Privacy Policy
Aetrus (“we”, “us”) is committed to protecting your privacy. This policy explains what personal data we collect, why, and your rights over it, in line with UK GDPR.
What we collect
- Contact form submissions: name, email, phone number, and whatever message you send us.
- Client account data: name, business name, address, email, phone number, and billing details, if you become a client.
- Website usage data: basic technical data (e.g. IP address, browser type) that our hosting provider collects automatically, and analytics data collected by Google Analytics 4 (see Cookies below).
Why we collect it
To respond to enquiries made through our contact form; to provide, invoice, and support the services you've signed up for; to meet our legal and accounting obligations (e.g. record-keeping for HMRC). Our legal basis is either that processing is necessary to perform a contract with you (client data), or our legitimate interest in responding to enquiries (contact form data). We don't use your data for marketing unless you've separately agreed to that.
Who we share it with
We use a small number of trusted providers to run our business, who process data on our behalf: hosting and infrastructure providers; email and productivity providers; accounting and invoicing software; customer relationship management (CRM) software; banking and payment processors. We don't sell your data to anyone, and we only share what each provider needs to do its job. If you'd like to know the specific providers we currently use, just ask.
Cookies
Our contact form uses a captcha service to prevent spam, which may set a cookie. We use Google Analytics 4 to understand how visitors use our website; it is only loaded after you accept analytics cookies — if you reject, no analytics cookies are set, in line with PECR. Google Analytics data is retained for 14 months.
How long we keep it
We keep client and billing data for as long as our accounting and legal obligations require (typically 6 years after a relationship ends, per HMRC record-keeping rules). Contact form enquiries that don't turn into a client relationship are kept only as long as needed to handle the enquiry.
Your rights
Under UK GDPR, you have the right to: access the personal data we hold about you; have inaccurate data corrected; ask us to delete your data, where we're not required to keep it; object to or restrict certain processing; request your data in a portable format. To exercise any of these rights, contact us using the details below. We'll respond within one month.
Complaints
If you're unhappy with how we've handled your data, you can complain to us directly, or to the Information Commissioner's Office (ICO) at ico.org.uk.
Contact us
Via our contact page.