1. Data Controller
The data controller responsible for the processing of personal data through this website is:
AVELRA LTD
Company No. 14563149
7 Bell Yard, London, England, WC2A 2JR, United Kingdom
Email: info@avelra.com · Tel: (+44) 7458 038797
2. What Data We Collect
2.1 Data you provide to us
When you contact us through the contact form or by email, we process the data you choose to provide: name, email address, subject and the content of your message. Providing this data is voluntary, but necessary to respond to your enquiry.
2.2 Data collected automatically
Our hosting provider automatically records standard server log data for security and operational purposes: IP address, date and time of the request, requested URL, HTTP status, browser type and operating system. Log data is not combined with other data sources and is not used to identify individual visitors.
2.3 Cookies
This website does not use profiling, advertising or analytics cookies. Only technically necessary elements are used to deliver the site. Web fonts are served by Google Fonts; when loading fonts, your browser transmits your IP address to Google. You can find Google's privacy policy at policies.google.com/privacy.
3. Purposes and Legal Bases
| Purpose | Data | Legal basis |
|---|---|---|
| Responding to enquiries and preparing quotes | Contact data, message content | Art. 6(1)(b) GDPR — pre-contractual measures |
| Performance of contracts for our services | Contact and billing data | Art. 6(1)(b) GDPR — contract |
| Security, stability and abuse prevention | Server logs | Art. 6(1)(f) GDPR — legitimate interest |
| Compliance with legal obligations (tax, accounting) | Invoicing data | Art. 6(1)(c) GDPR — legal obligation |
4. Recipients and International Transfers
Personal data may be shared with our hosting provider (acting as processor under Art. 28 GDPR) and, where necessary for the performance of a contract, with our affiliated entity Avelra Management LLC (Montana, USA). Where data is transferred outside the UK or the EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
We never sell personal data and we do not use it for automated decision-making or profiling.
5. Retention
- Enquiries: retained for up to 24 months after the last contact, unless a contract follows.
- Contract and invoicing data: retained for the statutory periods required by UK tax and company law (generally 6 years).
- Server logs: retained by the hosting provider for a limited period (typically up to 30 days) and then deleted or anonymised.
6. Your Rights
Under the UK GDPR and the EU GDPR you have the right to:
- Access the personal data we hold about you (Art. 15);
- Rectify inaccurate or incomplete data (Art. 16);
- Erase your data where there is no legal ground for continued processing (Art. 17);
- Restrict processing in the circumstances set out in Art. 18;
- Receive your data in a portable format (Art. 20);
- Object to processing based on legitimate interest (Art. 21);
- Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of prior processing.
To exercise any of these rights, write to info@avelra.com. We respond within one month.
7. Complaints
If you believe our processing of your data infringes data protection law, you have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or with the supervisory authority of your EU member state of residence.
8. Security
We apply appropriate technical and organisational measures to protect personal data, including TLS encryption in transit, access controls, hardened server configurations and the principle of data minimisation.
9. Changes to this Policy
We may update this policy to reflect legal or operational changes. The date of the last revision is shown at the top of this page. Material changes will be highlighted on this website.