Privacy Policy for FlightPhysical.com

For Physicians/Medical Practitioners:

• Name and professional credentials (MD or DO and/or additional degrees)
• Email address
• Practice location(s) and contact information
• Payment information (processed securely through third-party processors)
• Account credentials
• Professional licensing information (subject to our occasional independent verification)
• Light or Dark Display Preferences

For Pilots and Air Traffic Controllers:

• No personal identifying information is collected
• Search preferences and location data (to help find nearby physicians)

Public AME Directory Information:

• We periodically crosscheck data that is publicly accessible through the FAA hosted AME locator
• Public Data is used to seed our directory, and it is augmented at times by direct AME or BasicMed Physician input, corrections or augmentation
• BasicMed Data is not currently collected automatically, listings require explicit BasicMed Physicians to reach out to us

Cookies and Tracking Technologies:

• Session cookies to facilitate site navigation and maintain logged-in status
• Analytics cookies to understand how visitors use our site
• Browser type, device information, and IP address
• Pages visited, time spent on pages, and referral sources

Technical Data:

• Log files containing IP addresses, browser types, access times, and page views
• Performance monitoring data through Laravel Pulse
• Light or Dark Display Preferences either through your system preferences or through our UI button

• We do not collect medical records or personally identifiable health information
• We do not collect information from children under 13 years of age
• We do not collect sensitive personal data beyond what is necessary for service provision
• We do not collect general physician data - BasicMed (non AME) physicians are added to our directory only when they explicitly ask us to be listed, and they can ask to be removed at anytime

• To create and manage physician directory listings
• To process subscription payments for premium services
• To provide search functionality connecting pilots with physicians
• To maintain and improve website functionality

• To send transactional emails (account confirmations, payment receipts, service updates)
• To respond to inquiries and provide customer support
• To send optional newsletters (only with explicit opt-in consent)

• To analyze website usage patterns and improve user experience
• To monitor application performance and identify technical issues
• To optimize search results and directory functionality

• To comply with applicable laws and regulations
• To protect our rights and prevent fraud or abuse
• To respond to legal requests from authorities

Physician directory listings are publicly viewable and include:

• Physician name and credentials
• Practice locations and contact information
• Services offered and certification types
• Links to external websites (for premium subscribers)

We share limited data with trusted service providers who assist in operating our platform:

Payment Processing:

• Stripe and PayPal (encrypted payment information only)
• These processors handle payment data according to PCI-DSS standards

Email Services:

• Postmark and Mailgun (for transactional emails)
• Our own SMTP servers
• Email addresses and necessary message content only

Analytics:

• Google Analytics (anonymized usage data)
• Laravel Pulse (application performance monitoring)

Hosting:

• Amazon Web Services (AWS) (server infrastructure)

Authentication Services:

• Necessary authentication data to verify user identity

All third-party providers are contractually obligated to protect your data and use it only for the specified purposes.

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety, or that of our users or the public.

In the event of a merger, acquisition, or sale of assets, user information may be transferred. We will notify you via email and/or prominent notice on our website of any such change in ownership or control.

You have the right to:

• Access your personal information we hold
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Object to processing of your personal information
• Withdraw consent for optional data processing
• Opt out of marketing communications (newsletters)

If you are located in the European Economic Area, you have additional rights:

• Right to data portability: Receive your data in a structured, commonly used format
• Right to restriction of processing: Request limitation of processing under certain circumstances
• Right to object: Object to processing based on legitimate interests
• Right to lodge a complaint: File a complaint with your local data protection authority

Legal Basis for Processing (GDPR):

• Contractual necessity (to provide our services)
• Legitimate interests (to improve our services and prevent fraud)
• Consent (for optional features like newsletters)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of the sale of personal information (Note: FlightPhysical.com does not sell personal information, nor have we ever since our 1999 launch)
• Non-discrimination for exercising your privacy rights

Categories of Personal Information Collected:

• Identifiers (name, email, IP address)
• Commercial information (payment history)
• Internet activity (browsing behavior on our site)
• Geolocation data (for physician search functionality)

To exercise any of these rights, please contact us through:

• Web Address: https://flightphysical.com/contact

We will respond to your request within 30 days (or as required by applicable law).

Essential Cookies:

• Required for website functionality and navigation
• Session management and authentication
• Cannot be disabled without affecting site functionality

Analytics Cookies:

• Google Analytics (to understand site usage)
• Can be disabled through browser settings or opt-out tools

You can control cookies through your browser settings:

• Most browsers allow you to refuse cookies or delete existing cookies
• Browser settings instructions: Chrome, Firefox, Safari, Edge

Google Analytics Opt-Out:
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing purposes. As stated in this policy, we do not share personal information with third parties for their direct marketing purposes.

Nevada residents have the right to opt out of the sale of certain covered information collected by operators of websites or online services. We do not sell covered information as defined under Nevada law. If you have questions, please contact us using the information provided above.