Privacy Policy

1. Who we are

Aegision Ltd is the data controller for the personal data described in this policy. We are registered in England and Wales under company number 17426699. Our registered office is Fifth Floor, 167-169 Great Portland Street, London, W1W 5PF. Contact us about privacy at hello@aegision.co.uk.

​

We are registered with the Information Commissioner's Office under registration reference [ZB######].

​

We have not appointed a Data Protection Officer, as we are not required to do so.

​

2. What this policy covers

This policy covers personal data we collect through this website.

​

We also process personal data in the course of client engagements — for example, contact details of client personnel, and information about identifiable individuals contained in incident reports, operational records or witness accounts provided to us. In most engagements we act as an independent controller for that data, because we exercise professional judgement over how it is analysed. That processing is described in our Client Privacy Notice, available on request. Where we process data purely on a client's instructions without exercising such judgement, we act as processor under a separate data processing agreement.

​

3. Personal data we collect

Data you give us. When you submit the contact form or email us: your name, email address, organisation, and any information you choose to include in your message.

​

Data collected automatically. IP address, browser type and version, device type, operating system, pages visited, time and date of visit, time spent on pages, and referring source.

​

We do not require you to create an account, and we do not take payments through this website.

​

4. Why we process it, and our lawful basis

Purpose: Responding to enquiries submitted via the contact form or by email
Lawful basis: Legitimate interests — responding to a business enquiry we have received

​

Purpose: Taking steps at your request prior to entering into a contract
Lawful basis: Performance of a contract / steps prior to a contract

​

Purpose: Operating, securing and maintaining the website
Lawful basis: Legitimate interests — running our website securely

​

Purpose: Understanding how the website is used, using anonymous visitor statistics
Lawful basis: Legitimate interests — improving our website

​

Purpose: Sending you information about our services where you have asked for it
Lawful basis: Consent

​

Purpose: Keeping business records and complying with legal obligations
Lawful basis: Legal obligation / legitimate interests

​

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we have concluded that they are not. You may object to this processing — see section 8.

​

5. Who we share it with

We do not sell your personal data and we do not share it for third-party marketing.

​

We share personal data with service providers who process it on our behalf:

• Wix.com Ltd — website hosting, contact form processing and visitor statistics

• Proton AG — business email

• Our accountants and professional advisers, where necessary

• ​

We do not use third-party analytics or advertising services.

​

We may also disclose personal data where required by law, by a court, or by a regulator, or to establish, exercise or defend legal claims.

​

6. International transfers

Our email is provided by Proton AG in Switzerland. Switzerland is covered by a UK adequacy decision, so no additional transfer safeguard is required.

​

Wix may process personal data outside the UK. Where it does, it relies on the UK Addendum to the EU Standard Contractual Clauses. You can request details by contacting us.

​

7. How long we keep it

Data: Enquiries that do not lead to an engagement
Retention: 24 months from last contact

​

Data: Enquiries that lead to an engagement
Retention: For the duration of the engagement and 7 years thereafter, for insurance, limitation and tax purposes

​

Data: Marketing consents and opt-outs
Retention: Until consent is withdrawn, and a record of the withdrawal thereafter

​

8. Your rights

Under UK data protection law you have the right to: be informed about how we use your data; access a copy of it; have inaccurate data corrected; have data erased in certain circumstances; restrict processing in certain circumstances; object to processing based on legitimate interests or to direct marketing; receive your data in a portable format where processing is based on consent or contract and carried out by automated means; and withdraw consent at any time, without affecting processing carried out before withdrawal.

​

To exercise any of these rights, email hello@aegision.co.uk. We will respond within one month.

​

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; 0303 123 1113; ico.org.uk. We would appreciate the chance to address your concerns first.

​

9. Security

We take appropriate technical and organisational measures to protect personal data, including access controls and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

​

10. Children

This website is intended for business users and is not directed at children. We do not knowingly collect personal data from anyone under 18.

​

11. Cookies

See our Cookie Policy for details of the cookies we use and how to manage them.

​

12. Changes

We may update this policy. The current version is always published on this page, with the date it was last updated shown at the top.