About This Policy
Drive Aurora Limited is committed to protecting your privacy and personal data. This policy explains how we collect, use, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information About Us
Drive Aurora Limited is a company registered in England and Wales under company number 12345678. Our registered office is at 42 Fitzroy Street, London W1T 6EB, United Kingdom.
We are the data controller for the personal data we process about you. If you have any questions about this privacy policy or our data processing practices, please contact our Data Protection Officer:
- Email: [email protected]
- Post: Data Protection Officer, Drive Aurora Limited, 42 Fitzroy Street, London W1T 6EB
- Phone: +44 20 7123 4567
2. Information We Collect
2.1 Information You Provide to Us
We collect information you provide directly to us, including:
- Contact Information: Name, email address, phone number, postal address
- Account Information: Username, password, and other registration details
- Communication Data: Information in emails, letters, phone calls, and live chat communications
- Marketing Preferences: Your preferences for receiving marketing communications
- Survey Data: Responses to surveys and feedback forms
- Transaction Information: Details of products and services you've purchased
2.2 Information We Collect Automatically
When you visit our website, we automatically collect certain information:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, links clicked, referring websites
- Location Data: General geographic location based on IP address
- Cookie Data: Information collected through cookies and similar technologies
2.3 Information from Smart Home Devices
If you use our smart home products, we may collect:
- Device Usage Data: How you interact with our products and services
- Performance Data: Device functionality, error reports, and technical diagnostics
- Environmental Data: Sensor readings for temperature, humidity, light levels (anonymised)
- Voice Commands: When you use voice control features (processed locally where possible)
3. How We Use Your Information
We use your personal information for the following purposes under the following lawful bases:
3.1 Contract Performance
- Processing and fulfilling your orders
- Providing customer support and technical assistance
- Installing and maintaining smart home systems
- Processing payments and managing accounts
3.2 Legitimate Interests
- Improving our products and services
- Conducting research and analytics
- Preventing fraud and ensuring security
- Managing our business operations
3.3 Legal Compliance
- Complying with legal and regulatory requirements
- Responding to legal requests and court orders
- Protecting our legal rights and interests
3.4 Consent
- Sending marketing communications (where consent is required)
- Using non-essential cookies and tracking technologies
- Processing special categories of personal data
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
4.1 Service Providers
We work with trusted third-party service providers who assist us in operating our business:
- Payment processors (for transaction processing)
- Cloud hosting providers (for data storage and website hosting)
- Installation partners (for smart home system installation)
- Marketing service providers (for email marketing and analytics)
- Customer support platforms (for help desk services)
4.2 Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal processes and regulatory requirements
- Respond to requests from law enforcement or government agencies
- Protect our rights, property, or safety and that of others
- Investigate and prevent fraud or security breaches
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.
5. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:
- Customer Records: 7 years after the end of the customer relationship (for legal and tax compliance)
- Marketing Data: Until you unsubscribe or withdraw consent
- Website Analytics: 26 months (anonymised after 14 months)
- Support Communications: 3 years after resolution
- Device Data: As long as you use our products and services
6. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
6.1 Right of Access
You can request a copy of the personal data we hold about you and information about how we process it.
6.2 Right to Rectification
You can ask us to correct any inaccurate or incomplete personal data.
6.3 Right to Erasure
You can request that we delete your personal data in certain circumstances.
6.4 Right to Restrict Processing
You can ask us to limit how we use your personal data in certain situations.
6.5 Right to Data Portability
You can request a copy of your personal data in a machine-readable format.
6.6 Right to Object
You can object to our processing of your personal data for direct marketing or legitimate interests.
6.7 Rights Related to Automated Decision-Making
You have rights regarding decisions made solely by automated means that significantly affect you.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected] or use our online privacy portal. We will respond to your request within one month.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data:
- Encryption: Data is encrypted in transit and at rest using industry-standard protocols
- Access Controls: Strict access controls and authentication procedures
- Regular Testing: Security systems are regularly tested and updated
- Staff Training: All staff receive data protection and security training
- Incident Response: Procedures in place to respond to data breaches
8. International Transfers
Your personal data is primarily processed within the UK and European Economic Area (EEA). If we transfer data outside these areas, we ensure adequate protections through:
- EU Commission adequacy decisions
- Standard Contractual Clauses
- Binding Corporate Rules
- Other lawful transfer mechanisms
9. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your website experience. For detailed information about our cookie practices, please see our Cookie Policy.
10. Children's Privacy
Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.
11. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:
- Posting the updated policy on our website
- Sending an email notification to registered users
- Displaying a prominent notice on our website
12. Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
Data Protection Officer
Drive Aurora Limited
42 Fitzroy Street
London W1T 6EB
United Kingdom
Email: [email protected]
Phone: +44 20 7123 4567
13. Complaints
If you believe we have not handled your personal data in accordance with this policy, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk