Privacy Policy
Table of contents
- Introduction
- Personal information we collect and purposes
- Categories of sensitive personal information collected or processed
- Sources of personal information
- Disclosure of information to third parties
- Reasons why we collect, use, retain and disclose personal information
- Data security, integrity and retention
- Social media plug-ins
- Third party links and use of your information
- Do we sell your information?
- Notice of right to opt out of the selling and sharing of your information
- Opt-out preference signals
- Limiting the use or disclosure of sensitive personal information
- U.S. consumer privacy rights
- European Union and French residents
- How to exercise your data subject rights
- Co-branded services
- Third party vendors
- Business transfers
- Compliance with law and safety
- External links
- Passwords
- Contact information
- Children's privacy
- How we protect the information that we collect
- Consent to terms and conditions
- Changes to our Privacy Policy
- Consumers with disabilities
- How to contact us
Introduction
This Privacy Policy explains how HEICO Corporation, its subsidiaries and affiliates, including EXXELIA (also referred to as "we", "us", "our" or "HEICO") use any personal information we collect from or about you, through our interactions with you, and through our products and services, including this website.
Whenever you visit our website, we will collect some information from you automatically simply by you visiting and navigating through this site, and some voluntarily when you submit information using a form on the website, subscribe to our newsletter or marketing communications, request information about our products or services, or use any of the other interactive portions of our website.
Our Privacy Policy applies to all of the services offered by HEICO and products and services offered on other sites, but excludes services that have separate privacy policies that do not incorporate this Privacy Policy.
The meaning of "personal information" may be defined based on your place of residence. In this policy, it means any information that can reasonably be used to identify an individual.
This policy applies to "Consumers" as defined under various U.S. state consumer privacy laws, and all laws implementing, supplementing or amending the foregoing, including regulations promulgated thereunder (collectively, "U.S. Privacy Laws"). It also applies to data subjects protected by Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and by applicable French data protection law.
By accessing or using this website, you consent to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not consent to the same, please do not access or use this website. We may modify this Privacy Policy at any time and therefore recommend that you periodically review this page.
This policy does not apply to information collected from or about job applicants regarding their application for employment or candidacy. It does not apply to our current and former employees and their family members, dependants and beneficiaries. If you are a current or former employee of the Company, or a family member, dependant or beneficiary of any of our current or former employees, you may request access to our Employee Privacy Policy by sending an email to [email protected].
Personal information we collect and purposes
We collect information about you to effectively operate our website, to provide information to you about our products and services, and in certain cases to manage our relationship with you. We may also collect personal information when you voluntarily submit it to us, for example through a website contact form or by email. We may also collect certain information from public sources or by automated means when you visit our website, such as the number of visitors and pages accessed. We collect this information through various means such as cookies, web beacons and IP addresses. Please see our Cookie Policy for further information on the data collection and tracking technologies we use.
The table below explains the categories of information we collect and the purposes for which we use them. Please note that we may use any or all of this information to comply with the law, detect or prevent fraud, and defend our legal rights.
