Privacy Policy

This notice explains how Aurion Labs Ltd handles personal data when you visit aurionlabs.io or contact us. We collect very little, and we say exactly what below.

1. Who we are

Aurion Labs Ltd ("Aurion Labs", "we", "us", "our") is the controller of the personal data described in this notice.

Registered in England and Wales, company number 13436046
Based in Milton Keynes, United Kingdom
Email: hello@aurionlabs.io
Phone: +44 7832 617626

We have not appointed a Data Protection Officer because we are not required to. For any privacy question, email us at the address above.

2. What we collect and where it comes from

Information you send us. Our contact and white-label partner forms do not submit anything to our servers. When you use them, your own email client opens with a pre-filled email addressed to hello@aurionlabs.io. We receive that information only if you choose to send the email. The same applies when you email or phone us directly. This usually includes:

your name, email address and, if you give it, phone number, company and job title
the content of your message, such as project details, budget or timescales
anything else you choose to include

Call bookings. If you book a call through Calendly, we receive the booking details you enter there: your name, email address, the time you selected and any notes you add.

Server access logs. Our hosting provider automatically records standard access logs when any page is requested. These contain your IP address, browser user agent, the URL requested and a timestamp.

What we do not collect. The site does not use analytics, advertising or tracking pixels, and it does not set cookies. Fonts are hosted on our own server, so your browser does not contact a third-party font service. We do not use browser storage to track you.

3. Why we use your data and our lawful basis

Purpose	Data	Lawful basis
Replying to enquiries and discussing a potential project or partnership	Contact details, message content	Legitimate interests (responding to business enquiries); or steps prior to entering a contract at your request
Scheduling and holding calls booked through Calendly	Name, email address, booking time, notes	Legitimate interests (arranging the meeting you asked for); or steps prior to entering a contract at your request
Delivering a client engagement or partner arrangement	Contact details of client or partner staff, project correspondence	Performance of a contract; legitimate interests where the contract is with your employer
Keeping business, accounting and tax records	Contact details, correspondence, invoices	Legal obligation
Operating and securing the website	Server access logs	Legitimate interests (keeping the site secure and available)
Establishing, exercising or defending legal claims	Relevant records	Legitimate interests

Where we rely on legitimate interests, we have considered your rights and expectations and are satisfied they do not override our interests. You can ask us for details of that assessment.

We do not sell personal data, use it for third-party advertising or make decisions about you by automated means.

We share personal data only with service providers that help us run the business, and only as needed:

Website hosting: DreamHost hosts the site and keeps the server access logs described above.
Email: our email provider stores and transmits the emails you send us and our replies.
Scheduling: Calendly provides our booking page. When you open it, you are on Calendly's own site and its privacy policy applies. Calendly acts as an independent organisation for its own purposes, and processes booking information on our behalf so we can receive your booking.

We may also disclose data to professional advisers (such as accountants or lawyers), or where the law requires it, for example to comply with a court order or a request from a regulator or law enforcement body. If we were ever involved in a sale or restructuring of the business, data could pass to the new owner under the same protections.

5. International transfers

Our website is hosted by DreamHost on servers in the United States, so server access logs are stored there. Some of our other service providers may also process data outside the UK.

Where personal data is transferred outside the UK to a country without UK adequacy regulations, we rely on appropriate safeguards recognised under UK data protection law. Depending on the provider, these may include the UK Extension to the EU-US Data Privacy Framework (where the recipient is certified) or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. Contact us if you would like more information about the safeguards for a particular transfer.

6. How long we keep it

Enquiries that do not lead to an engagement: up to 24 months from our last contact, then deleted.
Client and partner records: for the length of the engagement and then 6 years after it ends, to meet legal, accounting and tax requirements and to deal with any claims.
Calendly booking details: held with the related enquiry or client record and kept for the same period.
Server access logs: kept by our hosting provider on its own rolling schedule for security and operations, then overwritten.

We may keep data for longer where the law requires it or where it is needed for a legal claim.

7. Your rights

Under UK data protection law you have the right to:

access the personal data we hold about you and receive a copy
rectification of data that is inaccurate or incomplete
erasure of your data in certain circumstances
restriction of how we use your data in certain circumstances
object to processing based on our legitimate interests, and to any direct marketing at any time
data portability, to receive data you gave us in a structured, machine-readable format where processing is based on contract or consent and carried out by automated means
withdraw consent at any time, where we rely on consent (this does not affect processing already carried out)

To exercise any right, email hello@aurionlabs.io. We may ask you to confirm your identity. We will respond within one month, which can be extended by up to two further months for complex requests, in which case we will tell you why. There is normally no fee.

8. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority:

Website: ico.org.uk
Helpline: 0303 123 1113

9. Cookies

This site does not set cookies or use similar tracking technologies. Calendly sets its own cookies on calendly.com if you choose to open our booking page. See our Cookie Policy for details.

10. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) to the site, access controls on our accounts and limiting access to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Email sent over the internet may not be encrypted end to end, so please do not send highly sensitive information by email unless we have agreed a secure method.

11. Children

Our services are for businesses and professionals. They are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

12. Changes to this notice

We may update this notice when our practices or the law change. The date at the top shows the latest version. If we make significant changes, such as adding analytics, we will update this page before the change takes effect.

13. Contact

Questions about this notice or your personal data:

Aurion Labs Ltd, Milton Keynes, United Kingdom
Email: hello@aurionlabs.io
Phone: +44 7832 617626