What this site does with your information.

In short

The whole policy in six lines. The sections that follow are the binding version; this is orientation.

• aviaurum.com is a static website. There is no application server, no database, no user account and no login.
• We set no tracking cookies, run no advertising, and at the time of writing run no analytics of any kind.
• One thing is stored in your browser: whether you chose the light or the dark theme. It never leaves your device.
• If you use the contact form or email us, we get what you send us, and we use it to answer you — not to market at you.
• Our host, Cloudflare, processes standard server logs including IP addresses in order to serve the site and keep it up.
• We do not sell your information, and we never will. There is nobody to sell it to who would improve your day.

Who we are

Aviaurum Technologies is an IT services and consulting firm and is the controller of the personal information described in this policy — that is, we decide what is collected and why.

• Registered address: [REGISTERED OFFICE ADDRESS]
• Company registration number: [COMPANY REGISTRATION NUMBER]
• Email: hello@aviaurum.com

We have not appointed a Data Protection Officer. Questions about this policy, and any request to exercise the rights in section 11, go to the address above and are handled by the person accountable for the firm's data protection.

What this policy covers

This policy covers the website at aviaurum.com: what happens when you read a page, use the contact form, or write to one of our published addresses.

It does not cover two other things. It does not cover information we handle inside a client's own systems during an engagement — that is governed by the statement of work and any data processing agreement signed with that client, under which we act as a processor rather than a controller. And it does not cover other companies' websites that we link to; see section 13.

Information we collect

When you simply read a page

The site is hosted and delivered by Cloudflare Pages. Like any web server, Cloudflare's network records a log entry for each request: your IP address, the page requested, the date and time, the HTTP status, your browser's user-agent string, the referring page if your browser sent one, and an approximate location derived from the IP address. Cloudflare processes this to deliver the site and to protect it from attack and abuse. We do not have a per-visitor log that we read, mine or match against anything else.

When you use the contact form

The contact form collects your name, your work email address, your company (optional), the practice you are asking about (optional), and the message you write. When you submit it, the form posts to Web3Forms, a third-party form processor, which relays the submission to us by email. Web3Forms handles the content of your submission and limited technical information about the request — such as the time it was sent and the IP address it came from — in order to deliver it and to filter spam. Their own privacy terms govern that step; they act as our processor for it.

Anything you choose to put in the message field is up to you. Please do not send confidential client material, credentials, or any special-category information such as health or biometric data through a web form. If we need that, we will arrange a proper channel first.

When you email us directly

If you write to hello@aviaurum.com or careers@aviaurum.com, we hold your email address and whatever you send us, including any attachment such as a CV, for as long as section 9 allows.

What we do not collect

• No accounts, usernames or passwords — there is nothing to log in to.
• No payment card details. The site takes no payments.
• No advertising identifiers, no ad pixels, no social plugins, no session recording.
• No cross-site tracking, no data brokers, no enrichment of your address against third-party datasets.
• No profiling and no automated decision-making that produces legal or similarly significant effects.

Cookies, local storage and analytics

Cookies set by us: none

This site sets no cookies of its own. Not for analytics, not for advertising, not for anything.

Cloudflare, as the network in front of the site, may set a strictly necessary security cookie of its own — for example __cf_bm — to tell automated traffic apart from people and to absorb denial-of-service attempts. It performs no advertising function and is not used to build a profile of you.

Local storage: one key, one purpose

The site stores exactly one item in your browser's local storage, under the key aviaurum-theme, with the value light or dark. It exists so that the theme you picked with the toggle in the header is still there next time you visit, and so the page does not flash white at a dark-mode reader before the stylesheet loads.

It never leaves your browser. It is not a cookie, it is not transmitted with any request, we cannot read it, and it identifies nothing. It is a functional preference, not tracking, and we would rather say that plainly than bury it in a list of "essential technologies". You can clear it at any time through your browser's site-data settings; the site will simply follow your operating system's light or dark setting again.

Analytics: none today, and conditional after that

At the time of writing this site runs no analytics. We may later enable Cloudflare Web Analytics. If we do: it sets no cookies, uses no fingerprinting, and reports aggregate figures such as page views, referrers and country — it does not collect personal data and does not track you between sites. We will update this section and the date at the top of this page before or when it goes live. We will not add Google Analytics or any advertising-funded measurement product to this site.

Why we process it, and on what basis

We describe our legal basis in the terms used by the UK GDPR and the EU GDPR, because they are the strictest common baseline. Where your local law uses different language, the substance below is what we do.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and concluded that serving a page to whoever requests it and replying to someone who wrote to us are exactly what a visitor would expect. You can object at any time; see section 11.

Who your information is shared with

We do not sell personal information, and we do not share it for advertising. There is no data-sharing arrangement of any kind behind this site.

