1.0 Introduction and Data Controller. Aryaana Enterprises Limited, a company incorporated in England and Wales (company number 16160908) with its registered office at 124 City Road, London EC1V 2NX, United Kingdom (“Aryaana”, “we”, “us”), is the data controller for personal data processed through https://www.aryaana.co.uk (the “Website”). This Privacy Policy explains what personal data we collect, how and why it is processed, how it is stored and shared, and the rights available to you under the UK General Data Protection Regulation (“UK GDPR”). For privacy-related enquiries, please contact info@aryaana.co.uk or write to Aryaana Enterprises Limited, 124 City Road, London EC1V 2NX, United Kingdom.

2.0 Scope. This Policy applies solely to personal data collected through the Website. It does not apply to offline activities or to third-party websites or services linked from the Website, which are governed by their own privacy policies.

3.0 Personal Data We Collect. We collect personal data that you provide directly, including your name, business contact details, company information and the content of your enquiries. We also collect technical and usage data automatically, including IP address, device and browser type, operating system, pages visited, timestamps and cookie identifiers. We do not knowingly collect special-category personal data and do not intentionally collect sensitive personal data. You should not submit such data through the Website or contact forms.

4.0 Purposes and Lawful Bases of Processing. Personal data is processed to operate, secure and improve the Website; respond to enquiries; perform pre-contract steps; send administrative communications; manage analytics; and, where permitted, deliver marketing communications. Marketing communications are sent only where permitted by law or where consent has been obtained. Processing is based on legitimate interests (including Website operation, improvement and security), performance of a contract or pre-contract steps, compliance with legal obligations, or, where required, your consent.

5.0 Sharing of Personal Data. Personal data may be accessed by authorised Aryaana personnel and shared with trusted third-party service providers who support our operations, including website hosting, IT services, analytics providers and professional advisers. We may also disclose personal data to regulators, courts or authorities where required by law. We do not sell personal data. All third-party processors are required to implement appropriate technical and organisational measures to protect personal data.

6.0 Data Retention. We retain personal data only for as long as necessary to fulfil the purposes described in this Policy or to comply with legal and regulatory obligations. Enquiry-related data is generally retained for up to three (3) years for business development, record-keeping and regulatory defence purposes. Technical and analytics data is retained for shorter periods in accordance with our internal retention schedules. You may request deletion of your personal data where legally permissible.

7.0 Your Rights. You have rights under the UK GDPR and the Data Protection Act 2018, subject to applicable conditions, including the right to request access to your personal data, rectification or erasure, restriction of or objection to processing, and data portability. Where processing is based on consent, you may withdraw that consent at any time. Requests may be submitted to info@aryaana.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) via www.ico.org.uk.

8.0 Security. We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or loss, including secure hosting, access controls and encryption (such as TLS/HTTPS) where appropriate. However, no internet-based system can be guaranteed to be completely secure.

9.0 International Data Transfers. We do not process personal data outside of the United Kingdom. Any processing of the personal data outside of the United Kingdom, if any undertaken, will comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

10.0 Cookies. The Website uses cookies and similar technologies to operate the Website, recognise returning users, enable functionality, improve performance and support analytics. Cookies are small text files placed on your device and may be session-based or persistent. Essential cookies are necessary for the operation of the Website and do not require consent. Analytics and marketing cookies are used only with your consent, which can be withdrawn at any time through your browser settings or the Website’s cookie banner.

11.0 Cookie Management.  You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website. Third-party plug-ins or embedded content (such as video players or social media widgets) may set cookies outside our control; these are governed by the privacy policies of the relevant third parties.

12.0 Children. The Website is not intended for children under the age of 13. We do not knowingly collect personal data relating to minors. If you believe that personal data relating to a child has been provided to us, please contact us so that appropriate action can be taken.

13.0 Changes to This Policy. We may update this Privacy Policy from time to time. Any changes will be published on the Website with an updated effective date. Where required by law, we will obtain renewed consent for material changes.

14.0 Contact. For privacy-related enquiries, data protection requests or further information about this Policy, please contact info@aryaana.co.uk or write to Aryaana Enterprises Limited, 124 City Road, London EC1V 2NX, United Kingdom.

Effective: 03 January 2025