Privacy Policy
Last updated: 26 June 2025
1. Introduction
("we", "us", "our") is committed to protecting the personal data of every person who visits or interacts with aurevionessella.com (the "Website"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you hold in relation to it.
Please read this policy carefully. By continuing to use the Website you acknowledge that you have read and understood its contents. If you do not agree with any part of this policy, please stop using the Website and contact us using the details in Section 11.
2. Data Controller
The data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 is:
| Legal entity | |
|---|---|
| Registered address | |
| Company number | 15847263 |
| VAT number | GB 842 7163 95 |
| Privacy contact | privacy@aurevionessella.com |
3. Personal Data We Collect
We collect personal data in the following categories.
3.1 Contact and Enquiry Data
When you submit a contact form, send us an email, or otherwise get in touch, we collect the information you provide, which may include:
- Your full name
- Your email address
- Your telephone number (if provided)
- The content of your message or enquiry
- Any attachments or additional information you choose to share
3.2 Device and Technical Data
When you visit the Website, our servers automatically record certain technical information, which may include:
- IP address
- Browser type and version
- Operating system
- Referring URL
- Pages viewed and time spent on each page
- Date and time of your visit
3.3 Cookie and Consent Data
When you visit the Website, we may place cookies or similar tracking technologies on your device. We also record the choices you make through our cookie consent mechanism, including the date, time and scope of the consent you give or withdraw. For full details of the cookies we use, please see Section 6 below.
3.4 Data You Provide Voluntarily
If you send us information through any other channel, such as postal correspondence or in person at our Harrogate address, we will collect and record the personal data contained in that communication to the extent necessary to handle your enquiry or fulfil our obligations to you.
4. Purposes and Legal Bases for Processing
UK GDPR requires us to have a lawful basis for processing your personal data. The table below sets out each purpose for which we process personal data together with the corresponding lawful basis.
| Purpose | Categories of data used | Lawful basis |
|---|---|---|
| Responding to your enquiries and communications | Contact and enquiry data | Legitimate interests (Article 6(1)(f) UK GDPR): it is in our mutual interest to handle your enquiry promptly and accurately. Alternatively, where a contract is being discussed or performed, performance of a contract (Article 6(1)(b)). |
| Operating and improving the Website | Device and technical data | Legitimate interests (Article 6(1)(f) UK GDPR): we have a legitimate interest in maintaining a functional, secure and user-friendly website. |
| Managing cookies and recording your consent preferences | Cookie and consent data | Consent (Article 6(1)(a) UK GDPR) for non-essential cookies. Legitimate interests for strictly necessary cookies that keep the Website operational. |
| Complying with legal obligations | Any data relevant to the legal obligation in question | Legal obligation (Article 6(1)(c) UK GDPR) |
| Establishing, exercising or defending legal claims | Any data relevant to the claim | Legitimate interests (Article 6(1)(f) UK GDPR) |
4.1 Legitimate Interests Assessment
Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms. We have concluded that our processing does not override those rights, because we process only the minimum data necessary, we apply appropriate security measures, and you can contact us at any time to object to such processing.
6. Recipients and Disclosure of Personal Data
We do not sell your personal data to third parties. We may share your personal data with the following categories of recipient, and only to the extent necessary for the relevant purpose:
- IT and hosting service providers: Companies that provide us with website hosting, email infrastructure and related technical services. These providers process data on our behalf under written contracts that require them to maintain appropriate security and confidentiality.
- Professional advisers: Solicitors, accountants and other advisers where necessary in connection with the conduct of our business or the handling of a legal claim.
- Regulatory and law enforcement authorities: Where we are required to disclose personal data by law, court order, or enforceable governmental request.
- Prospective buyers or successors: In the event that we sell or transfer all or part of our business, personal data may be disclosed to the prospective purchaser or their advisers, subject to appropriate confidentiality undertakings.
6.1 International Transfers
Where we transfer personal data outside the United Kingdom, we ensure that an appropriate safeguard is in place, such as the UK International Data Transfer Agreement (IDTA), standard contractual clauses approved by the Information Commissioner's Office (ICO), or a transfer to a country that benefits from UK adequacy regulations. You may request further information about the specific safeguards we apply by contacting us at the address in Section 11.
7. Data Retention
We retain your personal data for no longer than is necessary for the purposes for which it was collected, taking into account legal, regulatory, accounting and reporting requirements.
| Category of data | Typical retention period | Reason |
|---|---|---|
| Contact and enquiry data (enquiry not leading to a business relationship) | 12 months from the date of the last communication | To allow us to respond to follow-up queries and maintain records of past communications. |
| Contact and enquiry data (where a business relationship is established) | 6 years from the end of the relationship or last transaction | To comply with statutory limitation periods and tax or accounting obligations. |
| Device and technical (server log) data | Up to 12 months | Security monitoring and Website optimisation. |
| Cookie consent records | Up to 24 months from the date consent was recorded | Demonstrating compliance with our consent obligations. |
After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include, but are not limited to:
- Encryption of data in transit using TLS (Transport Layer Security)
- Access controls restricting who within our organisation can access personal data
- Regular review of our information security practices
- Due diligence on third-party service providers to ensure they maintain adequate security
While we take every reasonable precaution, no method of electronic transmission or storage is completely secure. If you believe that your personal data has been compromised, please contact us immediately at privacy@aurevionessella.com.
9. Your Data Subject Rights
Under UK GDPR, you have the following rights in relation to the personal data we hold about you. These rights are subject to certain conditions and exemptions as provided by law.
9.1 Right of Access
You have the right to request a copy of the personal data we hold about you, together with information about how we process it. We will respond to a valid request within one calendar month.
9.2 Right to Rectification
If the personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it without undue delay.
9.3 Right to Erasure
In certain circumstances, you have the right to ask us to delete the personal data we hold about you. This right applies, for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
9.4 Right to Restriction of Processing
You may ask us to restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have contested.
9.5 Right to Data Portability
Where we process your personal data on the basis of your consent or for the performance of a contract, and the processing is carried out by automated means, you have the right to receive the data in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where this is technically feasible.
9.6 Right to Object
You have the right to object at any time to our processing of your personal data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.
9.7 Rights Related to Automated Decision-Making
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. If this changes, we will update this policy and take all steps required by UK GDPR.
9.8 Right to Withdraw Consent
Where we process your personal data on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal. To withdraw consent, please use the cookie preference tool on the Website or contact us at privacy@aurevionessella.com.
9.9 How to Exercise Your Rights
To exercise any of the rights listed above, please send a written request to:
Email: privacy@aurevionessella.com
We will respond within one calendar month of receiving your request. If your request is complex or we receive a high volume of requests, we may extend this period by a further two months, in which case we will notify you within the initial one-month period and explain the reason for the delay. We may ask you to provide proof of identity before we fulfil your request.
10. Complaints
If you have any concerns about how we handle your personal data, we encourage you to contact us in the first instance so that we can try to resolve the matter:
Email: privacy@aurevionessella.comPost: ,
If you remain dissatisfied after contacting us, you have the right to lodge a complaint with the United Kingdom's supervisory authority for data protection matters:
Information Commissioner's Office (ICO)Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
Making a complaint to us or the ICO does not affect any right you may have to seek a judicial remedy through the courts.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make changes, we will update the "Last updated" date at the top of this page. Where changes are material, we will take reasonable steps to bring them to your attention, such as by displaying a notice on the Website. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the way in which we process your personal data, please contact us:
Email: privacy@aurevionessella.com