Privacy Policy

Data Controller Information

aeroluxor Ltd is the data controller for your personal information. We are registered in England and Wales under company number 93462587. Our registered office is at 140 West Street, Birmingham B6V 3WJ, West Midlands, United Kingdom.

Data Collection

We collect various types of information to provide and improve our services. The data we collect includes:

• Personal Information: When you contact us or use our services, we may collect your name, email address, phone number, company name, and job title.
• Website Usage Data: We automatically collect information about how you use our website, including your IP address, browser type, operating system, referring URLs, and pages visited.
• Communication Data: Records of correspondence when you contact us via email, phone, or our contact forms.
• Technical Data: Device information, browser settings, and technical details about your interaction with our platform.
• Analytics Data: Information about your website usage patterns, session duration, and user behaviour for service improvement purposes.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Legitimate Interest: To operate our business, improve our services, and communicate with potential and existing clients.
• Contract Performance: To provide our analytics services and fulfil our contractual obligations.
• Consent: For marketing communications and non-essential cookies, where you have provided explicit consent.
• Legal Obligation: To comply with applicable laws and regulations.

Use of Your Data

We use the information we collect for various purposes. How we use your information depends on how you interact with our services:

• To provide, maintain, and improve our gym member engagement analytics services
• To respond to your enquiries and provide customer support
• To send you service-related communications and important updates
• To analyse website usage and improve user experience
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and protect our rights
• For marketing purposes, where you have provided consent

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and services, subject to confidentiality agreements.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with any merger, acquisition, or sale of assets, subject to the same privacy protections.
• Consent: With your explicit consent for specific purposes.

International Data Transfers

As we operate primarily within the UK and EU, your data is generally processed within these regions. If we need to transfer data outside the European Economic Area, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Our data retention periods are:

• Contact enquiries: 3 years from last contact
• Client data: For the duration of the service relationship plus 7 years for accounting purposes
• Website analytics: 26 months (Google Analytics default)
• Marketing communications: Until you unsubscribe or withdraw consent

Your Rights

Under GDPR and UK data protection law, you have several rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in specific situations
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Rights Related to Automated Decision-Making: Protection against automated profiling

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Employee training on data protection
• Secure data centres and hosting environments

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

Supervisory Authority

If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.