What Information We Collect and Why

Website contact form enquiries

When you submit an enquiry through our contact form, we collect your name, organisation, email address and the content of your message. We use this information solely to respond to your enquiry.

Special category and sensitive personal data

Client engagements

If an enquiry leads to a professional engagement, we may hold your name, contact details and relevant correspondence for the purpose of delivering and administering that engagement.

Lawful Basis for Processing

We process your personal data on the following lawful bases under UK GDPR:

• Consent — for contact form submissions, where you have chosen to provide your information to us.
• Contract — where processing is necessary to carry out a professional engagement with you.
• Legitimate interests — where we have a legitimate business interest in retaining correspondence relevant to a professional relationship, provided this does not override your rights.

Your Data Protection Rights

Under UK data protection law you have the following rights:

• Right of access — you can ask for copies of your personal information.
• Right to rectification — you can ask us to correct inaccurate or incomplete information.
• Right to erasure — you can ask us to delete your personal information.
• Right to restriction — you can ask us to limit how we use your information.
• Right to object — you can object to our processing of your personal data.
• Right to data portability — where processing is based on consent or contract and carried out automatically, you can ask us to provide your data in a portable format.
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at dawn@auroraintegrity.co.uk. We will respond within one month.

Where We Get Your Information From

Directly from you — through our website contact form or professional correspondence.

How Long We Keep Your Information

• Contact form enquiries that do not lead to an engagement are retained for 12 months from the date of receipt, after which they are deleted.
• Where an enquiry leads to a professional engagement, we retain relevant correspondence and records for 6 years from the end of that engagement, in line with standard contract limitation periods under UK law.

Who We Share Your Information With

Our website and email are hosted by Kualo Ltd, whose servers are located in the United Kingdom. Kualo processes data on our behalf solely for the purpose of providing hosting and email services, and is bound by contractual obligations to keep that data secure and confidential.

We do not share your personal information with any other third parties, except where required to do so by law.

Security

We take appropriate technical and organisational measures to protect your personal information, including:

• SSL encryption on all data transmitted to and from this website
• Email hosted on a secure, UK-based server
• Access to personal data restricted to the data controller only
• Password-protected devices and accounts used to access that data

In the event of a personal data breach, we will notify the Information Commissioner's Office within 72 hours where required, and will inform affected individuals without undue delay.

How to Complain

If you have concerns about how we handle your personal data, please contact us first at dawn@auroraintegrity.co.uk.

If you remain unhappy, you can complain to the Information Commissioner's Office (ICO):