This Privacy Notice

This Privacy Notice was last changed 26th August 2021.

Who we are

We understand how important privacy is to visitors of the Virgin Galactic website located at https://www.virgingalactic.com or mobile application (such as for iPhone or Android) ( collectively the “Site”) and those who want to join us in our mission by engaging in our community or by becoming a Future Astronaut.

This Privacy Notice explains how the following companies in the Virgin Galactic group collect, handle and disclose your personal data in respect of the processing activities undertaken by each Virgin Galactic group entity. Each of these is a data controller in connection with some of the processing activities described in this Privacy Notice:

  • Virgin Galactic, LLC, 166 N. Roadrunner Parkway, Las Cruces, NM 88011

  • Soho Works, c/o Virgin Galactic Ltd, 72-74 Dean Street, London W1D 3SG

  • Virgin Galactic Holdings, 166 N. Roadrunner Parkway, Las Cruces, NM 88011

"We", "us" and "our" are used in this Privacy Notice to refer to the Virgin Galactic group entity undertaking the relevant processing activity.

About this Privacy Notice

Your personal information is collected by us. This Privacy Notice describes, among other things, the types of information collected about you when you visit the Site or join us in our mission; how your information may be used and when it may be disclosed; how you can control the use and disclosure of your information; and how your information is protected.

Our contact details are as follows:

E-mail: privacy@virgingalactic.com Post: Virgin Galactic Limited, 166 N. Roadrunner Parkway, Las Cruces, NM

If you would like to access previous versions of this Notice please click on the link to archived policies at the top of this page. Alternately you can email privacy@virgingalactic.com for previous versions.

We will collect store and use your personal information for the purposes set out in more detail in this section. This includes where we are operating the Site, communicating with you about our mission and when you enquire or apply to be a Future Astronaut. Certain types of personal information are more sensitive than others. "Special information" about you includes information about your health, medical history, race or ethnicity. We may collect and receive special information about you. We have identified here the types of special information we may collect or receive, how we will use it and why we will use it.

What information we collectHow we use your data
1 Information you provide when you enquire about our Future Astronaut Programme directly or through one of our third party Accredited Space Agents including: Your contact information, (e.g. your full name, email address, address and phone number); Your age; Your occupation; Your nationality; Information you may provide in response to any survey we request that you complete (e.g. age, gender, nationality, motivations for spaceflight); Information you provide in correspondence between us; Information you provide as part of your enquiry (e.g. your motivations to go to space; details of other Future Astronauts who would be willing to support your application; Your hobbies and other background information to your application and Any other information you submit to accompany your application/ enquiry. We use this information, including to: Get in touch with you about Future Astronaut opportunities; Assess your suitability for our Future Astronaut Programme; Understand the best means to communicate with you; Send you mission updates; Send you our community newsletter; Carry out research regarding our commercial space flight programme, our Future Astronauts and other market research; Further the goal of making commercial spaceflight available to the public; and Manage, provide and administer our Future Astronaut experience.
 
2 Information you provide when you join our Future Astronauts Programme including: In addition to the information in row 1 above: Communications with you in relation to our Future Astronaut Programme; Payment information such as your bank account details and bank transfers to us; Information about your funding for our Future Astronaut Programme; Emergency Contact Information; Your digital contract with us; and Passport Information. We use this information including to: Administer your participation in our Future Astronaut Programme including your sub-orbital spaceflights; Send you mission updates; Send you our community newsletter; Carry out research regarding our commercial space flight programme and our Future Astronauts; Further the goal of making commercial spaceflight available to the public; and Manage, provide and administer our Future Astronaut experience. Process your Future Astronaut application; Take payment from you or give you a refund.
 
3 Information you provide when you inform us that you would like to be kept up-to-date about our mission including: Your contact information (e.g. full name; email address); Your age and nationality if you choose to provide it when signing up to our mission updates; and Information you may provide in response to any survey we request that you complete (e.g. your age or gender). We use this information, including to: Send you our regular mission updates and other newsletters and contact you about other developments such as our 'Small Step' or other programmes; Where we have permission to do so, communicate with you about products and services offered by companies within the Virgin group, and trusted partners; and Carry out research regarding our commercial spaceflight programme.
 

We also collect and process personal information as part of our Galactic Unite charitable programme which provides scholarships, mentoring and local community grants including across New Mexico and Southern California and occasionally in Europe. Further details of the information we collect and how we process it and for what purposes will provided to you if you apply to the programme.

