Privacy policy
KasperAero LLC · Revision A · Effective 10 October 2026
What we collect
- When you request a quote or a CAD model: your name, company, email, phone if you give it, country, and what you tell us about your application.
- When you place an order: your name, email, company, billing and shipping address, PO number if you give one, and your stated application. Payment card details go directly to Stripe and are never seen or stored by us.
- When you browse: standard analytics about pages viewed, collected through Google Analytics.
Why we collect it
To quote, to fulfil and support orders, to meet our legal obligations including export screening and tax record keeping, and to understand which pages are useful. We do not sell your information, and we do not send marketing email to addresses collected through the CAD form unless you ask us to.
Who we share it with
- Stripe - payment processing and tax calculation
- Cloudflare - hosting and content delivery
- Google Analytics - site analytics
- Our email provider - transactional email
- Carriers - the address information needed to deliver your order
We also disclose information where the law requires it.
Cookies
This site sets analytics cookies through Google Analytics, and Stripe sets cookies necessary for checkout and fraud prevention. We do not run advertising trackers. You can block cookies in your browser; checkout may not work if you block Stripe.
How long we keep it
Order records are kept for as long as tax, export and warranty obligations require, which is seven years.
Your choices
Contact us to ask what we hold about you, to correct it, or to ask us to delete it. We will delete what we are not required to keep.
Payments and card data
Payments are processed by Stripe. The card and bank fields on our checkout page are served by Stripe, not by us. Your card number, expiry date, security code and bank account number go straight to Stripe and never reach KasperAero systems. We could not store them if we wanted to, because we never receive them.
What we do receive back from Stripe, and keep with the order, is the card brand, the last four digits, whether the card is credit or debit, and a Stripe reference for the payment. We use the credit or debit distinction to decide whether the card processing fee applies. For a bank transfer we receive the bank name and the last four digits of the account number, and nothing more.
Stripe is the data controller for the payment details you give it, and processes them under Stripe's privacy policy. Stripe also carries the PCI DSS compliance for handling card data. If you need a copy of your card details corrected or removed, that is a request to Stripe rather than to us.
Security
The site is served over TLS. Order records, which hold your name, company, email address, shipping address and what you bought, are kept in systems with access limited to people who need them.