Categories of personal information we collect | Purposes of use |
Business contact information — for example: company name, your name, business email address, job title and other professional contact details. | Build, maintain and manage business relationships; provide and support our goods and services; respond to enquiries and communicate with you; send you marketing communications; administer contracts and business transactions. |
Contact information and account registration — for example: name, email address, postal address, telephone number, account user name and password, account credentials, business contact information, and any information you may provide to us at an event or in person. | Create, administer and secure your account; provide and improve goods and services; personalise your experience; communicate with you regarding your account, transactions and support requests; send you marketing communications; build and manage business-to-business relationships; protect our services and properties; detect, prevent and investigate fraud, security incidents and misuse of our services. |
Transaction information — for example: payment information, billing information, purchase history, order details, shipping or delivery address, and records of products or services purchased. | Provide and improve goods and services; process transactions and payments; fulfil orders; personalise your experience; maintain business records; send you marketing communications; communicate regarding purchases and customer support; build and manage business-to-business relationships; protect our services and properties; detect, prevent and investigate fraud and misuse. |
Research, communication and feedback — for example: enquiries, comments sent through online forms and social media platforms, by email, over the phone, by mail or in surveys, and support requests. | Respond to enquiries and provide customer support; improve our products, services and customer experience; conduct research and analytics; provide and improve goods and services; personalise your experience; build and manage business-to-business relationships. |
Employment information — for example: employment status, employment history, education history, curriculum vitae, information about security clearance where necessary, and other personal information submitted by job applicants. | Process employment applications; provide and support our goods and services. |
Audio, video and visual information — for example: audio recordings of a customer service call, voicemail messages, and security video footage if you visit one of our properties. | Provide customer support; maintain the security of our personnel, facilities, systems and property; investigate incidents and enforce our policies; protect our services and properties; comply with legal obligations. |
Device, technical and online activity information — for example: IP address, cookie identifiers, browser type and language, browser and device identifiers, operating system, platform type, device type, advertising and app identifiers, website usage information, log files and similar technical information. | Provide and improve goods and services; operate, maintain, secure and improve our websites, applications and services; authenticate users and maintain account security; analyse website performance and usage trends; personalise content and user experience; detect, prevent and investigate fraud, cybersecurity threats and other unauthorised activity; protect our services and properties; comply with legal obligations. |
Inferences — for example: profiles or characteristics we derive from the other categories of information above to reflect your preferences, characteristics, behaviour or attitudes, including the identification of the organisation from which you visit our website. | Personalise your experience; improve our products, services and customer experience; conduct research and analytics; send you marketing communications tailored to your interests; build and manage business-to-business relationships; detect, prevent and investigate fraud, security incidents and misuse of our services; protect our services and properties. |
Categories of sensitive personal information collected or processed
The following are categories of sensitive personal information the Company may collect from or about consumers:
- Personal identifiers (name, email address, postal address, telephone number).
- Account information (your account log-in, in combination with any required security or access code, password, or credentials allowing access to the account).
- Protected classifications (racial or ethnic origin, religious or philosophical beliefs, union membership, or sexual orientation).
- Geolocation data (IP address and/or GPS location, latitude and longitude).
- Contents of personal communications (contents of mail, email and text messages where the Company is not the intended recipient).
- Personal data revealing race, racial or ethnic origin, religious beliefs, sex, sexual orientation, gender, age, military status, familial status, disability, or medical, mental or physical health condition or diagnosis.
Personal information does not include:
- Publicly available information from government records.
- Information that a business has a reasonable basis to believe is lawfully made available to the general public by the consumer, independent contractor or applicant, or from widely distributed media.
- Information made available by a person to whom the consumer, independent contractor or applicant has disclosed the information, if they have not restricted it to a specific audience.
- De-identified or aggregated information.
Sources of personal information
We may collect your personal information from the following sources:
- You, the consumer, when you visit the website and voluntarily submit information through forms on the website or social media, when you visit any of our physical locations, or when you purchase or enquire about any of our products or services.
- Our employees, contractors, vendors, suppliers, guests, visitors, other consumers and customers, based on your interactions with them.
- Our affiliated entities, including parent entities, subsidiaries and affiliated companies.
- Cookies and similar technologies that automatically collect information about our website visitors.
- Surveillance cameras at our physical locations.
- Business data providers and business contact enrichment services.
- Social media platforms.
- Company systems, networks, software applications and databases you log into or use.
- Third-party customer databases.
Disclosure of information to third parties
We will not transfer your personal information to any third party without seeking your consent, except in the following limited circumstances:
- Financial institutions.
- Government agencies.
- Promotional and fulfilment vendors.
- Marketing, tracking and retargeting vendors, and vendors that support managing or hosting the website.
- Communication providers and vendors that facilitate, manage and send or receive communications on our behalf via email, text message or telephone.
- Transaction support vendors.
- Behaviour analytics vendors.
