Privacy Policy

1. Who we are

Aegision Ltd is the data controller for the personal data described in this policy. We are registered in England and Wales under company number 17426699. Our registered office is Fifth Floor, 167-169 Great Portland Street, London, W1W 5PF. Contact us about privacy at hello@aegision.co.uk.

​

We are registered with the Information Commissioner's Office under registration reference [ZB######].

​

We have not appointed a Data Protection Officer, as we are not required to do so.

​

2. What this policy covers

This policy covers personal data we collect through this website.

​

We also process personal data in the course of client engagements — for example, contact details of client personnel, and information about identifiable individuals contained in incident reports, operational records or witness accounts provided to us. In most engagements we act as an independent controller for that data, because we exercise professional judgement over how it is analysed. That processing is described in our Client Privacy Notice, available on request. Where we process data purely on a client's instructions without exercising such judgement, we act as processor under a separate data processing agreement.

​

3. Personal data we collect

Data you give us. When you submit the contact form or email us: your name, email address, organisation, and any information you choose to include in your message. Giving us your details is voluntary, but we need your name and email address to reply to your enquiry.

​

Data collected automatically. IP address, browser type and version, device type, operating system, pages visited, time and date of visit, time spent on pages, and referring source. This data is collected by Wix, our hosting provider, using the cookies described in our Cookie Policy.

​

We do not require you to create an account, and we do not take payments through this website.

​

4. Why we process it, and our lawful basis

Purpose: Responding to enquiries submitted via the contact form or by email
Lawful basis: Legitimate interests — responding to a business enquiry we have received

​

Purpose: Taking steps at your request before entering into a contract, and performing that contract
Lawful basis: Legitimate interests — where you deal with us on behalf of your organisation. Contract — where you contract with us personally, for example as a sole trader

​

Purpose: Operating, securing and maintaining the website
Lawful basis: Legitimate interests — running our website securely

​

Purpose: Understanding how the website is used, using aggregated visitor statistics produced by Wix
Lawful basis: Legitimate interests — improving our website. You can opt out using the cookie preferences button (see our Cookie Policy)

​

Purpose: Sending you information about our services where you have asked for it
Lawful basis: Consent

​

Purpose: Keeping business records and complying with legal obligations
Lawful basis: Legal obligation / legitimate interests

​​

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we have concluded that they are not. You may object to this processing — see section 8.

​

We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects for you.

​​

5. Who we share it with

We do not sell your personal data and we do not share it for third-party marketing.

​

We share personal data with service providers who process it on our behalf:

• Wix.com Ltd — website hosting, contact form processing and visitor statistics

• Proton AG — business email

• Our accountants and professional advisers, where necessary

​​

We do not use any analytics service other than Wix's built-in site statistics, and we do not use advertising services.

​

We may also disclose personal data where required by law, by a court, or by a regulator, or to establish, exercise or defend legal claims.

​

6. International transfers

Our email is provided by Proton AG in Switzerland. Switzerland is covered by a UK adequacy decision, so no additional transfer safeguard is required.

​

Wix.com Ltd is based in Israel, which the UK recognises as providing an adequate level of protection for personal data. Wix may transfer data to other companies in its group and to its sub-processors in other countries, including the United States. Wix covers those transfers through its intra-group data processing agreement and the safeguards set out in its Data Processing Addendum. You can request details by contacting us.

​

7. How long we keep it

Data: Enquiries that do not lead to an engagement
Retention: 24 months from last contact

​

Data: Enquiries that lead to an engagement
Retention: For the duration of the engagement and 7 years thereafter, for insurance, limitation and tax purposes

​

Data: Marketing consents and opt-outs
Retention: Until consent is withdrawn, and a record of the withdrawal thereafter

Data: Website technical and usage data collected automatically (section 3)

Retention: Retained by Wix in line with its platform retention periods. You can ask us for details

​

8. Your rights

Under UK data protection law you have the right to: be informed about how we use your data; access a copy of it; have inaccurate data corrected; have data erased in certain circumstances; restrict processing in certain circumstances; object to processing based on legitimate interests or to direct marketing; receive your data in a portable format where processing is based on consent or contract and carried out by automated means; and withdraw consent at any time, without affecting processing carried out before withdrawal.

​

To exercise any of these rights, email hello@aegision.co.uk. We will respond within one month.

​

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; 0303 123 1113; ico.org.uk. We would appreciate the chance to address your concerns first.

​

9. Security

We take appropriate technical and organisational measures to protect personal data, including access controls and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

​

10. Children

This website is intended for business users and is not directed at children. We do not knowingly collect personal data from anyone under 18.

​

11. Cookies

See our Cookie Policy for details of the cookies we use and how to manage them.

​

12. Changes

We may update this policy. The current version is always published on this page, with the date it was last updated shown at the top.