Privacy Policy
Version 2026-10-19.4 · 19 October 2026
Who is responsible
Neo Jet Parts (FZE), Sharjah Airport International Free Zone (SAIF Zone), Saif Suite Z2-13, Sharjah, United Arab Emirates, is responsible for personal data submitted through this website. Contact parts@neojetparts.com with privacy questions or requests.
Information we use
We collect your name, company, work email, optional Phone / WhatsApp, requested part, quantity, preferred condition, AOG selection and related correspondence. We record the request reference, timestamps, applicable document versions and your acknowledgement, price calculations and email delivery status. For abuse prevention, short-lived counters use keyed hashes of the network address or email address. The application does not retain the raw IP address in those counters. Hosting and security providers may separately process technical connection information.
Why we use it
We use enquiry details to answer requests, provide indicative estimates, verify requirements, arrange requested sales follow-up, maintain records and secure the service. Where GDPR or UK GDPR applies, we rely on steps requested before a contract where the individual is a prospective contracting party, or legitimate interests in handling business enquiries and protecting the service where the person represents an organisation, subject to the applicable balancing and objection requirements. Other applicable laws may require different or additional grounds. The form acknowledgement records receipt of the notices; it is not consent to marketing. Optional contact details are used for this enquiry only. No marketing subscription is created.
Service providers and recipients
Cloudflare provides website hosting, request processing, D1 database storage and security. Resend processes transactional email and delivery events. Google provides the company email service, as confirmed by the business. Authorised sales personnel receive enquiries at sales@neojetparts.ae. Relevant purchasing details may be shared with suppliers when necessary to check an item or fulfil an agreed request; unnecessary personal contact details should not be shared. This enquiry form does not use Formspree. Where you allow analytics, Google Analytics processes usage events such as page visits and saved enquiries. Our Google tag gateway uses Cloudflare to forward permitted analytics requests from this website to Google. The gateway does not forward our staff-access or preview-access cookies, raw client IP address or private page referrer; country and region codes may be forwarded for approximate reporting. We do not send names, contact details, private prices or private viewing links to Google Analytics.
International processing
The business is based in the UAE. Cloudflare, Resend and Google may process information in other countries, including the United States. A D1 location hint or an email sending region does not guarantee that all processing remains in that region. Applicable processor agreements and transfer safeguards must cover the actual services and account settings. Contact us for information about the safeguards applicable to your enquiry. Safeguards must be appropriate to the applicable law and the service used.
Retention of business records
Our retention schedule distinguishes genuine commercial records from testing and technical logs. Substantive business enquiries, indicative estimates and related incoming and outgoing commercial correspondence are retained for at least 5 years from issue or receipt. A request that does not lead to a sale can still be business correspondence. Documents supporting an order, invoice, payment or tax position are retained for at least 7 years after the end of the relevant tax period. Where a conversation contains several records, the latest applicable retention deadline applies. Only the necessary information is retained for these purposes.
Test records and technical data
Genuine test enquiries and copies of website-generated test emails are retained for 30 days from creation. Test records are kept separately from genuine business enquiries and sales records. Temporary email-queue copies and delivery-event logs are normally removed after 30 days, after the required record has been verified in the separate archive; a failed archive check postpones deletion. Abuse-prevention counters expire at the end of their short security window. Do not submit sensitive identity documents through this form.
Archives, backups and email providers
The website keeps a restricted archive of submitted enquiries, exact outgoing email content, delivery status and the notice version shown at submission. This archive covers emails generated by the website; it does not automatically capture incoming Google mail or messages manually sent by staff. Daily recovery snapshots of the website archive are held in a separate database for a rolling 30-day period. Deleted information may remain in those restricted snapshots until scheduled expiry, is not used for ordinary business, and deletion decisions are reapplied before recovery. A minimal deletion-control record is kept for 35 days to prevent restoration of expired data. Google mailbox copies, Resend records and provider-managed internal backups are separate stores governed by their service terms and configured retention settings. Their internal deletion cycle is not represented as 30 days, and deleting an application record does not automatically delete an email from a mailbox.
Holds and longer requirements
Deletion is suspended for specifically identified records needed for a dispute, claim, audit, tax examination or lawful regulatory request. The reason is documented and the hold must be reviewed and released when it is no longer needed. Applicable mandatory retention requirements override the ordinary schedule. Aviation release certificates, traceability, export-control and other regulated technical records require their own applicable retention assessment and are not deleted under the 30-day technical-log rule. These periods do not restrict legal rights to erasure where retention is no longer justified.
Your choices and rights
You may ask for access, correction or deletion, and, where applicable, restriction, portability or objection to processing. Rights and exceptions depend on the law that applies to you and the purpose of processing. We may need proportionate verification before responding. You may contact an appropriate data protection authority where applicable. We do not sell personal data, use this website for behavioural advertising or make decisions with legal or similarly significant effects solely through the automated estimate.
Security and cookies
Access is restricted, private links expire, and enquiry and delivery pages are excluded from indexing and caching. No system can guarantee absolute security. Essential cookies support staff access and your privacy preferences. Google Analytics is loaded only after you allow analytics; you can withdraw this permission through Cookie settings. We do not enable advertising pixels or transactional email open/click tracking. See the Cookie Policy for lifetimes and controls.