Privacy Policy

1. Who We Are

AuACQ Ltd ("AuACQ", "we", "us", "our") is a company registered in England and Wales. We operate the website auacq.com and provide high-performance lead acquisition services to businesses in competitive verticals.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We collect personal data in the following situations:

• Enquiry and contact forms — name, work email address, company website, and the content of your message when you submit a free audit request or contact us.
• Communications — email, phone, or video call records when you correspond with us.
• Client accounts — billing details, company information, and any data shared during the delivery of services.
• Website analytics — aggregated, anonymised data on page visits, session duration, and traffic source via analytics tools. We do not use this to identify individuals.
• Cookies — see Section 8 below.

We do not collect special category data (e.g. health, ethnicity, religion) and we do not knowingly collect data from individuals under the age of 18.

3. How We Use Your Data

We use your data to:

• Respond to audit requests and enquiries
• Deliver, manage, and improve our services to clients
• Send service-related communications (e.g. reports, invoices, account updates)
• Comply with legal and regulatory obligations
• Maintain the security of our systems and prevent fraud

We do not sell your personal data to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects.

4. Legal Basis for Processing

We process personal data on the following legal grounds:

• Contract — processing is necessary to perform a contract with you or to take steps at your request before entering into one.
• Legitimate interests — to respond to enquiries, improve our services, and maintain business operations, where those interests are not overridden by your rights.
• Legal obligation — where we are required to process data to comply with UK law.
• Consent — where we have obtained your explicit consent (e.g. marketing communications, if applicable).

5. Data Sharing

We may share your personal data with:

• Service providers — trusted third parties that help us operate our business (e.g. email platforms, cloud hosting, analytics), under strict data processing agreements.
• Professional advisers — lawyers, accountants, and insurers where necessary.
• Authorities — law enforcement or regulatory bodies where we are legally required to do so.

We do not transfer your personal data outside the UK or EEA unless appropriate safeguards are in place (e.g. Standard Contractual Clauses or an adequacy decision).

6. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Enquiry data is kept for up to 24 months. Client data is retained for up to 7 years following the end of an engagement for accounting and legal compliance purposes. You may request deletion at any time (see Section 7).

7. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your data in certain circumstances.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at the details in Section 10. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies — small text files placed on your device. We use:

• Essential cookies — required for the website to function correctly.
• Analytics cookies — to understand how visitors use our site (aggregated and anonymised data only).

You can control cookies through your browser settings. Disabling cookies may affect some functionality of the site.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. No method of transmission over the internet is 100% secure, but we take our obligations seriously and review our security practices regularly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted at the top of this page with a revised date. We encourage you to review this policy periodically.