Privacy Policy
Last updated: 15 June 2025
1. Introduction
("we", "us", "our") is committed to protecting the personal information of everyone who visits and uses aurelinqavessia.com (the "Website"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, with whom we share it, and what rights you have in relation to it.
Please read this policy carefully before using the Website. By continuing to browse or interact with the Website, you acknowledge that you have read and understood this policy.
2. Data Controller
The data controller responsible for your personal information is:
| Legal entity | |
|---|---|
| Registered address | |
| Company number | 16482735 |
| VAT number | GB 874 2631 95 |
| Privacy contact | privacy@aurelinqavessia.com |
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
3. Personal Data We Collect
We collect personal data in two main ways: information you provide to us directly, and information collected automatically when you use the Website.
3.1 Information You Provide to Us
When you contact us through the Website's enquiry form, send us an email, or otherwise communicate with us, we may collect:
- Your full name
- Your email address
- Your telephone number (if provided)
- The content of your message or enquiry
- Any other information you voluntarily include in your communication
3.2 Device and Usage Data
When you visit the Website, certain technical information is collected automatically by our hosting infrastructure and analytics tools. This may include:
- Your IP address (in truncated or anonymised form where possible)
- Browser type and version
- Operating system and device type
- Pages viewed and the order in which they were viewed
- The date and time of your visit
- The website or source that referred you to our Website
- Time spent on individual pages
3.3 Consent and Preference Data
If the Website presents a consent banner or preference centre relating to cookies or similar tracking technologies, we record the choices you make. This includes the date and time of your consent decision, the version of the policy presented to you, and the specific categories of processing you accepted or declined.
5. Purposes and Legal Bases for Processing
We only process your personal data where we have a valid legal basis to do so under the UK GDPR. The table below sets out each purpose, the data involved, and the applicable legal basis.
| Purpose | Data categories | Legal basis |
|---|---|---|
| Responding to your enquiries and communications | Contact data, message content | Legitimate interests: it is in our mutual interest to respond to your questions (Article 6(1)(f) UK GDPR) |
| Providing information about our services | Contact data | Legitimate interests (Article 6(1)(f) UK GDPR), or pre-contractual steps at your request (Article 6(1)(b) UK GDPR) |
| Maintaining the security and integrity of the Website | Device and usage data, IP addresses | Legitimate interests (Article 6(1)(f) UK GDPR) |
| Improving the Website and user experience | Device and usage data, analytics data | Consent (Article 6(1)(a) UK GDPR) where non-essential cookies are involved |
| Complying with legal obligations | Any relevant personal data | Legal obligation (Article 6(1)(c) UK GDPR) |
| Establishing, exercising or defending legal claims | Any relevant personal data | Legitimate interests (Article 6(1)(f) UK GDPR) |
Where we rely on legitimate interests as a legal basis, we have carried out a balancing assessment and are satisfied that our interests are not overridden by your rights and freedoms. You may request further information about these assessments by contacting us at privacy@aurelinqavessia.com.
6. Recipients and Disclosure of Personal Data
We do not sell, rent or trade your personal data to any third party. We may share your information with the following categories of recipients only to the extent necessary for the purposes described in this policy:
- Hosting and infrastructure providers: Companies that provide the servers, storage and related infrastructure on which the Website operates. These providers act as data processors on our behalf and are contractually bound to protect your data.
- Email and communication service providers: Platforms we use to receive and send correspondence arising from your enquiries.
- Analytics providers: Where analytics cookies are enabled with your consent, aggregated or anonymised data may be processed by our analytics platform.
- Professional advisers: Solicitors, accountants and other professional advisers where necessary to obtain advice or to comply with our legal obligations.
- Public authorities: We may disclose personal data to law enforcement agencies, regulators or courts where required to do so by law or in response to a lawful request.
All third-party processors who handle personal data on our behalf are required to process that data only on our documented instructions and to implement appropriate security measures.
6.1 International Transfers
We aim to keep personal data within the United Kingdom and the European Economic Area wherever possible. If any service provider processes data outside these territories, we ensure that an appropriate safeguard is in place, such as the UK International Data Transfer Agreement or UK adequacy regulations, before any transfer takes place.
7. Retention of Personal Data
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. Our general retention approach is as follows:
| Data category | Typical retention period |
|---|---|
| Enquiry and contact data | Up to 3 years from the date of your last communication with us, unless a longer period is required for legal or contractual reasons. |
| Device and usage logs (server logs) | Up to 12 months, after which logs are deleted or irreversibly anonymised. |
| Consent records | For as long as necessary to demonstrate compliance, typically up to 3 years from the date consent was recorded or last updated. |
| Financial and accounting records | 6 years from the end of the relevant financial year, in accordance with UK statutory requirements. |
When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you.
8. Security of Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or alteration. These measures include:
- Encrypted data transmission using TLS (Transport Layer Security) protocols
- Access controls restricting who within our organisation can access personal data
- Regular review of our information security practices
- Contractual security obligations imposed on all data processors
No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us promptly at privacy@aurelinqavessia.com.
9. Your Rights as a Data Subject
Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data. We will respond to any valid request within one calendar month of receipt, although we may extend this period by a further two months in cases of complexity or high volume, in which case we will notify you.
| Right | What it means |
|---|---|
| Right of access | You may request a copy of the personal data we hold about you and information about how we process it. This is commonly known as a Subject Access Request. |
| Right to rectification | You may ask us to correct any personal data that is inaccurate or to complete data that is incomplete. |
| Right to erasure | You may request that we delete your personal data in certain circumstances, for example where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. |
| Right to restriction of processing | You may ask us to suspend processing of your personal data in certain circumstances, for instance while we verify the accuracy of data you have contested. |
| Right to data portability | Where processing is based on your consent or on a contract with you and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format so that you can transfer it to another controller. |
| Right to object | You have the right to object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims. |
| Right to withdraw consent | Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal. |
| Right not to be subject to automated decision-making | You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects. We do not currently carry out such processing. |
To exercise any of these rights, please send a written request to privacy@aurelinqavessia.com. We may need to verify your identity before processing your request. We will not charge a fee for handling your request unless the request is manifestly unfounded or excessive.
10. Complaints
If you are unhappy with the way in which we have handled your personal data, we encourage you to contact us in the first instance so that we can try to resolve your concern. Please write to us at privacy@aurelinqavessia.com with details of your complaint.
If you remain dissatisfied after contacting us, you have the right to lodge a complaint with the United Kingdom's supervisory authority for data protection matters:
Information Commissioner's Office (ICO)Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
You also have the right to seek a judicial remedy in the courts if you believe your rights under the UK GDPR have been infringed.
11. Links to Third-Party Websites
The Website may contain links to external websites that are not operated or controlled by us. This Privacy Policy applies solely to aurelinqavessia.com. We are not responsible for the content or privacy practices of any linked third-party websites and encourage you to review the privacy policy of any site you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your personal data.
Continued use of the Website following the publication of any revised policy constitutes your acknowledgement of the updated terms.
13. Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or the way in which we process your personal data, please contact our privacy team using the details below:
Email: privacy@aurelinqavessia.com