- Social media platforms (for example LinkedIn, X/Twitter, Reddit).
- Ad trackers (for example Google Ads).
- Marketing agencies.
- Payment recovery services.
- Data collection and processing providers.
- Consulting and investigation firms, including HR consultants, safety consultants and workplace investigators.
- Security and risk management vendors, including IT, cybersecurity and privacy vendors and consultants.
- Insurance carriers, administrators and brokers.
- Corporate customers, meaning an entity, as opposed to a natural person, that purchases, leases or finances any of our products or services.
- Distributors and sales representatives within our authorised sales network.
- Affiliates, including parent entities, subsidiaries and affiliated entities.
- Legally required disclosures.
A third party's use of the personal information we transfer to them is only permissible for the purpose for which it was transferred. This information sharing may help us respond to your enquiry, manage our relationship with you and comply with legal obligations.
We may also disclose your personal information (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce your agreements with us, including this Privacy Policy; and (3) to respond to claims that your use of the website violates any third-party rights.
Reasons why we collect, use, retain and disclose personal information
We may collect, use and disclose your personal information for any of the following purposes:
- To fulfil or meet the purpose for which you provided the information, or a purpose reasonably associated with the context in which you provided it.
- To provide you or our customers with the requested products or services.
- To process, complete and maintain records of transactions.
- To respond to consumer enquiries, including requests for information, online customer support and telephone calls.
- To provide interest-based and targeted advertising.
- To comply with our contractual obligations to our marketing partners and vendors.
- To engage in corporate transactions, including mergers, acquisitions and joint ventures, as well as due diligence in proposed or pending corporate transactions.
- To respond to claims that your use of the website violates any third-party rights.
- To contact you by email, telephone, mail or other equivalent forms of communication regarding updates or informative communications related to the functionalities, services or other information you requested.
- To improve user experience on our website and client portals.
- To understand the demographics and professional profile of our website visitors.
- To detect security incidents.
- To debug, identify and repair errors that impair existing intended functionality of our website.
- To protect against malicious or illegal activity and prosecute those responsible.
- To verify and respond to consumer requests.
- To prevent identity theft.
- To improve our website.
- For testing, research, analysis and product development.
- As necessary or appropriate to protect the rights, property or safety of us, our clients or others.
- To comply with applicable law, regulation, court order or other legal process.
- To personalise your experience with, and tailor the content of, our websites, products, services and communications.
- To create, administer and secure your account, and to authenticate users and maintain account security.
- To send you marketing communications regarding our products, services and events, beyond interest-based and targeted advertising.
- To build, maintain and manage business and business-to-business relationships, and to administer contracts and business transactions.
- To operate, maintain, secure and improve our websites, applications and services generally.
- To analyse website and service performance and usage trends.
- To develop and apply inferences or profiles about you, and to provide information about the reasons for, and your options regarding, such profiling.
- To investigate incidents and enforce our policies and agreements.
- To provide co-branded services and other joint offerings with our business partners.
- To operate and improve our business generally, including business operations and service improvement.
Data security, integrity and retention
We are committed to maintaining the security, integrity and confidentiality of your information. We have implemented technical, administrative and physical security measures designed to protect your information from unauthorised access, disclosure, use and modification. Please be aware that no security measures are perfect or impenetrable and we cannot ensure or warrant the security of any information you transmit to us; you do so at your own risk.
We will retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including providing the products and services you have requested, maintaining our business relationship with you, complying with applicable legal, regulatory, tax, accounting or reporting obligations, resolving disputes, enforcing our agreements and protecting our legal rights. When personal information is no longer needed for these purposes, we will delete or anonymise it, unless applicable law requires or permits a longer retention period.
Social media plug-ins
Our website may feature plug-ins for easy sharing and following of our social media pages, including LinkedIn, X (formerly Twitter) and other social media services. Being on our website does not automatically result in sharing data on these social media networks. These plug-ins remain inactive until clicked upon. Once clicked, you will be taken to the social media site, which has its own privacy statement. Your use of these third-party platforms is governed by their respective privacy notices and terms of service. We encourage you to review those policies before interacting with any social media feature.
