FEDS Drone Academy — academy.feds.group
Operated by Falcon Eye Drones DMCC
1. Introduction
Falcon Eye Drones DMCC ("FEDS", "we", "us", "our") operates FEDS Drone Academy, a Dubai Civil Aviation Authority (DCAA) and General Civil Aviation Authority (GCAA) approved training organisation, and provides drone pilot training and certification services through the online platform at academy.feds.group (the "Platform").
This Privacy Policy explains how we collect, use, store, share and protect your personal data when you use the Platform. We are committed to handling your personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing regulations.
By registering for and using the Platform, you acknowledge that you have read and understood this Privacy Policy.
2. Who we are (Data Controller)
The data controller responsible for your personal data is:
Falcon Eye Drones DMCC, Dubai, United Arab Emirates. Data protection contact: info@feds.group.
3. What personal data we collect
We collect the following categories of personal data:
Account and identity data — full name, date of birth, nationality, residency status, email address, and telephone number.
Identity documents — a copy of your Emirates ID (for UAE residents) or passport (for non-residents), uploaded for identity verification as required for regulated pilot training.
Regulatory and qualification data — existing or prior UAS (drone) licences you upload, training records, assessment attempts and scores, attendance, and the certifications you earn.
Payment data — payment is processed by our payment provider, Stripe. We do not store your full card details; we retain transaction records (amount, date, status, and reference) for accounting and tax purposes.
Usage and technical data — information generated as you use the Platform, such as login records, course progress, and standard technical data associated with web applications.
4. How we collect your data
We collect personal data directly from you when you register, complete your trainee profile, upload documents, enrol in courses, make payments, and take assessments. We also collect data automatically as you use the Platform, and we receive limited data from third-party sign-in providers (see Section 8) if you choose to sign in with them.
5. Why we use your data and our legal basis
We process your personal data for the following purposes:
To provide training and certification services — creating and managing your account, delivering courses, administering assessments, and issuing certificates. Legal basis: performance of our contract with you.
To verify your identity and eligibility — as required for regulated drone pilot training. Legal basis: performance of our contract with you and compliance with our regulatory obligations.
To process payments — via Stripe. Legal basis: performance of our contract with you.
To comply with aviation and legal obligations — including sharing certification and training records with regulatory authorities (see Section 8). Legal basis: compliance with a legal obligation.
To communicate with you — sending service emails such as verification, payment, and certificate notifications. Legal basis: performance of our contract and our legitimate interests.
To maintain records — for audit, quality assurance, and regulatory compliance. Legal basis: legal obligation and legitimate interests.
6. Minors
Certain courses are open to trainees from the age of 16 (recreational pathways, per DCAA requirements); other pathways require trainees to be at least 18. Where a trainee is under the age of 18, FEDS requires the verifiable consent of a parent or legal guardian before processing the minor's personal data, in accordance with the PDPL.
7. How long we keep your data
We retain your personal data for as long as necessary to provide our services and to meet our legal, regulatory, and accounting obligations. Training and certification records are retained as required by DCAA to support the validity and verification of the certificates we issue. Payment and tax records are retained for the period required by UAE tax law. When personal data is no longer required, we delete or anonymise it.
8. Who we share your data with
We share personal data only as necessary and with the following categories of recipients:
Regulatory authorities — we share trainee and certification data with the Dubai Civil Aviation Authority (DCAA), and with the General Civil Aviation Authority (GCAA) or other relevant civil aviation authorities where applicable, as required for the recognition and verification of the training and certifications we provide.
Service providers (data processors) acting on our behalf: Stripe (payment processing); Supabase / Lovable Cloud (hosting of the Platform and its database, and delivery of service emails); Google (sign-in / authentication where you choose to use Google to sign in).
We do not sell your personal data. We do not share it for third-party marketing.
9. International transfer of data
The Platform's data is hosted in the European Union. This means your personal data is transferred outside the UAE for storage and processing. We transfer personal data internationally only where appropriate safeguards are in place, in line with the PDPL cross-border transfer rules.
10. Public certificate verification
Certificates we issue carry a unique certificate number and a QR code linking to a public verification page (academy.feds.group/verify). This page allows a third party to confirm that a certificate is genuine. It displays only the certificate holder's name, the course or credential, and the relevant dates. It does not display assessment scores, contact details, or any other personal data.
11. Your rights
Subject to the PDPL, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (subject to our legal and regulatory retention obligations); object to or restrict certain processing; withdraw consent where processing is based on consent; and request that your data be transferred to you or another controller.
To exercise any of these rights, contact us at info@feds.group. We will respond within the period required by the PDPL. Note that some data (such as issued certification records) may be subject to regulatory retention and cannot be deleted on request.
12. How we protect your data
We apply technical and organisational measures to protect your personal data, including access controls, row-level security on our database, audit logging of changes to sensitive records, encryption in transit, and restricted staff access on a need-to-know basis. Uploaded identity documents are stored privately and are accessible only to authorised staff.
No system is completely secure, and we cannot guarantee absolute security, but we work to protect your data and to meet our obligations under the PDPL.
13. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the updated version on the Platform and update the "Last updated" date. Where changes are material, we will take reasonable steps to notify you.
14. Contact us
For any questions about this Privacy Policy or how we handle your personal data, contact Falcon Eye Drones DMCC at info@feds.group. You also have the right to lodge a complaint with the UAE Data Office if you believe your data protection rights have been infringed.