Privacy Notice

Effective date: 31 July, 2026

This Privacy Notice applies to all personal identifiable information (Personal Data) we collect and process. This Notice applies to our use of all data collected by us in relation to your use of the website and any services or systems therein.

By voluntarily using the AuraQ website, and/or providing data or other information, you are indicating your consent to this Privacy Notice and agreement to be bound by its terms. We value your privacy and observe due care in processing and protecting Personal Data. We recommend you read this notice carefully.

1. Definitions and interpretation

In this notice the following terms are used:

1.1. Content: means any text, graphics, images, audio, video, software, data compilations and any other form of information capable of being used as part of a website, or included in an email, blog, social media, etc.

1.2. Cookie: means a small text file placed, on acceptance, in a browser by AuraQ when an AuraQ website is visited. This allows AuraQ to identify recurring visitors and to analyse their browsing habits within its websites.

1.3. Personal Data: means collectively all information that is submitted via an AuraQ website or other channels (e.g., LinkedIn, Twitter, email, etc.). AuraQ regard this as data relating to an identified or identifiable living natural person, that can be processed by AuraQ or its third parties.

1.4. AuraQ Ltd, AuraQ, we, us or our: means AuraQ Ltd located at Clanmere, 33 Graham Road, Malvern, Worcestershire WR14 2HU.

1.5. Service: means collectively any online facilities, tools, services, or information that AuraQ makes available through its websites either now or in the future.

1.6. System: means any online communications infrastructure (e-communication) that AuraQ makes available either now or in the future. This includes, but is not limited to, email, blogs, live chat, etc.

1.7. Website: means an AuraQ website (e.g., www.auraq.com).

1.8. Data Controller: means the individual, company or organisation that determines the purpose, and the way Personal Data may be processed. AuraQ is the Data Controller for all Personal Data used by the company.

1.9. Data Processer: means any person other than staff of the Data Controller who process data on behalf of AuraQ. This definition can include external providers that handle Personal Data on AuraQ’s behalf.

1.10. Data Subject: means a living individual who is the subject of the Personal Data that is being processed. A Data Subject need not be a UK national or resident.

2. Data collected

AuraQ websites can be visited anonymously, without providing any data. There are times, however, when certain Personal Data will be required, such as name, email address and company name, or when registering with AuraQ to download, subscribe or access premium content (products, services, and/or data). AuraQ may also use Personal Data to help understand who is using the website, optimise and monitor the website activity, and to help manage business development activities.

AuraQ will collect various data, depending on the way AuraQ is contacted. AuraQ will only collect data that is lawful, fair, transparent, and adequate. Without limitation, any of the following data will be collected:

name
job title
profession
contact information such as email addresses and telephone numbers
IP address*
web browser type and version*
date and time*
device type (e.g., laptop, tablet, mobile phone, etc.)*
operating system*
a list of URLs starting with a referring site, individual activity on the website, and the site exited to*
cookie information (for further information, please refer to AuraQ’s Cookie Policy.)

* Automatically collected

AuraQ may receive data from other sources; marketing partners, social media platforms, recruitment agencies, co-workers, as well as from other third parties. AuraQ may also receive data from publicly available sources via data enrichment services. Any Personal Data received will solely be used for the development of business opportunities where the individual has already expressed an interest. AuraQ collects anonymous data from visits to its websites to help provide a better user experience, service and to make the website as friendly and purposeful as possible. For further information, please refer to AuraQ’s Cookie Policy.

3. Your information

This notice details how AuraQ will collect and use Personal Data to provide a positive experience on AuraQ websites and in using products and services.

Wherever Personal Data is required to be submitted, options to restrict the use of that Personal Data will be provided.

AuraQ uses different methods to collect data from and about individuals through:

3.1. Direct interactions. Identity and contact details provided by filling in forms or by corresponding with AuraQ by post, telephone, email etc. This includes Personal Data provided when:

enquiring about products or services
subscribing to services or publications
opt-in to marketing communications
entering a competition, promotion, or survey
submitting feedback or contacting AuraQ

3.2. Automated technologies or interactions. As an individual interacts with AuraQ’s website, technical data about your device type, browsing actions and patterns will be collected. This data is gathered using cookies, server logs and other similar technologies. For further information on cookies, please refer to AuraQ’s Cookie Policy.