We use a small number of service providers who process information on our instructions and for no purpose of their own:

• Cloudflare — hosting, content delivery and network security for aviaurum.com. Processes server log data as described in section 4.
• Web3Forms — receives contact form submissions and relays them to us by email.
• [EMAIL PROVIDER] — the provider that hosts our mailboxes and therefore stores the enquiries and applications we receive.

We would also disclose information where we are legally required to — a court order, a regulator's lawful request — or where it is necessary to establish or defend a legal claim. If that ever happened we would tell the person concerned unless the law prevented us.

Where your information is processed

Cloudflare serves this site from whichever of its data centres is nearest to you, and our providers operate internationally. Information covered by this policy may therefore be processed outside the country you are reading from, including outside the UK and the European Economic Area.

Where personal data leaves the UK or the EEA, we rely on the transfer safeguards published by each provider — an adequacy decision where one applies to the destination, and standard contractual clauses where it does not. You can ask us which mechanism applies to a given provider and we will tell you.

How long we keep it

We keep things for as long as the purpose in section 6 needs, and then we delete them.

• Server logs — held by Cloudflare under its own retention schedule, which is short and measured in days, not years. We do not take our own copy.
• Enquiries — kept while we are in conversation with you, and then for [ENQUIRY RETENTION PERIOD — PROPOSED: 24 MONTHS] after our last exchange, so that we can pick up a thread you started. After that they are deleted from the mailbox.
• Enquiries that become engagements — folded into the client record and kept under the retention terms of that engagement's own contract, not this policy.
• Job applications — kept for [APPLICATION RETENTION PERIOD — PROPOSED: 12 MONTHS] so that we can come back to you when a suitable role opens, unless you ask us to delete them sooner.
• Your theme preference — until you clear your browser's storage for this site. It is on your device, so the timing is entirely yours.

How we protect it

The strongest protection here is structural: there is no database to breach and no account store to steal. The site is a set of static files.

• Everything is served over HTTPS, with HSTS set so browsers refuse to fall back.
• A content security policy restricts what the page is permitted to load and where a form may post.
• The site loads no third-party scripts, fonts or images — nothing on the page phones anywhere else.
• Enquiries land in mailboxes accessible to a small number of named people, protected by multi-factor authentication.

No system is perfectly secure, and we will not claim otherwise. If we ever became aware of a breach affecting personal information we hold, we would assess it and notify the people and authorities the law requires, within the deadlines the law sets.

Your rights

Depending on where you live, some or all of the following apply. We will honour them for anyone who asks, wherever they are, rather than checking your jurisdiction first.

• Access — ask what personal information we hold about you, and get a copy.
• Correction — have anything inaccurate put right.
• Deletion — ask us to erase it, where no legal obligation requires us to keep it.
• Objection — object to processing we base on legitimate interests, including for any direct marketing, which we would then stop.
• Restriction — ask us to hold processing while a dispute about accuracy or grounds is resolved.
• Portability — receive information you gave us in a structured, machine-readable form.
• Withdrawal of consent — where we ever relied on consent, withdraw it without affecting what was lawful beforehand.

To exercise any of these, email hello@aviaurum.com and say what you want. There is no charge. We will respond within one month, and will tell you if a request is genuinely complex enough to need longer. We may need to check you are who you say you are — usually by replying to the address the information is associated with, which is the least intrusive way to do it.

Children

This is a business-to-business site. It is not directed at children, has nothing on it aimed at children, and we do not knowingly collect information from them. If you believe a child has sent us information through this site, email hello@aviaurum.com and we will delete it.

Links to other websites

This site links out in a few places — to our providers, and to anywhere else a page happens to reference. Once you follow a link away from aviaurum.com you are on someone else's site, under someone else's privacy policy, and we have no control over and take no responsibility for what they do. It is worth reading theirs.

Complaints

If you think we have handled your information badly, tell us first at hello@aviaurum.com. We would rather hear it and fix it. A real person will read it and reply.

You also have the right to complain to a data protection supervisory authority without coming to us first. For us that is [SUPERVISORY AUTHORITY] in [GOVERNING JURISDICTION]. If you live elsewhere, you may be able to complain to the authority in your own country instead.

Changes to this policy

We will change this policy when the site changes — most likely if analytics are enabled, if the contact form moves to a different processor, or if the firm's own details are finalised.

When we do, we will update the last updated date at the top of this page, and for any change that materially affects what we collect or why, we will leave a short note of what changed at the top of this page for a reasonable period afterwards. We have no mailing list and no accounts, so we cannot email you about it — which is the honest reason this page is the notification mechanism rather than a nicety. Checking the date at the top is the reliable way to know.

How to contact us

Anything about this policy, or about information we hold: hello@aviaurum.com. Anything about a job application: careers@aviaurum.com. By post: Aviaurum Technologies, [REGISTERED OFFICE ADDRESS].

The terms on which this website is made available are set out separately in our terms of use.