Third party links and use of your information
Our website may contain links to other websites that we do not operate. This Privacy Policy does not address the privacy policies or other practices of any third parties, including any third party operating any website or service accessible via a link on this website. We are not responsible for the content, policies or practices of any third-party websites, applications or services, even if they are accessible through links on our website. Your interactions with those third parties are governed by their own terms and privacy notices. We strongly advise you to review the privacy policy of every site you visit.
The inclusion of a link to a third-party website or service does not imply our endorsement of, or affiliation with, that third party or its products or services.
Do we sell your information?
We do NOT and will not sell or share your personal information in exchange for monetary consideration. However, certain uses of cookies and similar tracking technologies described in our Cookie Policy may constitute a "sale" or "sharing" of personal information for other valuable consideration under certain U.S. state privacy laws.
Where that is the case, it may occur for the following business or commercial purposes:
- Marketing and advertising.
- Personalisation and user experience.
- Analytics and performance measurement.
- Business operations and service improvement.
Other than these exceptions, we do not and will not disclose your personal information to any third party in exchange for monetary or other valuable consideration, nor share your personal information for cross-context behavioural advertising.
Notice of right to opt out of the selling and sharing of your information
Depending on your place of residence, you may have the right to tell us NOT to sell or share your personal information. You have the full and free right to opt out of our disclosure of your personal information to any third parties where that disclosure constitutes "selling" or "sharing" as defined by specific state laws. You may exercise your right to opt out without fear of discrimination.
Because cookies and similar tracking technologies are the only method by which we may "sell" or "share" personal information, you can exercise this right directly through our cookie preference centre, which is accessible from every page of this website via the cookie preferences button. Rejecting all non-essential cookies can be done with a single click.
You may also use a Global Privacy Control (GPC) signal. We process opt-out preferences from GPC signals which are in formats commonly used and recognised by businesses, such as an HTTP field header. A GPC signal opt-out applies only to the browser you are using on your device; it does not apply to other browsers or devices on which GPC is not activated, nor to offline sales.
If you are unable to submit an opt-out through any of the above methods, please email us at [email protected] or write to EXXELIA, CityLights, 204 Rond-Point du Pont de Sèvres, 92100 Boulogne-Billancourt, France, Attn: Privacy Request.
You may have an authorised agent submit a request on your behalf. To do so, you must provide that agent with written permission signed by you, except when using an opt-out preference signal. The authorised agent may contact us at the email or postal address set out in this policy. We maintain the right to deny any request from an authorised agent that does not submit sufficient proof of authorisation.
A request to opt out need not be a verifiable consumer request. However, we may deny a request to opt out if we have a good faith, reasonable and documented belief that the request is fraudulent. If we deny your request, we will inform you of our decision and explain why we believe the request to be fraudulent.
Opt-out preference signals
Opt-out preference signals provide consumers with a simple and easy-to-use method by which to exercise the right to opt out of the selling and sharing of their information. Global Privacy Control (GPC) and Universal Opt-Out Mechanisms (UOOM) are user-enabled opt-out preference signals which can communicate a "do not sell or share" request on behalf of the person or device.
We will process opt-out preferences from GPC and UOOM signals which are in formats commonly used and recognised by businesses. We treat a consumer's use of GPC or UOOM as a valid request to opt out of the selling and sharing of information for that browser. We do not currently connect browser use to particular consumers and, as such, you will need to use GPC or UOOM on all browsers through which you access our website, and to use our contact details to opt out of offline processing.
Note that this website does not load any non-essential technology before you provide affirmative consent, regardless of whether a GPC or UOOM signal is present.
Do Not Track (DNT) is a privacy preference that users can set if they do not want web services to collect information about their online activity. We do not respond to DNT signals or other mechanisms, with the exception of GPC and UOOM. We encourage users who have DNT enabled to use GPC or UOOM.
