Privacy Policy

Controller: AE Solutions (AES) Ltd ("AES", "we", "us", "our")
Company number (England & Wales): 14685734
VAT number: 438898035
Registered office: 13A Spath Lane, Wilmslow, Cheshire, SK9 3QN
Privacy lead: Russell Burrows
Contact for privacy matters: hello@aesolutions.io | 01625 836342

1. About this notice

This Privacy Policy explains how AE Solutions (AES) Ltd collects and uses personal data when you visit our website or interact with us online. It applies in addition to any service-specific terms and conditions.

2. The data we collect

We collect and process the following categories of data:

• Identity and contact data (e.g., name, email address, phone number) that you submit via our booking and contact forms.
• Usage and technical data (e.g., IP address, device/browser details, pages viewed, events) generated by your use of the site.
• Cookies and similar technologies used for functionality, analytics and (where enabled) advertising.

We do not intentionally collect special category data via the website and there is no customer account area. Please do not submit sensitive information through general enquiry forms.

3. How we obtain personal data

• Directly from you when you complete forms or communicate with us.
• Automatically through your device when you browse our site (see Cookies & Tracking).
• From service providers that operate our website, analytics and security tools.

4. Purposes and lawful bases for processing

We use your data for the purposes and on the lawful bases set out below:

• Responding to enquiries and managing bookings – performance of a contract or steps taken at your request; and/or our legitimate interests to operate an effective business.
• Providing and securing our website, diagnosing issues and preventing fraud/abuse – our legitimate interests to maintain, secure and improve our services.
• Analytics to understand site performance and improve content – your consent where required under PECR for non-essential cookies/trackers.
• Advertising/remarketing (e.g., via Meta Pixel and other ad platforms) – your consent where required under PECR; and our legitimate interests to promote our services when permitted.
• Complying with legal and regulatory obligations – compliance with a legal obligation.

5. Cookies and tracking technologies

We use cookies and similar technologies for site functionality, analytics (e.g., Google Analytics 4) and—where enabled—advertising (e.g., Meta Pixel and other platforms). Non-essential cookies require your consent under the Privacy and Electronic Communications Regulations (PECR).

Current position: We are implementing a consent mechanism (cookie banner/management tool). Until fully deployed, only cookies necessary for the operation and security of the site should be set by default. You can manage cookies via your browser settings at any time.

Key tools we may use:

• Google Analytics 4 (analytics)
• Meta Pixel (advertising/remarketing)
• Stripe (payments-related cookies on checkout pages, if applicable)
• Hostinger (hosting, performance and security)

For more detail, see our separate Cookie Policy (recommended) or request a copy from us.

6. Sharing your data (recipients and processors)

We share personal data only as necessary with trusted providers who assist us in operating our website and business, including:

• Hosting and infrastructure: Hostinger; CDNs or security services as applicable.
• Email and productivity: Google Workspace.
• Analytics and diagnostics: Google Analytics 4; error/performance monitoring as applicable.
• Advertising platforms: Meta, Google Ads, LinkedIn (remarketing pixels and audiences).
• Payments: Stripe (if you transact with us online).
• Development and IT support: HyperPath Digital Ltd.

Where third parties act as processors, they are bound by contracts that require them to protect your data and only process it under our instructions. We may also share data where required by law or to establish, exercise or defend legal claims.

7. International transfers

Some providers may be located outside the UK/EEA or may transfer data internationally (for example to the United States). Where this occurs, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, plus additional technical and organisational measures where appropriate.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out above, and to meet legal, accounting or reporting requirements. Typical periods are:

• Enquiry and booking correspondence: up to 24 months after last contact.
• Website logs and security records: up to 12 months.
• Analytics data: up to 26 months (tool default or shorter where possible).
• Marketing/remarketing audiences: until you withdraw consent or object, or after 24 months of inactivity.
• Payment/transaction records (Stripe): 6 years to meet tax and accounting obligations.
• Job applications submitted via the site (if used): 6 months unless hired.

9. Marketing and remarketing

We do not currently send email or SMS marketing. We may use online remarketing/advertising tools (e.g., Meta) in the future. Where PECR or UK GDPR requires consent, we will request it and honour your choices. You can withdraw consent at any time and may also control personalised ads through platform settings.

10. Your rights

Under UK GDPR you have rights to:

• Access your personal data and receive a copy;
• Correct inaccurate or incomplete data;
• Erase your data in certain circumstances;
• Restrict processing in certain circumstances;
• Object to processing based on our legitimate interests or to direct marketing;
• Data portability where applicable;
• Withdraw consent at any time where processing relies on consent.

To exercise your rights, contact us at hello@aesolutions.io. We may need to verify your identity before responding.

11. Automated decision-making

We do not carry out decisions based solely on automated processing that have legal or similarly significant effects on individuals.

12. Children’s data

Our website and services are intended for adults and are not directed at children. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. How we protect your data

We use appropriate technical and organisational measures to protect personal data, including TLS encryption in transit, access controls, least-privilege access, regular patching/updates and staff awareness. No system is 100% secure, but we work to mitigate risks proportionately.

14. Questions and complaints

If you have questions or concerns, contact us at hello@aesolutions.io.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

15. Changes to this notice

We may update this Privacy Policy from time to time to reflect changes in law or our practices. The version and effective date are shown at the top of this page.

16. TRADE ASSOCIATIONS AND LOGOS

You must be registered with any affiliate mentioned and have permission to use any logos on your site. Add or remove these details within 14 days of any change.