Privacy Policy
How Abhika Aura handles website enquiries, business communications and personal information.
1. Who is responsible
ABHIKA AURA LTD, company number 17186771, is responsible for personal information it receives and uses to manage enquiries and its own client relationships. Our displayed location is Leeds, LS9 8FE.
For privacy questions or to exercise your rights, contact insights@abhikaaura.com or +44 7442 302822. This notice concerns our website and ordinary enquiry and client administration. Work involving a client’s systems or personal data is addressed in the relevant project and data-processing terms.
2. Information and sources
We receive the information you choose to submit through the enquiry form, send by email or tell us by telephone, including your name, business or organisation, email address, telephone number, project requirements and correspondence. If you become a client, relevant records may include contractual, invoicing, payment-reference and project-administration information.
Information normally comes directly from you. A person contacting us for a business may provide another relevant business contact’s details where authorised. We do not use this enquiry form to collect payment card details or passwords.
Hosting and security services may process technical connection information such as IP address, browser information, requested page, access time and security events to deliver and protect the website. WordPress administrators may use the site’s login system, which has its own authentication and security functions. Our public enquiry form does not create a visitor account.
3. How the enquiry form works
When you press “Send enquiry”, the form sends your name, company, email, telephone number, selected service and message to this website’s WordPress server for validation. Accepted enquiries are saved privately in the website database with a reference number before an email notification is attempted. These saved records are restricted to website administrators.
Our website tools record notification status and attempt to send the enquiry to our configured business recipient using WordPress’s mail service and any mail provider configured by the website operator. Failed notifications may be retried up to three times in total, and an administrator can request a resend. Acceptance by the mail service does not guarantee delivery to the recipient’s inbox. Your saved enquiry remains available to our administrators if a notification fails.
A mail or security plugin and hosting or email services may keep delivery logs or correspondence under their own configured arrangements. We review those arrangements and give further information where required.
For abuse prevention, the theme temporarily stores a salted hash derived from a connection’s IP address and a submission counter in WordPress transients, with a one-hour expiry. It does not store the raw IP address or enquiry message in those rate-limit records. Expired records may remain physically present until WordPress’s normal cleanup runs.
A random signed submission token helps prevent duplicate records, and a temporary confirmation reference is held on the server for up to 15 minutes. These records do not contain the raw connection IP address.
The form does not store its fields in browser cookies, local storage or session storage. Your browser may remember fields according to your settings. Email delivery is subject to the host’s mail configuration; if the form reports a failure, you can contact us directly by email or telephone.
4. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Answer your personal enquiry and take steps towards a service contract you request | Steps at your request before entering a contract; contractual necessity where you personally contract with us |
| Communicate with staff or representatives of a business client | Legitimate interests in responding to business enquiries and administering business relationships, balanced against your rights |
| Maintain invoicing and records required by law | Legal obligations, including applicable accounting and tax requirements |
| Protect services, prevent misuse and manage complaints or legal claims | Legitimate interests in security and protecting lawful rights; legal obligations where applicable |
| Send optional marketing where consent is required | Consent obtained separately before such marketing; no automatic marketing subscription from an enquiry |
We only use information necessary for the relevant purpose. We do not use this website to carry out automated decisions with legal or similarly significant effects, advertising profiling or behavioural analytics.
5. Who may receive information
Access is limited to people who need information for the relevant enquiry, engagement or legal purpose. Relevant recipients may include authorised staff, contractors bound by suitable obligations, email and hosting providers, IT service providers, and professional accounting or legal advisers. Authorities may receive information where disclosure is legally required.
We do not sell personal information. We do not send initial website enquiry contents to an AI model through this website. If a project proposes external AI processing or additional suppliers, that processing must be considered and disclosed in the project arrangements before use.
Providers processing information for us must have appropriate safeguards and contractual terms where required. Hosting, sign-in or communication providers may also process some information independently under their own privacy notices. Contact us for the relevant provider information for your enquiry.
6. International processing
Email, hosting or technology providers may process information in countries outside the UK. Where a restricted international transfer is made on our behalf, we use a permitted mechanism, such as applicable UK adequacy arrangements or appropriate contractual safeguards, together with any required assessment.
We do not promise that all data remains in the UK. You may ask us which providers and transfer safeguards apply to information we hold about you and request details or a copy of applicable safeguards, subject to lawful restrictions.
7. Retention
We retain information only for as long as reasonably needed for the purpose, applicable legal requirements and the resolution of complaints or claims.
- Website enquiry records: saved website records are scheduled for permanent deletion 365 days after submission. Cleanup and notification retries depend on WordPress scheduled tasks running; overdue tasks run when the site receives traffic or the host runs its scheduler. For an active project or a genuine need to retain information longer, relevant correspondence must be moved to the company’s separate client or legal record system before website deletion. Email copies and backups follow their own controlled retention arrangements.
- Contract and financial records: our standard approach is up to six years after the engagement ends, or for a different period where applicable tax, accounting or legal requirements justify it. This does not mean keeping every technical file or every piece of personal data for six years.
- Technical and security logs: the theme’s temporary rate-limit record expires after one hour; other retention depends on the provider’s operational and security arrangements. We do not specify an unverified universal retention period for hosting-platform records.
Records subject to a genuine dispute or legal hold may need to be kept longer. Unnecessary information is deleted or anonymised, subject to controlled backup cycles and lawful retention. Contact us for the retention criteria applying to your records.
8. Your rights
Depending on the circumstances, UK data protection law gives you rights to access your personal information, correct inaccuracies, request erasure, restrict processing, object to processing based on legitimate interests, and receive qualifying information in a portable format.
Where we rely on consent, you may withdraw it without affecting processing already lawfully carried out. You may object to direct marketing at any time. Some rights have exceptions, including where records must be kept by law or for legal claims.
We respond to rights requests without undue delay and normally within one month, subject to lawful identity checks, clarification, extensions or exemptions. We may ask for enough information to verify your identity. Requests are normally free; any lawful fee or refusal is explained.
9. Security and sensitive information
We use appropriate organisational and technical measures to protect information, taking account of its nature and the risks. No communication or system can be guaranteed completely secure.
Do not put medical details, incident reports identifying people, passwords or other sensitive information into the general enquiry form. A project involving health, safety or other special-category information requires a suitable lawful basis, secure handling and the appropriate contractual arrangements before access.
This website is intended for people seeking professional services and is not aimed at children. Contact us if you believe information about a child has been supplied inadvertently.
10. Cookies, external services and changes
Read our Cookie Policy for the current application configuration and the distinction between our theme, WordPress core, installed plugins and hosting technologies. This website code contains no analytics or advertising tags.
When you follow an external link or use an email or telephone application, that service’s own privacy information applies. We review this notice when our processing changes. The date above identifies the current version; material changes are communicated where required.
11. Privacy complaints
To make a data protection complaint, email insights@abhikaaura.com with the subject “Data protection complaint” and explain your concern. You may also call us if you need help making a complaint. We acknowledge receipt within 30 days, investigate appropriately and communicate the outcome without undue delay.
You can complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. Visit ico.org.uk for its current contact and complaint options. Your right to seek an appropriate legal remedy is unaffected.