Privacy & Cookies Policy

This policy explains how Aurelian Ltd collects, uses and protects your personal information when you visit aurelianltd.com or engage us for services. It also explains your rights over your data and how to exercise them.

1. Who we are

Aurelian Ltd is a UK company providing outsourced business services including HR, finance and bookkeeping, marketing, operations and admin, compliance and audit, and technology support.

• Company: Aurelian Ltd
• Registered office: 82 King Street, Manchester, Greater Manchester, England, M2 4WQ
• Company number: 12538366
• Email: info@aurelianltd.com

For the purposes of UK data protection law, Aurelian Ltd is the data controller for information collected through this website and in the course of our client relationships. Where we process personal data on behalf of a client as part of delivering a service, we act as a data processor and that processing is governed by our contract with that client.

2. Information we collect

Information you give us

When you contact us by email or through a form on this website, we collect the information you choose to provide. This typically includes your name, email address, telephone number, company name, the services you are interested in and the content of your enquiry.

Information we collect automatically

Like most websites, our web server records technical information each time a page is requested. This includes your IP address, browser type and version, device type, the page requested and the time of the request. This information is held in server logs and is used only to keep the site secure and running correctly.

Analytics information

If you agree to analytics cookies, we use Google Analytics to understand how the website is being used. This tells us which pages are visited, how people arrive at the site, roughly which part of the country they are in, and what type of device and browser they use. It is reported to us as aggregated statistics, not as a record of a named individual.

If you decline, no analytics cookies are set and nothing is sent to Google. Every part of this website works exactly the same either way. See section 4 for the detail.

Client information

If you become a client, we collect the information necessary to deliver the services you have engaged us for. The categories of information depend on the service and are set out in our engagement documentation. Where a service involves us handling personal data about your employees, customers or other third parties, we do so under your instructions as a processor.

Information we do not collect

We do not use social media tracking pixels on this website, and we do not build behavioural profiles of individual visitors. We do not sell your personal information, and we do not share it for other organisations' marketing. We do not knowingly collect information from children, and our services are not directed at them.

3. How we use your information, and our lawful basis

Under UK GDPR we must have a lawful basis for processing personal data. Ours are set out below.

Where we rely on consent, you may withdraw it at any time. Every marketing email includes an unsubscribe link, and you can also email us to opt out. Withdrawing consent does not affect processing carried out before you withdrew it.

4. Cookies and similar technologies

Cookies are small text files placed on your device by a website. Under the Privacy and Electronic Communications Regulations, we need your consent before setting any cookie that is not strictly necessary. That is why you are asked when you first arrive.

Until you choose, no analytics cookies are set and nothing is sent to Google. Declining costs you nothing — no content is hidden, and the contact form works either way.

Cookies that do not need consent

These are needed for the website to function or to record the choice you made about the others.

Analytics cookies — set only with your consent

Google Analytics is provided by Google Ireland Limited. Where data is processed outside the UK, Google relies on the safeguards described in section 6. IP addresses are shortened by Google before storage, so we never see your full IP address in our reports. We do not use Google Analytics to identify individual visitors, and we do not combine it with your enquiry.

Third-party services loaded by this website

Some parts of this website are delivered from third-party services. When your browser requests those files, that provider receives your IP address and basic technical information.

• Jotform — provides and processes the contact form on this website. When you submit an enquiry, the information you enter is transmitted to and stored by Jotform on EU infrastructure before it reaches us. Jotform acts as our processor under a written agreement. The form is treated as strictly necessary, so it is available to you whether or not you accept analytics cookies. See Jotform's privacy policy.
• Google Analytics — measures how the site is used. Loaded only after you consent, as set out above.
• unpkg — a content delivery network supplying a small scrolling library. It sets no cookies.

Changing your mind

You can change or withdraw your choice at any time using the consent option on this website, which reopens the same panel you saw on your first visit. Withdrawing consent stops any further analytics collection. It does not affect data already collected while your consent was in place.

Browser signals we respect

If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as a refusal. You will not be asked, and no analytics cookies will be set. We are not currently required to honour these signals in the UK; we do it because it is a clear statement of what you want.

Managing cookies in your browser

You can also block or delete cookies through your browser settings. Guidance for each major browser is available from the Information Commissioner's Office. Blocking cookies from this site will not stop any of it working, though you may be asked about your preferences again on your next visit.

5. Who we share your information with

We do not sell your personal information, and we do not share it for anyone else's marketing. We share it only in these circumstances:

• Jotform, which receives and stores contact form submissions on our behalf before they reach our mailbox.
• Google, which receives website usage data through Google Analytics, but only where you have consented to analytics cookies. If you decline, nothing is sent.
• Service providers who help us operate, such as our website host, email provider, accounting software and, where relevant, document storage. These providers act on our instructions and are bound by contract to protect your data.
• Professional advisers such as our accountants, insurers or legal advisers, where necessary.
• Regulators or law enforcement where we are legally required to disclose information.
• A purchaser if our business is sold or reorganised, subject to the same protections set out here.

6. Storage and international transfers

We aim to keep personal data within the UK or European Economic Area. Contact form submissions are handled by Jotform on EU infrastructure.

Some of our service providers operate internationally. Google Analytics data may be processed outside the UK, including in the United States. Where personal data is transferred outside the UK we rely on an adequacy decision, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate additional safeguards. In Google's case we also rely on the UK extension to the EU–US Data Privacy Framework and the data processing terms we have accepted with them.

If you would rather your data was not transferred in this way, decline analytics cookies. Nothing else on this website sends your information outside the EEA.

7. How long we keep it

• Enquiries that do not become work: up to 24 months from your last contact with us.
• Client records: for the duration of the engagement and 6 years afterwards, to meet our legal, tax and insurance obligations.
• Accounting records: 6 years from the end of the accounting period, as required by law.
• Marketing contacts: until you unsubscribe or ask us to stop.
• Analytics data: 14 months from your visit, after which Google deletes it automatically.
• Server logs: a short rolling period set by our hosting provider.

When a retention period ends we delete the information or anonymise it so it can no longer identify you.

8. Your rights

Under UK data protection law you have the right to:

• Ask what personal data we hold about you and receive a copy of it
• Have inaccurate information corrected
• Ask us to delete information where there is no good reason for us to keep it
• Ask us to restrict how we use your information while a concern is resolved
• Object to processing carried out on the basis of legitimate interests
• Ask us to transfer your information to another provider in a machine-readable format
• Withdraw consent at any time, where consent is our lawful basis

To exercise any of these rights, email info@aurelianltd.com. We will respond within one month. There is no charge, though we may ask you to confirm your identity before we release information.

9. Keeping your information secure

We use appropriate technical and organisational measures to protect personal data, including encrypted connections to this website, access controls on our systems, and limiting access to those who need it to do their job. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we take the protection of your information seriously and review our measures regularly.

10. Changes to this policy

We may update this policy to reflect changes to our services, our systems or the law. The date at the top shows when it was last revised. Where changes are significant, we will make that clear on this page.

11. Contact and complaints

If you have a question about this policy, or you are unhappy with how we have handled your information, please contact us first at info@aurelianltd.com so we can put it right.

You also have the right to complain to the UK's data protection regulator:

• Information Commissioner's Office
• Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline: 0303 123 1113
• ico.org.uk/make-a-complaint