We collect and use your information (as detailed above) for a variety of reasons.

We will use your personal information including where:

  • This is necessary to enter into or perform our contract with you – e.g. using your contact details and payment details to on-board you into the Future Astronaut Programme.

  • This is necessary to comply with legal or regulatory requirements – e.g. disclosure of information to law enforcement or for health and safety purposes.

  • This is necessary as in the public interest – e.g. verifying our individuals as part of the Future Astronaut Programme.

  • We have collected your consent – e.g. in order to send you direct marketing messages. You can withdraw your consent at any time by contacting us at:

     

    .

  • This is necessary for the purposes of our legitimate business interests (as set out in more detail below).

Some personal information is treated as falling into a special category (e.g. health/medical information and racial or ethnic origin). This information used to be known as sensitive personal data.

We may use your health and fitness, medical and racial or ethnic origin data where any one of the following applies:

  • We have your explicit consent for the relevant purpose;

  • This is necessary to protect your vital interests in an emergency or those of another person;

  • The relevant information has been made public by you;

  • This is necessary or in connection with legal claims or court proceedings

    .

We have a legitimate business interest in managing our business including:

  • Operating and understanding how our customers use our Site including assessing the number of visitors, posts, page views, reviews and followers in order to optimise future marketing campaigns (including web analytics);

  • Operating our commercial spaceflight programme and furthering the goal of making commercial spaceflight available to the public;

  • Understanding and responding to customer feedback and ideas;

  • Researching and analysing the engagement that our Future Astronauts want in the programme and how the programme experience can be improved for our Future Astronauts and potential Future Astronauts;

  • Administering our operations in an efficient and effective way, including by engaging with third party technology and other service providers;

  • Maintaining a public profile on both traditional and social media;

  • Ensuring network and information security;

  • Fraud prevention and detection;

  • Maintaining suppression records to ensure we have a record of your objection to direct marketing (if given);

  • Transfer of personal data in relation to the sale, transfer or re-organisation of all or part of our business and the acquisition of business; and

  • Further any other legitimate interests purposes disclosed to you at the time we collect your information.

If you would like further information on our legitimate interests as applied to your personal information, please contact us using the contact details above.

We need to collect certain types of information for compliance with legal requirements relating to our obligations. In certain circumstances, if this information is not provided we cannot agree to provide a product or service for you and we will inform you where this is the case.

Your personal information may also be processed if it is necessary on reasonable request by a law enforcement or regulatory authority, body or agency or in the defence of a legal claims or to protect and defend the legal rights, interests, and safety of Virgin Galactic, the Virgin group and their employees, agents, and contractors (including enforcing our contractual rights), users of our Site, and members of the public. We will not delete personal information if relevant to an investigation or a dispute. It will continue to be stored until those issues are fully resolved.

Information about criminal convictions

We will only collect information about criminal convictions via background screening and checks we undertake for potential Future Astronauts where you have provided consent or where we are otherwise permitted to do so. We will use information about criminal convictions and offences in the following ways:

  • assessing your suitability for our Future Astronaut Programme; and

  • where it is necessary to protect your interests, our interests and those of other Future Astronauts or to protect clients and other third parties from theft, fraud and similar risks.

We will keep your information for as long as it is reasonably necessary. It will depend on factors such as whether you have signed up to one of our research or Future Astronaut Programmes and whether you have consented to receive marketing. We will also retain your information as necessary to comply with legal, accounting or reporting requirements.

There are certain circumstances where we transfer your personal data to employees, contractors and to other parties.

  • We share information about you with other members of our affiliates, subsidiaries and group of companies so we can provide the best service across our group and for administrative, management, accounting and reporting purposes.

  • We also share your information with certain contractors, consultants or service providers. They may process your personal data for us e.g. if we use a marketing or sales agency. Other service providers include IT suppliers, payment processors, cloud hosting providers, database providers, backup and disaster recovery specialists, our trusted medical experts, and email providers. Our suppliers and service providers will be required to meet our standards on processing information and security. The information we provide them, including your information, will only be provided in connection with the performance of their function. They will not be permitted to use your information for any purposes other than those outlined in this Privacy Notice.

  • We also share your information with certain third parties (including group companies). We will do this either when we receive your consent or because we need them to see your information to provide products or services to you. These include anti-fraud databases and background screening agencies.