Limiting the use or disclosure of sensitive personal information
We do not use or disclose your sensitive personal information for purposes that give rise to a right to limit the use and disclosure of sensitive personal information under any applicable law.
U.S. consumer privacy rights
Under applicable U.S. Privacy Laws, and depending on your state of residence, consumers may have the following rights, which can be exercised directly or, in certain cases, through an authorised agent.
Right | Description |
Right to Know | You may have the right to request: (1) the categories of personal information we have collected about you; (2) the categories of sources from which it was collected; (3) the business or commercial purpose for collecting, selling or sharing it; (4) the categories of third parties with whom we share or have shared it; (5) as applicable, the categories of personal information sold or shared and the categories of third parties to whom it was sold or shared; (6) the categories of personal information disclosed for a business purpose and the categories of persons to whom it was disclosed; (7) a list of the specific third parties to whom we sell personal data; and (8) the reasons behind any profiling decisions made about you, the data used, and the actions you can take to secure a different decision in the future. |
Right to Access | You may have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use. |
Right to Portability | You may have the right, in certain circumstances, to request the transfer of your personal information to another person or entity. |
Right to Confirm | You may have the right to confirm whether we are processing your personal information and to access it. |
Right to Delete | You may have the right to request that we delete personal information we collected from you, subject to certain exceptions. |
Right to Correct | You may have the right to request that we correct inaccurate personal information that we maintain about you. |
Right to Opt Out | You may have the right to opt out of certain uses or disclosures of your personal information, including opting out of the selling of your personal information or the sharing of such information for cross-context behavioural advertising purposes. |
Right to Limit Sensitive Personal Information Processing | You may have the right to direct businesses to limit their use and disclosure of sensitive personal information if it is used or disclosed beyond certain internal business purposes. |
Right to Non-Discrimination | You have the right not to be discriminated or retaliated against for exercising any of the above rights. |
Right to Appeal | You may have the right to appeal our refusal to take action on a request. |
Nevada residents
If you are a resident of the State of Nevada, Chapter 603A of the Nevada Revised Statutes permits you to opt out of future sales of certain covered information that a website operator has collected or will collect about you. To make such a request, please email [email protected] and mention that you are making a request pursuant to Nevada law.
European Union and French residents
EXXELIA is committed to respecting the privacy of internet users and undertakes that the collection and processing of personal information is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and with all applicable provisions of French data protection law.
If you are located in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict and object to the processing of your personal data, the right to data portability, and the right to withdraw your consent at any time where processing is based on consent. Withdrawing your consent does not affect the lawfulness of processing carried out before that withdrawal.
To exercise these rights, please use the contact details set out in this policy.
In the event of an unsatisfactory response, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL): www.cnil.fr/fr/plaintes
International (cross-border) transfers of personal data
HEICO operates on a global basis. Accordingly, we may transfer the personal information we collect to other countries where we do business, which may not have the same data protection laws as the country in which you originally provided the data. Where personal data is transferred outside the European Economic Area, we implement appropriate safeguards in accordance with applicable legal requirements, such as the European Commission's standard contractual clauses, in order to provide adequate protection for the transfer.
How to exercise your data subject rights
If you would like to access, receive a copy of, port to another entity, review, update, rectify, restrict or delete any personal information we hold about you, withdraw any consent you provided to us to process your data, or exercise any other data subject right available to you, email [email protected] or write to EXXELIA, CityLights, 204 Rond-Point du Pont de Sèvres, 92100 Boulogne-Billancourt, France, Attn: Privacy Request.
In order to comply with your request, we may ask you to verify your identity and provide additional details related to your request. Specifically, we will ask you to verify information that can be used to link your identity to particular records in our possession, which depends on the nature of your relationship and interaction with us. This process may require us to request additional personal information from you, including your first name, last name, email address, telephone number, state or province of residence and country. During verification, we will only request the minimum personal information necessary to correctly identify you for the purpose of fulfilling your request. We will respond to you as quickly as possible and in accordance with applicable law.
