Legal
Privacy & Cookies Policy
This policy explains how Aurelian Ltd collects, uses and protects your personal information when you visit aurelianltd.com or engage us for services. It also explains your rights over your data and how to exercise them.
1. Who we are
Aurelian Ltd is a UK company providing outsourced business services including HR, finance and bookkeeping, marketing, operations and admin, compliance and audit, and IT support.
- Company: Aurelian Ltd
- Registered office: 82 King Street, Manchester, Greater Manchester, England, M2 4WQ
- Company number: 12538366
- Email: info@aurelianltd.com
For the purposes of UK data protection law, Aurelian Ltd is the data controller for information collected through this website and in the course of our client relationships. Where we process personal data on behalf of a client as part of delivering a service, we act as a data processor and that processing is governed by our contract with that client.
2. Information we collect
Information you give us
When you contact us by email or through a form on this website, we collect the information you choose to provide. This typically includes your name, email address, telephone number, company name, the services you are interested in and the content of your enquiry.
Information we collect automatically
Like most websites, our web server records technical information each time a page is requested. This includes your IP address, browser type and version, device type, the page requested and the time of the request. This information is held in server logs and is used only to keep the site secure and running correctly.
Client information
If you become a client, we collect the information necessary to deliver the services you have engaged us for. The categories of information depend on the service and are set out in our engagement documentation. Where a service involves us handling personal data about your employees, customers or other third parties, we do so under your instructions as a processor.
Information we do not collect
We do not use advertising networks, social media tracking pixels, or behavioural profiling on this website. We do not knowingly collect information from children, and our services are not directed at them.
3. How we use your information, and our lawful basis
Under UK GDPR we must have a lawful basis for processing personal data. Ours are set out below.
| What we do | Lawful basis |
|---|---|
| Respond to your enquiry and provide information you have asked for | Legitimate interests — responding to someone who has contacted us |
| Prepare proposals, quotes and scoping documents | Steps taken at your request prior to entering a contract |
| Deliver the services you have engaged us for, and administer the relationship | Performance of a contract |
| Keep accounting records, meet tax obligations and comply with regulatory duties | Legal obligation |
| Keep our website secure and diagnose technical faults | Legitimate interests — security and reliability of our systems |
| Send marketing emails about our services | Consent, or legitimate interests where you are an existing client and the message relates to similar services |
Where we rely on consent, you may withdraw it at any time. Every marketing email includes an unsubscribe link, and you can also email us to opt out. Withdrawing consent does not affect processing carried out before you withdrew it.
4. Cookies and similar technologies
In short: this website does not use analytics, advertising or tracking cookies. We do not build a profile of you, and we do not sell or share your browsing data.
Cookies are small text files placed on your device by a website. Under the Privacy and Electronic Communications Regulations, we only need your consent for cookies that are not strictly necessary. We do not currently set any such cookies on this website.
Cookies this website may set
| Cookie | Purpose | Type |
|---|---|---|
| WordPress session and security cookies | Set only if you log in to the website as an administrator or contributor. They keep you signed in and protect forms against cross-site request forgery. They are not set for ordinary visitors. | Strictly necessary |
| Preference storage | Your browser may store a small amount of data locally to remember whether you have dismissed the contact prompt during your visit. This stays on your device and is not transmitted to us. | Strictly necessary |
Third-party services loaded by this website
Some parts of this website are delivered from third-party services. When your browser requests those files, that provider receives your IP address and basic technical information. These providers do not set tracking cookies through our site.
- Jotform — provides and processes the contact form on this website. When you submit an enquiry, the information you enter is transmitted to and stored by Jotform on EU infrastructure before it reaches us. Jotform acts as our processor under a written agreement. See Jotform's privacy policy.
- unpkg — a content delivery network supplying a small scrolling library.
Managing cookies
You can block or delete cookies through your browser settings. Guidance for each major browser is available from the Information Commissioner's Office. Because we do not rely on non-essential cookies, blocking them will not affect how this website works.
5. Who we share your information with
We do not sell your personal information, and we do not share it for anyone else's marketing. We share it only in these circumstances:
- Jotform, which receives and stores contact form submissions on our behalf before they reach our mailbox.
- Service providers who help us operate, such as our website host, email provider, accounting software and, where relevant, document storage. These providers act on our instructions and are bound by contract to protect your data.
- Professional advisers such as our accountants, insurers or legal advisers, where necessary.
- Regulators or law enforcement where we are legally required to disclose information.
- A purchaser if our business is sold or reorganised, subject to the same protections set out here.
6. Storage and international transfers
We aim to keep personal data within the UK or European Economic Area. Some of our service providers operate internationally, and where personal data is transferred outside the UK we rely on an adequacy decision, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate additional safeguards.
7. How long we keep it
- Enquiries that do not become work: up to 24 months from your last contact with us.
- Client records: for the duration of the engagement and 6 years afterwards, to meet our legal, tax and insurance obligations.
- Accounting records: 6 years from the end of the accounting period, as required by law.
- Marketing contacts: until you unsubscribe or ask us to stop.
- Server logs: a short rolling period set by our hosting provider.
When a retention period ends we delete the information or anonymise it so it can no longer identify you.
8. Your rights
Under UK data protection law you have the right to:
- Ask what personal data we hold about you and receive a copy of it
- Have inaccurate information corrected
- Ask us to delete information where there is no good reason for us to keep it
- Ask us to restrict how we use your information while a concern is resolved
- Object to processing carried out on the basis of legitimate interests
- Ask us to transfer your information to another provider in a machine-readable format
- Withdraw consent at any time, where consent is our lawful basis
To exercise any of these rights, email info@aurelianltd.com. We will respond within one month. There is no charge, though we may ask you to confirm your identity before we release information.
9. Keeping your information secure
We use appropriate technical and organisational measures to protect personal data, including encrypted connections to this website, access controls on our systems, and limiting access to those who need it to do their job. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we take the protection of your information seriously and review our measures regularly.
10. Changes to this policy
We may update this policy to reflect changes to our services, our systems or the law. The date at the top shows when it was last revised. Where changes are significant, we will make that clear on this page.
11. Contact and complaints
If you have a question about this policy, or you are unhappy with how we have handled your information, please contact us first at info@aurelianltd.com so we can put it right.
You also have the right to complain to the UK's data protection regulator:
- Information Commissioner's Office
- Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Helpline: 0303 123 1113
- ico.org.uk/make-a-complaint