Privacy policy.

Avora respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, store and protect information when you visit this website, contact us, request a quotation, purchase services or otherwise communicate with us.

We process personal information in accordance with applicable UK data protection law, including the UK GDPR, the Data Protection Act 2018 and applicable provisions of the Privacy and Electronic Communications Regulations (PECR), as amended from time to time.

This policy should be read alongside our Terms & Conditions and any proposal or service agreement provided to you.

Avora is an independent UK web design and digital solutions business. For personal information collected for our own business purposes, Avora will generally act as the data controller.

Where we build or manage a client website and process personal information on that client's behalf, we may instead act as a data processor. The precise roles depend on the service and processing involved.

Contact and enquiry information may include your name, email address, telephone number, optional business name, project requirements, budget, preferred timescale, website address and anything you choose to include in a message.

If you become a client, we may collect billing and payment records, project correspondence, domain or hosting information, access credentials where necessary, brand assets, content and information needed to configure your website, analytics, SEO or other agreed services.

Depending on the technologies in use, visits may generate technical information such as IP address, browser and device type, operating system, approximate location, pages visited, referring website, interactions and performance data.

We only collect information reasonably necessary for the relevant purpose. Please do not send passwords or sensitive personal information through our general enquiry form.

We obtain information directly from you through forms, email, telephone, social media and project communications; through your interaction with this website; from service providers used to deliver agreed work; and, where permitted, from publicly available business sources.

We use it to respond to enquiries, provide quotations and services, manage client relationships, process payments and invoices, configure websites, domains, hosting, analytics and SEO, provide support, maintain records, improve and secure our services, prevent fraud, comply with legal duties and protect legal rights.

We do not sell personal information. We only send marketing where legally permitted and, where required, with consent.

Contract: where processing is necessary to take steps at your request or to perform an agreement with you.

Legitimate interests: to operate and improve Avora, secure our services, prevent fraud, manage business relationships and respond to genuine enquiries, where those interests are not overridden by your rights.

Consent: where you have made a valid choice, including for non-essential cookies or marketing where consent is required. You may withdraw consent at any time.

Legal obligation and legal claims: where processing is needed to meet a legal duty or establish, exercise or defend a claim.

When you submit the Avora enquiry form, we use the information provided to respond, discuss your requirements and, where appropriate, prepare a quotation or provide services.

The form may collect your name, email address, optional telephone and business details, project type, budget, preferred timing, current website and message. General enquiry forms should not be used to send passwords or special-category personal information.

This website may use cookies or similar technologies for essential functionality, security, preferences and, where enabled, understanding usage and performance.

Non-essential analytics or marketing technologies will only be used where legally required consent has been obtained. You may control cookies through the available preference controls or your browser, although blocking necessary storage may affect functionality.

We may use carefully selected providers for hosting, domains, email, cloud storage, payments, analytics, enquiry management, spam prevention, security, SEO, project management, communications and accounting. We provide only the information reasonably necessary for their function and use appropriate contractual safeguards where required.

Client websites may use third-party services selected by the client or recommended by Avora. Each client remains responsible for ensuring its own website has appropriate privacy notices, cookie controls and legal information. Where Avora processes information on a client's behalf, separate data-processing terms may be required.

If you contact us through WhatsApp, Instagram or LinkMe, those platforms process your information under their own privacy policies.

Some providers may process information outside the United Kingdom. Where this occurs, we take appropriate steps to ensure that the transfer is lawful and that required safeguards are in place.

We keep information only as long as reasonably necessary to provide services, maintain business and financial records, resolve disputes, enforce agreements, meet legal duties and handle legal claims. Retention periods vary by information type. Information no longer required is securely deleted, anonymised or otherwise disposed of where appropriate.

We take reasonable technical and organisational measures designed to protect information against unauthorised access, accidental loss, destruction, alteration, disclosure and misuse.

No online transmission or storage system can be guaranteed completely secure. Avoid sending passwords or highly sensitive information through ordinary email or general enquiry forms, and promptly change any credentials shared for a completed project.

Depending on the circumstances, you may have rights to be informed, access your information, correct it, request erasure or restriction, receive portable data, object to processing, withdraw consent and receive safeguards relating to automated decisions. Legal exceptions may apply.

Contact us using the details above to exercise a right. We may need to verify your identity before responding.

We may occasionally send information about Avora's services where permitted by law. Where consent is required, we will obtain it through an affirmative choice. You may unsubscribe at any time.

Our services are primarily directed to adults. We do not knowingly seek to collect children's personal information unless necessary for a specific lawful purpose.

We are not responsible for the privacy, security or content of third-party websites linked from this site. Review their privacy information before providing personal details.

We may update this policy to reflect changes to our services, processing, technology, law or regulatory guidance. The latest version will appear here with its effective date.