Privacy Policy

How Burrana collects, uses and protects your personal information.

Last updated: September 2026

1. About this policy

This privacy policy explains how Burrana ("Burrana", "we", "us" or "our") collects, uses, discloses and protects personal information when you interact with us — for example, when you visit our website at www.burrana.aero, make an enquiry, meet us at an industry event, or subscribe to our communications.

Burrana operates globally, with offices in Australia, the United States and Mexico. Depending on where you are located, you may have specific rights under the privacy laws that apply to you. These are set out in Section 11.

This policy covers personal information collected through our website and our sales, marketing and business activities. It does not cover data processed through our in-flight products and airline services (such as the RISE platform), which are handled under separate arrangements with our airline customers.

2. The personal information we collect

We collect the following categories of personal information:

  • Contact and identity details — such as your name, job title, employer, business email address, business phone number, and country or region.
  • Enquiry and correspondence details — the content of enquiries, support requests and other communications you send us.
  • Marketing preferences — your subscription choices and how you engage with our emails.
  • Website usage information — collected automatically through cookies and similar technologies, such as your IP address, device and browser type, pages visited, and referring website (see Section 5).

We do not seek to collect sensitive information (such as health, racial or political data) through our website or marketing activities. Please do not send us sensitive information unless we specifically request it.

3. How we collect personal information

We collect personal information:

  • Directly from you — when you complete a form, email us, request support, exchange a business card, or speak with our team.
  • Automatically — when you use our website, through cookies and analytics tools.
  • From third parties — such as event and trade-show organisers where you have agreed to share your details with exhibitors, and business data providers where permitted by law.

4. How and why we use your information

We use personal information to:

  • respond to your enquiries and provide support;
  • manage and deliver our products and services;
  • keep you informed about our products, services and events (where you have chosen to hear from us, or where otherwise permitted);
  • operate, maintain and improve our website;
  • meet our legal, administrative and regulatory obligations; and
  • protect our rights, property and the security of our systems.

Legal bases (EU/UK). Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases: your consent (for example, for marketing emails); our legitimate interests in operating and promoting our business (balanced against your rights); the performance of a contract with you or your organisation; and compliance with a legal obligation. Where we rely on consent, you may withdraw it at any time.

5. Cookies and analytics

Cookies are small text files placed on your device that record information about your visit. We use cookies to operate the website, understand how it is used, and improve it. We do not use cookies to track you across unrelated websites or to serve targeted advertising.

You can control or delete cookies through your browser settings, and where required by law we will ask for your consent before setting non-essential cookies. Disabling some cookies may affect how the website functions.

6. When we share personal information

We share personal information only where necessary, and we do not sell your personal information.

We may disclose personal information to:

  • Service providers who help us run our business — for example, website hosting, email delivery, analytics and customer-relationship-management providers — who are permitted to use it only to provide services to us;
  • Professional advisers, such as legal, accounting and insurance advisers;
  • Regulators, law enforcement or other authorities, where required or permitted by law; and
  • A successor entity, in connection with a business sale, merger or reorganisation.

7. International access to your information

Burrana is a single business operating across Australia, the United States and Mexico. We use shared cloud-based systems — such as our email and customer-relationship-management tools — to run our sales and marketing activities. This means your personal information may be held on servers located outside your own country and may be accessed by authorised Burrana staff in any of the countries in which we operate. We do not sell or transfer your information to unrelated parties for their own use.

Where personal information originating in the EU, UK, or another jurisdiction that restricts international data flows is accessed from or stored in another country, we rely on appropriate safeguards — such as Standard Contractual Clauses — so that your information remains protected to the standard required by the applicable law.

8. How long we keep your information

We keep personal information only for as long as necessary for the purposes described in this policy, including to meet legal, accounting or reporting requirements. When it is no longer needed, we securely delete or anonymise it. Marketing contacts are retained until you unsubscribe or ask us to remove your details.

9. How we protect your information

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure or alteration. No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards regularly.

10. Marketing and your choices

Where you have opted in, or where otherwise permitted, we may send you information about our products, services and events. Every marketing email includes an unsubscribe link, and you can opt out at any time by using that link or by contacting us at marketing@burrana.aero. We will action opt-out requests promptly.

11. Your privacy rights

Your rights depend on where you live. If more than one framework applies to you, you can rely on whichever gives you the greater protection. To exercise any right, contact us at marketing@burrana.aero. We will verify your identity before responding and will not discriminate against you for exercising your rights.

Australia

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date or incomplete. If you are concerned about how we have handled your personal information, you can make a complaint to us (see Section 13), and if you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

European Union and United Kingdom

If you are in the EU or UK, you have the right to access, rectify or erase your personal data; to restrict or object to our processing of it; to data portability; and to withdraw consent where we rely on it. You also have the right to lodge a complaint with your local data protection authority.

California

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we collect and how we use and disclose it; to request access to or deletion of your personal information; to correct inaccurate information; and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law. We will not discriminate against you for exercising your rights.

Mexico

Under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), you have "ARCO" rights — to Access, Rectify, Cancel (delete) and Object to the processing of your personal data — and to withdraw your consent. You may exercise these rights by contacting us at marketing@burrana.aero.

12. Children's privacy

Our website and communications are directed to business contacts and are not intended for children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

13. How to contact us

For any privacy question, request or complaint, or to update the information we hold about you, contact:

Burrana — Email: marketing@burrana.aero

We will acknowledge your request, respond within the timeframe required by the law that applies to you, and let you know if we need any further information to assist you.

14. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The current version is always published on this page, with the "last updated" date shown at the top. Where changes are significant, we will take reasonable steps to notify you.