3.3. Third-parties or publicly available sources. AuraQ may receive Personal Data about an individual from various third parties as set out below:

Website analytics providers
Identity and contact data from third-party reference agencies
Professional social media platforms
Referral from product partners
Contact data from publicly available sources.

For AuraQ to deliver information, products, and services, AuraQ will need to collect Personal Data. The legal basis for the collection of information will be one or more of the conditions that are set out in Article 6(1) of the UK GDPR as follows:

a. Performance of a contract

b. Performance of a task or provision of a service in the public interest

c. To comply with a legal obligation

d. Protection of vital interests

e. Consent

f. Legitimate interests

In accordance with Article 8 of the UK GDPR where we rely on consent as the lawful basis for processing Personal Data in relation to online services, and the individual is under the age of 13, we will obtain verifiable parental consent before processing such Personal Data. Our website, services and products are not directed at children under the age of 13 and we do not knowingly collect Personal Data from children.

Where we become aware that we have inadvertently collected Personal Data from a child under 13 without appropriate consent, we will take reasonable steps to delete such data without undue delay. If you believe that a child under 13 has provided Personal Data to us, please contact our Data Protection Officer at dpo@auraq.com.

Personal Data is collected for the following purposes which will then be processed by AuraQ based on specific legal grounds as defined in Article 6(1). This includes but is not limited to:

AuraQ may contact an individual for additional consent where required. When AuraQ processing of Personal Data is based upon consent, all individuals have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

All individuals have a right to request details of any Personal Data that AuraQ holds on them. AuraQ will initially respond within one calendar month of the date the request is received. All rights available to individuals can be found in Section 10: What Personal Data does AuraQ hold on an individual? within this notice.

AuraQ will retain the following data for the applicable periods below. The Right To Be Forgotten (RTBF) under the UK GDPR regulations can be requested at any time, unless there is a legal requirement to retain data for a specific period.

4. Recruitment

If subscribed to, AuraQ will use the subscription email address to send any updates. Un-subscription may be performed using the link in any correspondence or by emailing dpo@auraq.com.

AuraQ collect Personal Data about applicants through the application and recruitment process, either directly from candidates or sometimes from an employment agency, a referrer, a referee, or background check provider. This would be used in:

Internal record keeping
Improvement of our products/services
Transmission by email of promotional content that may be of interest
Contact for market research purposes which may be done using email, telephone, or mail. Such information may be used to customise or update the website.

determining eligibility and suitability for initial employment, verification of references and qualifications.
determining the terms on which an applicant would work for AuraQ.
checking applicants are legally entitled to work in the applicable region.
preventing and detecting fraud.
equality and diversity monitoring complying with legal or regulatory requirements, communicating about the recruitment process and keeping records relating to the recruitment process.

Any or all of the above Personal Data may be required by AuraQ from time to time to provide the best possible service and experience when using AuraQ’s services and systems. Specifically, Personal Data may be used by AuraQ for the following reasons:

It is in AuraQ’s legitimate interests to use the above data in determining whether a person would be suitable for a role, and if it’s beneficial to the business to do so. AuraQ may pass Personal Data to recruitment partners and background check providers. In any event, AuraQ is committed to ensuring that the Personal Data AuraQ collects, and uses is appropriate for these purposes and does not constitute an invasion of privacy.

All Personal Data is stored securely in accordance with the principles of the Data Protection Act.

5. Marketing Communications

Electronic marketing communications are sent in compliance with the Privacy and Electronic Communications Regulations (PECR).

