Privacy Policy

Auralen Consulting — Privacy Policy (2025–2026 Edition)

Last updated: 27 November 2025

⸻

1. Introduction

This Privacy Policy explains how Auralen Consulting (“we”, “our”, “us”) collects, uses, stores and protects personal information when you visit our website or contact us.

Auralen Consulting provides information-only consulting services. We do not provide immigration, legal, financial, tax, or medical advice, and we do not act on behalf of clients or third parties.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how your data is handled, you can contact us at:

📩 contact@auralen.uk

⸻

2. Information We Collect

2.1 Information you provide voluntarily

When you submit a contact form, request a Clarity Call, or contact us by email, you may choose to provide:

• Your name

• Email address

• Phone number

• Basic details about your enquiry

• Any information you voluntarily include in your message

We request only the minimum information necessary to understand your enquiry and respond appropriately.

2.2 Information collected automatically

When you visit our website, limited technical information may be collected automatically, including:

• IP address (anonymised where possible)

• Browser type and version

• Pages visited and time spent on the site

• Device and operating system information

• General location data (city-level only)

• Cookie preference status

This information is used solely for security, performance monitoring, and anonymised analytics.

2.3 No special or sensitive data required

We do not request or require sensitive personal data, including:

• Immigration status

• Passport or BRP details

• Financial or banking information

• Legal case details

• Health or medical data

If you voluntarily choose to include such information in a message, it will be handled securely and deleted when no longer necessary.

⸻

3. How We Use Your Information

We use personal data strictly for the following purposes:

• Responding to your enquiry

• Arranging or discussing a Clarity Call (if appropriate)

• Understanding your situation to provide information-only guidance

• Maintaining website security and preventing abuse

• Improving website performance and usability

• Meeting applicable legal and regulatory obligations

We do not use personal data for:

• Advertising or marketing profiling

• Behavioural tracking

• Automated decision-making

• Selling, renting, or sharing data with third parties

⸻

4. Legal Basis for Processing (UK GDPR)

We process personal data under the following lawful bases:

• Article 6(1)(b) — to respond to your enquiry or request

• Article 6(1)(f) — legitimate interests (site security, technical performance, service improvement)

• Article 6(1)(a) — consent, where applicable (e.g. optional cookies or newsletter, if enabled)

We do not engage in large-scale data processing or automated profiling.

⸻

5. Data Retention

We retain personal data only for as long as necessary:

• General enquiries: up to 3 months

• Enquiries involving potential cooperation: up to 6 months

• Immediate deletion upon request, where legally permitted

Anonymised website analytics data is retained for approximately 6–12 months.

⸻

6. Third-Party Service Providers

We use a limited number of trusted third-party providers strictly for technical and operational purposes, including:

• Webflow, Inc. — website hosting, CMS, and contact forms

• Cloudflare, Inc. — website security, firewall, and DDoS protection

• Plausible Analytics — privacy-friendly, anonymised website analytics

• Email service providers — responding to enquiries

These providers receive only the minimum data required to perform their services.

We never sell, trade, or monetise personal data.

⸻

7. International Data Transfers

Some service providers may store or process data outside the UK. Where this occurs, transfers are safeguarded using:

• UK GDPR-approved Standard Contractual Clauses (SCCs)

• The UK Addendum where applicable

• Secure EU and US data centre infrastructure

All international transfers are carried out in compliance with UK GDPR requirements.

⸻

8. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion of your data

• Withdraw consent at any time

• Restrict or object to processing

• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact us at:

📩 contact@auralen.uk

⸻

9. Data Security

We apply appropriate technical and organisational measures to protect personal data, including:

• Encrypted hosting and secure connections

• Firewall and anti-abuse protections

• Restricted internal access

• Secure form handling

• Ongoing monitoring and updates

While no system is completely risk-free, we follow recognised industry best practices.

⸻

10. Updates to This Policy

We may update this Privacy Policy to reflect:

• Regulatory or legal changes

• Technical updates

• Improvements to our services

The “Last updated” date at the top of this page indicates the current version.