Please note that if you do not allow us to collect or process the required personal information, or if you withdraw your consent, you may not be able to access or use the services for which your information was sought. If we are unable to comply with all or part of your request, we will explain the reasons for declining.
Designated authorised agent
Depending on your place of residence, you may have the right to designate an authorised agent to submit a request on your behalf. To do so, you must either (a) execute a valid, verifiable and notarised power of attorney, or (b) provide other written, signed authorisation that we can verify. We maintain the right to deny any request from an authorised agent that does not submit sufficient proof of authorisation.
Co-branded services
From time to time, we may enter into an arrangement with another company that is not owned by or affiliated with us to provide additional features on the website. These arrangements may include business partners, sponsors and co-branded online services. Any information, including personal information, that you provide on one of these co-branded services may be shared with these partners. By participating in activities or providing your information on these co-branded services, you consent to our providing your information to those partners. Separate privacy policies may apply to those partners' use of your personal information.
Third party vendors
We may use other companies and individuals to perform certain functions on our behalf. Examples include administering email services and running special promotions. Such parties only have access to the personal information needed to perform these functions and may not use or store the information for any other purpose.
Business transfers
In the event we sell or transfer a particular portion of our business assets, information of consumers, contractors and applicants may be one of the business assets transferred as part of the transaction. If substantially all of our assets are acquired, such information may be transferred as part of the acquisition.
Compliance with law and safety
We may disclose specific personal information and sensitive personal information based on a good faith belief that such disclosure is necessary to comply with or conform to the law, or that such disclosure is necessary to protect our employees or the public.
External links
Our website contains links to other sites. We are not responsible for the privacy practices or the content of such websites. To help ensure the protection of your privacy, we recommend that you review the privacy policy of any site you visit via a link from our website.
Passwords
Any personal data record created through registration with our website can only be accessed with the unique password associated with that record. To protect the integrity of the information contained in that record, you should not disclose or otherwise reveal your password to third parties.
Contact information
If you are a California resident and would like to exercise your rights under the California Consumer Privacy Act, email [email protected] or write to EXXELIA, CityLights, 204 Rond-Point du Pont de Sèvres, 92100 Boulogne-Billancourt, France, Attn: Privacy Request.
Please include a detailed description of the specific content or information you wish to access, review, update, rectify or delete. In order to comply with your request, we may ask you to verify your identity. We will respond to you as quickly as possible.
Children's privacy
We do not intentionally collect information on anyone under the age of 13.
How we protect the information that we collect
The protection of the information we collect about visitors to this website is of the utmost importance to us and we take every reasonable measure to ensure that protection, including:
- We use commercially reasonable tools and techniques to protect against unauthorised access to our systems.
- We restrict access to private information to those who need such access in the course of their duties.
- We keep automatically collected data and voluntarily collected data separate at all times.
- We use internal encryption on data stores that house voluntarily captured data.
Consent to terms and conditions
By using this website, you consent to all terms and conditions expressed in this Privacy Policy.
Changes to our Privacy Policy
We keep our Privacy Policy under regular review and we will place any updates on this web page. The date of the last update is posted at the top of this section. We encourage you to check our website frequently to see the current Privacy Policy in effect and any changes that may have been made. If we make material changes to this Privacy Policy, we will post the revised policy and the revised effective date on this website.
Consumers with disabilities
This policy is in a form that is accessible to consumers with disabilities.
How to contact us
For any questions about this Privacy Policy or our privacy practices, email [email protected] or write to EXXELIA, CityLights, 204 Rond-Point du Pont de Sèvres, 92100 Boulogne-Billancourt, France, Attn: Privacy Request. You may also contact HEICO Corporation at [email protected] or at 3000 Taft Street, Hollywood, FL 33021, USA, Attn: Privacy Request.
This privacy policy was last updated on 27 August 2026.