Your personal information may be transferred to other third party organisations in certain scenarios:

  • If we discuss selling or transferring part or all of our business – the information may be transferred to prospective purchasers under suitable terms as to confidentiality;

  • If we are reorganised or sold, information may be transferred to a buyer who can continue to provide services to you;

  • If we're required to by law, or under any regulatory code or practice we follow, or if we are asked by any public or regulatory authority – e.g. the Police; and

  • If we are defending a legal claim your information may be transferred as required in connection with defending such claim.

Your personal data may be shared if it is made anonymous and aggregated, as in such circumstances the information will cease to be personal data. We may aggregate the information that we collect about you and other individuals by removing any personal data that directly identifies a user and by combining this information. This aggregated information may be used for marketing, research and the development of and contribution to spaceflights knowledge, and financial or operational analysis and planning, and it may be shared with third parties, including business partners and group companies in order to, for example, carry out analyses and to enhance and improve the quality and delivery of our products and services.

When you make a payment through our site for the 'Small Step' programme this will be completed using our payment processor, Stripe. Stripe will collect and process your information as set out in the Stripe privacy notice https://stripe.com/gb/privacy . Stripe will be a data controller in relation to certain processing activities such as compliance with regulations or laws imposed directly on Stripe as a payment processor. Please review the Stripe privacy notice for further information on how Stripe will collect, process, use and disclose your personal data.

Your data will be transferred to and processed in the United States which does not have equivalent data protection laws to those applicable in Europe.

However, to ensure your personal information is properly protected in line with EU and UK data protection law, the transfer of this information is governed by a contract including Standard Contractual Clauses approved by the European Commission in accordance with Article 46(2)(c) of the General Data Protection Regulation.

We will only transfer data to jurisdictions outside the scope of the European Economic Area where the appropriate safeguards set out in applicable data protection law are in place.

If you would like to obtain copies of the regulator-approved Standard Contractual Clauses please contact us at privacy@virgingalactic.com.

If you are using the Site, have signed up to receive mission updates, or have applied to be/ are a Future Astronaut and are located in the EU, you have certain rights in relation to your information. The availability of these rights and the ways in which you can use them are set out below in more detail. Not all the personal data that is listed in this Notice may be subject to the rights below. We will tell you on a case-by-case basis if this is the case.

If you would like to exercise, or discuss, any of these rights, please contact us at Virgin Galactic, Attn: Privacy Policy Manager , 166 N. Roadrunner Parkway, Las Cruces, NM 88011or at privacy@virgingalactic.com with details of your request. Where we believe it is necessary to ensure that personal data is disclosed to appropriate individuals, we will ask you to provide an appropriate form of proof of your identity prior to responding to such request.

  • Access: you are entitled to ask us if we are processing your information and, if we are, you can request access to your personal information. This enables you to receive a copy of the personal information we hold about you and certain other information about it.

  • Correction: you are entitled to request that any incomplete or inaccurate personal information we hold about you is corrected.

  • Erasure: you are entitled to ask us to delete or remove personal information in certain circumstances. There are also certain exceptions where we may refuse a request for erasure e.g. where the personal data is required for compliance with law or in connection with claims.

  • Restriction: you are entitled to ask us to suspend the processing of certain of your personal information about you e.g. if you want us to establish its accuracy or the reason for processing it.

  • Transfer: you may request the transfer of certain of your personal information to another party.      

  • Objection: In addition, where we are processing your personal information based on our legitimate interests (or those of a third party) you may challenge this. We will consider your request in accordance with applicable data protection law. However, we may be entitled to continue processing your information based on the our legitimate interests or where this is relevant to legal claims we may make or are made against us. You also have the right to object where we are processing your personal information for direct marketing purposes on the basis of consent.

  • Automated decisions: you may contest any automated decision made about you where this has a legal or similar significant effect and ask for it to be reconsidered.

  • Communications: Please note that even if you unsubscribe to direct marketing messages, we still may need to send you communications relating to your use of the Site, where such communications are service or update messages, or regarding your requested transactions.

You also have a right to lodge a complaint with a supervisory authority, in particular in the Member State in the European Union where you are habitually resident where we are based or where an alleged infringement of Data Protection law has taken place. In the UK you can make a complaint to the Information Commissioner's Office (Tel: 0303 123 1113 or at www.ico.org.uk).

We use cookies that identify your browser or device. They collect and store information when you visit our Site about how you use it.