We will:

Obtain consent before sending marketing emails to individuals where required
Provide clear unsubscribe mechanisms in all marketing communications
Honour opt-out requests promptly

For corporate subscribers (limited companies), marketing may be sent where permitted under PECR and based on legitimate interests, subject to the right to object. You may opt out at any time by:

Clicking “unsubscribe” in emails
Contacting dpo@auraq.com

6. Information security

AuraQ implements and maintains appropriate physical, organisational and technical measures to protect Personal Data and other information it processes against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. AuraQ servers are maintained in secure cloud-based facilities. Access to Personal Data is restricted to authorised personnel, third parties, and other individuals with a legitimate business need, and is granted strictly on least-privilege basis, and are required to comply with this notice.

Any actual or suspected loss, misuse, unauthorised access, disclosure, or compromise of Personal Data must be reported immediately to the DPO at dpo@auraq.com.

All Personal Data incidents will be promptly assessed by AuraQ to determine its scope, impact, and underlying cause. Appropriate containment, mitigation, and notification actions will be initiated as per appropriate requirements. If AuraQ discovers that there has been a breach of Personal Data that poses a risk to the rights and freedoms of individuals, AuraQ will report it to the ICO within 72 hours of discovery.

7. Information sharing

AuraQ will not sell, rent, or otherwise disclose Personal Data to any third-party without prior consent, except in the following circumstances:

7.1. AuraQ shares anonymised information in aggregate form with third parties for business purposes.

7.2. AuraQ discloses Personal Data to any appropriate third-party or legal authority if it is believed that an individual is involved in any illegal or harmful conduct; if AuraQ are required to do so by law; or if AuraQ believe that such action is necessary to (1) comply with the law or with legal process; (2) protect and defend AuraQ rights and property or that of AuraQ clients; (3) prevent fraud; (4) protect against abuse, misuse or unauthorised use of AuraQ websites; or (5) protect the personal safety or property of AuraQ clients, other persons, or the public.

7.3. AuraQ may retain third parties to provide services to AuraQ, such as technical, administrative, logistical, or professional services. These third parties may have access to Personal Data needed to perform their functions, but not for any other purposes. Any such third-party will be bound by contractual and confidentiality agreements not to disclose any Personal Data for any other purpose.

7.4. Changes of business ownership and control.

7.5. AuraQ may, from time to time, expand or reduce its business and this may involve the sale of certain divisions or the transfer of control of certain divisions to other parties. Personal Data provided will, where it is relevant, be transferred. The division and/or the new owner or newly controlling party will, under the terms of this notice, be permitted to use the Personal Data for the purposes it was originally supplied to AuraQ.

If your Personal Data is transferred to other entities within AuraQ or to third party located outside the United Kingdom or European Economic Area (EEA) to countries that do not benefit from an adequacy decision by the UK Government, AuraQ will ensure that appropriate safeguards are implemented in accordance with applicable data protection laws. Such safeguards may include the use of Standard Contractual Clauses approved by the UK Government or other legally recognised transfer mechanisms under the GDPR.

8. Use of data

AuraQ will process (collect, store and use) the Personal Data provided in a manner compatible with the applicable data protection laws and regulations. AuraQ will keep Personal Data accurate and up-to-date and not keep it for longer than is necessary for the purposes set out above in Section 3: Your information within this notice. AuraQ is required to retain information in accordance with laws and regulation, such as that needed for audit purposes. How long certain kinds of Personal Data should be kept may also be governed by specific business-sector requirements and agreed practices. Personal Data may be held in addition to these periods depending on individual business needs.

Any Personal Data submitted will be retained by AuraQ for as long as an individual uses AuraQ’s services, systems, sites or for as long as they remain opted into communication preferences. Personal Data that is submitted through any communications system that is provided may be retained for a longer period.

Unless obliged or permitted by law to do so, and subject to Section 7: Information sharing within this notice, Personal Data will not be disclosed to third parties except to external providers who provide services such as website hosting, data analysis, email delivery and auditing.

All Personal Data is stored securely in accordance with the principles of the Data Protection Act.

Internal record keeping
Improvement of our products/services
Transmission by email of promotional content that may be of interest
Contact for market research purposes which may be done using email, telephone, or mail. Such information may be used to customise or update the website.

