Privacy Notice

This notice explains how Aurevane Limited (“Aurevane”, “we”, “us”) collects, uses and protects personal data, and the rights you have over your information. We are committed to handling personal data lawfully, fairly and with the discretion our clients expect. This notice is provided in accordance with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

01 Who we are

Aurevane Limited is the data controller responsible for your personal data. We are a private concierge and procurement business registered in England and Wales (company number 17271227), with our registered office at 101 Clerkenwell Road, 215, London, EC1R 5BX, United Kingdom.

For any question about this notice or your data, contact us at info@aurevane.co.uk.

02 The information we collect

Depending on how you engage with us, we may collect:

• Enquiry details — the name, email address and message you provide when you contact us through this website or by email.
• Client information — where we take on an engagement, the contact, identity and background details needed to provide our services and to meet our legal obligations.
• Identity and verification data — documents and information required to verify your identity and the source of funds, where the law or a transaction requires it.
• Transaction and instruction details — the particulars of what you ask us to source, arrange or procure, and the correspondence relating to it.

We collect only what we need for the purpose at hand, and we do not sell personal data to anyone.

03 How and why we use it

We use personal data to:

• respond to your enquiry and correspond with you;
• provide, arrange and administer the services you engage us for;
• verify identity, carry out due diligence, and meet anti-money-laundering and other legal obligations;
• maintain our records and manage our business;
• comply with applicable law and respond to lawful requests from authorities.

04 Our lawful bases

We rely on the following lawful bases under the UK GDPR, depending on the activity:

• Legitimate interests — to respond to enquiries and to run and protect our business, balanced against your rights.
• Contract — to take steps at your request and to perform an engagement we have agreed with you.
• Legal obligation — to meet anti-money-laundering, tax, accounting and other statutory duties.

05 Sharing your information

We share personal data only where necessary, and on a confidential basis, with:

• Suppliers and counterparties — where, acting on your behalf and with your knowledge, we arrange a service or source a good and a third party must receive the relevant details to fulfil it;
• Professional advisers — our accountants, legal advisers and verification providers, bound by confidentiality;
• Authorities and regulators — where we are required to do so by law.

Where travel or other services are arranged, we act as a disclosed agent: you contract with the relevant supplier, and only the information needed to fulfil that arrangement is shared with them.

06 International transfers

Our clients and the suppliers we deal with are international. Where personal data is transferred outside the UK, we take steps to ensure it remains protected by appropriate safeguards recognised under UK data protection law.

07 How long we keep it

We keep personal data only as long as necessary for the purpose it was collected, and to meet our legal and regulatory obligations. Records connected to transactions, identity verification and accounting are kept for the periods required by law, after which they are securely deleted.

08 Keeping it secure

We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, and we limit access to those who need it to do their work.

09 Your rights

Under UK data protection law you have rights over your personal data, including to access it, to have inaccurate data corrected, to ask us to erase it or restrict its use in certain circumstances, to object to certain processing, and to data portability where applicable. To exercise any of these, contact info@aurevane.co.uk and we will respond within the time the law allows.

10 Complaints

If you have a concern about how we handle your data, please raise it with us first at info@aurevane.co.uk so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.

11 Changes to this notice

We may update this notice from time to time. The current version is always the one published here, with the date it was last updated shown above.