Erasure ("Right to be Forgotten"): Request that we delete your data under certain conditions.
  • Restriction: Ask us to suspend the processing of your data.
  • Portability: Request the transfer of your data to another party.
  • Objection: Object to us using your data for direct marketing.
  • Complaint: Complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

6. Third-Party Sharing

We do not sell your data. We only share information with trusted partners necessary for our operations, such as:

  • Stripe: for secure payment processing.
  • Lovable Cloud: for hosting our website, database and secure server functions.
  • Google: only where a business chooses to connect its Google account (see section 8).

7. Cookies

We use cookies to enhance your experience. You can set your browser to refuse all or some cookies, but note that some parts of Left Hand Seat may become inaccessible or function improperly.

8. Google User Data

Mid and High Altitude business customers can choose to connect their own Google account from the dashboard of their signed-in account. Connecting is optional and is never required to list a business on Left Hand Seat.

8.1 Google services and permissions we request

We currently connect to one Google service, Google Search Console, and request only this permission:

  • Search Console, read-only (https://www.googleapis.com/auth/webmasters.readonly): to list the website properties you have verified in Search Console and read search performance figures for your website.

We cannot change your Search Console settings, submit or remove anything, or access Gmail, Drive or any other Google service. Other connections shown on the dashboard (Google Analytics 4, Google Business Profile, Google Ads and LinkedIn) are marked "coming soon" and request no access. If we add them, we will update this policy before they are made available.

8.2 What data we access and why

  • Your list of Search Console properties and permission level: needed to find the verified website that belongs to your business.
  • Search performance totals for that website: clicks, impressions, click-through rate and average position for the last 30 complete days and the previous 30 days, plus daily clicks. These are shown in the "Your Digital Performance" panel of your dashboard so you can see how your website performs in Google Search, compare periods and decide which improvements to prioritise.

We do not request search queries, page-level data or any personal data about the people who visit your website.

8.3 How Google data is stored and processed

  • Search performance figures are fetched from Google when you open your dashboard and are shown only to you. They are kept for the lifetime of your subscription, as described in section 4.
  • Your Google sign-in tokens are held by our connection provider, Lovable (Lovable Labs Incorporated), which operates the secure connection service we use to call Google on your behalf. We store only a connection reference linked to your Left Hand Seat account.
  • That connection reference is encrypted (AES-256-GCM) before it is stored in our cloud database, which is hosted for us through Lovable Cloud. It can be read only by our server functions, not from the browser or by other customers.
  • All data is transferred over encrypted HTTPS connections.

8.4 Sharing, AI processing and human access

  • We do not sell Google data, use it for advertising, or share it with anyone other than the service providers named above that are needed to provide the feature.
  • Google data is not sent to any AI model and is not used to train AI or machine-learning models. Website analysis and recommendations in your dashboard are based on your publicly available website pages, not on your Google data.
  • Left Hand Seat staff do not read your Google data, except with your express permission (for example, when you ask us for support), where necessary for security purposes such as investigating abuse, or to comply with applicable law.

8.5 Retention, disconnecting and deletion

  • Your connection is kept while it remains connected to your Left Hand Seat account.
  • To disconnect, sign in, open your dashboard and select Disconnect on the Google Search Console card. This revokes the connection held by our connection provider and deletes the stored connection reference.
  • When you disconnect, any Google data we hold for your account is deleted.
  • You can also remove Left Hand Seat's access at any time from your Google Account at myaccount.google.com/permissions.
  • To request deletion of your account or any data we hold about you, email admin@lefthandseat.com.

8.6 Google API Services User Data Policy

Left Hand Seat's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Contact

For any privacy question or request, email admin@lefthandseat.com or write to Why Go Digital Ltd, 1 Brookside, Orwell, Royston, SG8 5TQ.