List of active policies

Full policy

1. Who We Are

Lift Aviation operates the Lift Aviation Learning Management System for aviation training, safety, compliance, communication, administration, and recordkeeping.

The data controller is:

Lift Aviation LAA LTD
Address: 44 Agisilaou, Aradippou, Larnaca, 7101, Cyprus
Email: info@lift.cy

Privacy contact:

Privacy Officer
Email: info@lift.cy

2. Why We Process Data

We process personal data to:

• create and manage LMS accounts;
• provide access to training and course material;
• manage enrolments, assessments, quizzes, certificates, and completion records;
• maintain aviation training, safety, compliance, audit, and regulatory records;
• support instructor, management, safety, and compliance oversight;
• communicate with users about training or LMS matters;
• protect the security and integrity of the LMS;
• comply with contractual, legal, regulatory, aviation authority, and audit requirements.

3. Legal Basis

Personal data may be processed where necessary for:

• performance of a training contract or training service;
• compliance with legal, aviation, safety, compliance, audit, or regulatory obligations;
• Lift Aviation’s legitimate interests in managing training, compliance, safety, LMS security, and administration;
• consent, where applicable.

Where sensitive data is required, such as licences, identification documents, or medical certificates, it will be handled with restricted access and appropriate safeguards.

4. Data We Process

The LMS may process:

• name, surname, email address, username, user ID, role, and course category;
• profile information uploaded by the user;
• course enrolment, access, activity, progress, and completion records;
• quiz, assessment, assignment, certificate, and acknowledgement records;
• messages, forum posts, feedback, forms, submissions, and uploaded files;
• safety, compliance, or training-related records submitted through the LMS;
• IP address, browser type, login time, session information, and system logs.

5. Access and Sharing

Personal data is accessible only to authorised persons according to role and need to know, including management, nominated persons, instructors, administrators, safety and compliance personnel, system administrators, IT support providers, and approved training partners where applicable.

Data may be shared where necessary with aviation authorities, auditors, inspectors, competent authorities, approved training partners, LMS/IT/hosting providers, external training providers, or other parties where required by law, regulation, contract, or aviation compliance obligations.

Only the minimum necessary data will be shared.

6. Retention

Personal data is retained only for as long as necessary for training, safety, compliance, audit, legal, contractual, regulatory, or dispute-resolution purposes.

Training, safety, compliance, and regulatory records may need to be retained for extended periods.

When data is no longer required, it will be deleted, anonymised, or securely archived.

7. Cookies

The LMS uses necessary cookies for login, authentication, session security, user preferences, course access, and normal platform functionality.

Examples may include:

• MoodleSession — keeps the user logged in while moving between pages and is normally deleted when the browser is closed.

• MoodleID or similar — may remember the username on the login page, depending on browser and LMS settings.

If embedded content or third-party services are used, such as Jotform, Zoom, Evionica, BGS / ATPdigital, videos, analytics, or external learning tools, those services may use their own cookies or process data. Where non-essential cookies or tracking are used, additional information or consent may be required.

Users may block cookies through their browser settings, but blocking necessary cookies may prevent the LMS from working correctly.

8. User Rights

Subject to applicable law, users may request access, correction, deletion where legally permitted, restriction, objection, data portability, or withdrawal of consent where processing is based on consent.

Some records may need to be retained for aviation training, safety, compliance, audit, legal, contractual, or regulatory reasons.

Requests may be submitted through Moodle data privacy tools, where available, or by contacting the Privacy Officer.

Users also have the right to lodge a complaint with a competent data protection authority.

9. Security and User Responsibilities

Lift Aviation applies appropriate technical and organisational measures to protect personal data, including role-based access, restricted administrator access, system logs, backups, and access control.

Users must keep login details confidential, access only authorised content, avoid uploading unnecessary personal data, respect other users’ privacy, and report suspected unauthorised access or data protection concerns.

10. Updates

This notice may be updated from time to time. Users may be required to review and accept updated versions before continuing to use the LMS.

Full policy

1. Purpose

The Lift Aviation LMS shall be used only for authorised aviation training, learning, safety, compliance, communication, administration, and recordkeeping.

This policy applies to all LMS users.

2. Account Security and Access

Users shall:

• access the LMS only through their own authorised account;
• keep usernames and passwords confidential;
• not share login credentials;
• not allow another person to use their account;
• not access or attempt to access another user’s account, profile, personal data, training records, or restricted content;
• report suspected unauthorised access, password compromise, incorrect access, or security concerns to Lift Aviation.

3. Acceptable Behaviour

Users shall act professionally, respectfully, and responsibly when using the LMS.

Users shall not upload, submit, send, or publish content that is false, misleading, offensive, abusive, threatening, harassing, discriminatory, unlawful, unsafe, inappropriate, or unauthorised.

4. Training Material and Intellectual Property

Training material, manuals, presentations, videos, quizzes, forms, documents, and other LMS content remain the property of Lift Aviation or the relevant content owner.

Users may use LMS material only for authorised training or organisational purposes.

Users shall not copy, download, photograph, record, distribute, publish, share, sell, or use LMS material outside authorised purposes without permission.

5. Personal Data and Confidentiality

Users shall respect the privacy and personal data of other users.

Users shall not misuse, disclose, copy, download, photograph, distribute, or share personal data, training records, safety information, compliance information, or confidential information accessed through the LMS.

Incorrect access to another user’s information must be reported immediately.

6. Academic and Training Integrity

Users shall complete quizzes, assessments, assignments, acknowledgements, and training activities honestly.

Plagiarism, impersonation, cheating, false submissions, falsification of records, unauthorised collaboration, and unauthorised use of external tools are prohibited.

Use of artificial intelligence tools for assignments, quizzes, or assessments is only permitted where expressly allowed by Lift Aviation or the instructor.

7. Safety, Compliance, and System Security

Users shall provide accurate and honest information in training, safety, compliance, and acknowledgement forms.

Users shall not interfere with LMS security, bypass access controls, introduce malware, misuse system functions, or affect another user’s access.

Lift Aviation may monitor LMS activity for training, safety, compliance, audit, security, technical support, and system administration purposes.

8. Breach of Policy

Misuse of the LMS may result in restriction or suspension of access, removal from courses, investigation, disciplinary action, termination of access, or other appropriate action.

Serious misuse, unauthorised access, data protection breaches, harassment, falsification of records, distribution of training material, or unlawful activity may be reported to the relevant authority where required.

9. Confirmation

By accepting this policy, the user confirms that they understand and agree to use the LMS only for authorised purposes, protect their account, respect personal data, protect training material, act honestly, follow LMS security rules, and report misuse or incorrect access.