Our Site uses cookies and other similar technologies (as described below) to distinguish you from other users of our Site. This helps us to provide you with a good experience when you browse our Site. This also allows us to improve our Site and, where applicable, provide you with tailored content.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer or mobile device if you agree. Cookies contain information that is transferred to the hard drive of your computer or mobile device.

You can find more information about the types of cookies we use and the purposes for which we use them in the information below:

Strictly Necessary: These cookies are essential in order to enable you to browse our Site and use its features. The information collected by these cookies relate to the operation of our Site e.g. website scripting language and security tokens to maintain secure areas of our Site.

Performance / Analytics These cookies collect anonymous information about how you use our Site e.g. which pages you visit most often, whether you receive any error messages, and how you arrived at our Site. Information collected by these cookies is used only to improve your use of our Site and never to identify you.

Functionality: These cookies remember choices you make e.g. the country you visit our Site from, your language and any changes you have made to text size or other parts of web pages that you can customise, in order to improve your experience of our Site and to make your visits and use more tailored and enjoyable. The information these cookies collect may be anonymised and cannot be used to track your browsing activity on other websites.

Most internet browsers are automatically set up to accept cookies. However, if you want to refuse or delete any cookies (or similar technologies), please refer to the help and support area on your internet browser for instructions on how to block or delete cookies. Please note you may not be able to take advantage of all the features of our Site, including any personalised features, if you delete or disable cookies.

For more information on managing cookies, please go to www.allaboutcookies.org, or visit www.youronlinechoices.eu or http://www.aboutads.info which have further information about behavioural advertising and online privacy.

We are committed to keeping your personal information safe. We've got physical, technical and administrative measures in place to prevent unauthorised access or use of your information. Please note that no data transmission or storage can be guaranteed to be 100% secure, and we cannot guarantee or warrant the security of any information that you provide to us.

Our Site, newsletters, email updates and other communications may, from time to time, contain links to and from the websites of others including our partner networks, advertisers and other group companies and/or social networks as offered to you and supported by your browser.

The personal data that you provide through these websites is not subject to this Privacy Notice and the treatment of your personal data by such websites is not our responsibility. If you follow a link to any of these websites, please note that these websites have their own privacy notices which will set out how your information is collected and processed when visiting those websites. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy notices of entities through which you chose to share.

Our Site is intended for adults, and we do not knowingly collect information from children or other persons who are under 13 years old. If you are under 13 years old, you may not submit any personal information to us or subscribe for the services. If you believe we might have any personal information from or about a person under the age of 13, please contact us at privacy@virgingalactic.com.

General Data Protection Regulation (GDPR) – European Representative

Pursuant to Article 27 of the General Data Protection Regulation (GDPR), Virgin Galactic, LLC has appointed European Data Protection Office (EDPO) as its GDPR Representative in the EU. You can contact EDPO regarding matters pertaining to the GDPR:

-by using EDPO’s online request form: https://edpo.com/gdpr-data-request/

-by writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium

EU Representative Compliance Certificate

https://www.SmartCertificate.com/SmartCertificate/?1%7ccb6aff98-ef0b-4f62-b7ea-246b9eae34fc%7c4c2e37cb-3371-4725-86db-f5ceb20bf4e3

UK General Data Protection Regulation (GDPR) - UK Representative

Pursuant to Article 27 of the UK GDPR, Virgin Galactic, LLC has appointed EDPO UK Ltd as its UK GDPR representative in the UK. You can contact EDPO UK regarding matters pertaining to the UK GDPR:

- by using EDPO’s online request form: https://edpo.com/uk-gdpr-data-request/

- by writing to EDPO UK at 8 Northumberland Avenue, London WC2N 5BY, United Kingdom

UK Representative Compliance Certificate

https://www.SmartCertificate.com/SmartCertificate/?1%7cc6773295-ffb8-425e-9f88-82c68a5bbfb7%7c4c2e37cb-3371-4725-86db-f5ceb20bf4e3

This Notice will be changed from time to time.

If we change anything important about this Notice (the information we collect, how we use it or why) we will highlight those changes at the top of the Notice and provide a prominent link to it for a reasonable length of time following the change.

If you would like to access previous versions of this notice please click on the link to archived policies at the top of this page. Alternately you can contact us at: privacy@virgingalactic.com.

If you have any questions about this Notice please contact our Privacy Policy Manager at:

E-mail: privacy@virgingalactic.com.

Post: Virgin Galactic LLC, 166 N. Roadrunner Parkway, Las Cruces, NM 88011