If subscribed to, AuraQ will use the subscription email address to send any updates. Un-subscription may be performed using the link in any correspondence or by emailing dpo@auraq.com.

If details of the retention periods applied to the different aspects of an individual’s Personal Data is required, please contact the DPO by email at dpo@auraq.com.

AuraQ does not use any automated or profiling systems for processing Personal Data.

9. Under what circumstances will AuraQ contact an individual?

AuraQ’s aim is not to be intrusive and does not ask irrelevant or unnecessary questions. An individual may be contacted during normal business as usual activities for the performance of a contract, where there has been consent, or through a legitimate interest.

10. What Personal Data does AuraQ hold on an individual?

Upon request, AuraQ will confirm what Personal Data is held on an individual and how it is processed. An individual has the following rights, which may be applicable in certain circumstances and may be subject to certain conditions, exemptions or exceptions as set out in applicable data protection legislation:

Right of access. The right to obtain confirmation about whether Personal Data is being processed and, if so, to obtain access to such Personal Data and information regarding its processing.
Right to rectification. The right to correct incorrect, update, or complete Personal Data, and have the recipients to whom Personal Data was provided, informed of the rectification.
Right to erasure. Subject to certain conditions, individuals have the right to have their Personal Data erased. If Personal Data was made public, AuraQ will take reasonable steps to inform the data controllers who are processing the Personal Data of any request for erasure and to inform the recipients of Personal Data of the request to erase.
Right to restriction of processing. Subject to certain conditions, individuals have the right to obtain restrictions on the processing of their Personal Data, and, in case of restriction, have the processing limited to mere storage.
Right to data portability. Subject to certain conditions (where technically feasible, where there has been consent to the data stored, and only the data provided by the individual), an individual has the right to be provided with their Personal Data, which can be reused as they wish. If requested, AuraQ has the obligation to transfer Personal Data directly to another data controller.
Right to object. Individuals have the right to object to the processing of their Personal Data based on certain grounds and the right at all times to object to the use of their Personal Data for direct marketing purposes.
Right to withdraw consent. If an individual has given their consent to the processing of their Personal Data, they have the right to withdraw that consent at any time, without such withdrawal affecting the lawfulness of processing based on consent before its withdrawal.
Automated individual decision-making, including profiling. In the case of automated individual decision-making, individuals have the right to obtain human intervention, give their point of view, receive an explanation for the automated decision, and challenge that decision.
Right to lodge a complaint with the supervisory authority. You have the right to lodge a complaint with the Information Commissioner’s Office (ICO); their contact details can be found at https://ico.org.uk.

11. How to request information

In the first instance, please contact the DPO by emailing dpo@auraq.com, or telephoning +44 (0)1684 571960. The DPO will respond back as required and will require appropriate and valid proof of identity before any details of Personal Data are shared.

12. External links

AuraQ is not responsible for the privacy practices of other websites that may be accessed from an AuraQ website. This notice does not apply to the collection or use of Personal Data by other websites.

13. Cookie usage

For further information, please refer to AuraQ’s Cookie Policy.

14. Privacy notice changes

AuraQ may update this notice from time to time to reflect changes or in which personal information is processed. AuraQ may amend this notice at any time and will post those changes in a revised notice accessible from AuraQ websites.

Unless otherwise stated, AuraQ will use information in accordance with the notice in effect when the information was collected. If AuraQ materially changes the way AuraQ uses or discloses Personal Data that was collected under a different version of this notice, AuraQ will notify affected individuals via email and provide a reasonable opportunity to opt-out of the revised use or disclosure (which may cause a person to be completely removed from AuraQ databases).

15. Contact information

If there are any requests, questions, or comments concerning this notice and/or the AuraQ Cookie Policy, the DPO may be contacted at dpo@auraq.com. If you have any complaints regarding Personal Data protection, privacy and security matters, or other reasons, contact AuraQ via complaints@auraq.com or by writing to AuraQ Ltd, Clanmere, 33 Graham Road, Malvern, Worcestershire WR14 2HU. AuraQ can also be contacted by telephone on +44 (0)1684 571960.