Privacy Policy

Privacy Policy

Last updated: 22/12/2025

This Privacy Policy explains how AERLØ ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website, place an order, or otherwise interact with us. This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Who We Are

Business Name: AERLØ
Email: support@aerlo.com

For the purposes of UK data protection law, AERLØ is the data controller responsible for your personal data.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Information You Provide to Us

  • Full name
  • Billing and delivery address
  • Email address
  • Phone number
  • Payment information (processed securely by third-party payment providers)
  • Order details and purchase history
  • Communications you send to us (emails, contact forms, customer support)

b) Information Collected Automatically

  • IP address
  • Browser type and device information
  • Pages visited and interactions with our website
  • Cookies and similar tracking technologies

3. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To process and fulfil orders
  • To communicate with you about your orders or enquiries
  • To provide customer support
  • To improve our website, products, and services
  • To comply with legal and regulatory obligations
  • To prevent fraud and ensure website security

We only process your data where we have a lawful basis to do so.

4. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract: processing necessary to fulfil your order
  • Legal obligation: compliance with tax, accounting, and consumer law
  • Legitimate interests: improving our services, fraud prevention, and website security
  • Consent: where you have opted in to marketing communications or cookies (where required)

5. Marketing Communications

  • You will only receive marketing emails from us if you have opted in or where otherwise permitted by law
  • You may unsubscribe at any time using the link in our emails or by contacting us

6. Cookies

Our website uses cookies and similar technologies to improve functionality and user experience.

You can control or disable cookies through your browser settings. For more information, please see our Cookie Policy (if applicable).

7. Sharing Your Personal Data

We may share your personal data with trusted third parties where necessary, including:

  • Payment processors
  • Delivery and logistics partners
  • Website hosting and IT service providers
  • Analytics and marketing service providers

All third parties are required to respect the security of your personal data and process it in accordance with the law.

8. International Data Transfers

Some of our service providers may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, to protect your personal data.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.

Order and transaction records may be retained for up to 6 years to comply with UK tax and legal obligations.

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate or incomplete data
  • Request erasure of your data (where applicable)
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time (where processing is based on consent)

To exercise your rights, please contact us using the details below.

11. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure.

Payment details are handled securely by third-party payment providers and are never stored directly on our servers.

12. Children’s Data

Our website is not intended for children under the age of 16, and we do not knowingly collect personal data from children.

13. Complaints

If you believe your data protection rights have been breached, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

Website: https://www.ico.org.uk

We encourage you to contact us first so we can attempt to resolve any concerns.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: support@aerlo.com

By using our website, you acknowledge that you have read and understood this Privacy Policy.