Privacy Policy
Effective Date: 16 July 2026
1. Introduction and company information
This Privacy Policy explains how Aurora Soundworks Ltd collects, uses, discloses, stores, and protects personal data when you visit our website, contact us, purchase our products or services, or otherwise interact with us. This policy applies to all personal data processed by Aurora Soundworks Ltd in connection with our audio-related business activities.
Data controller: Aurora Soundworks Ltd
Address: Aurora Soundworks, Unit 4, The Maltings, Station Road, Long Eaton, Nottingham NG10 1GX, United Kingdom
Email: [email protected]
Phone: +44 115 946 7283
We are committed to handling personal data in a lawful, fair, transparent, and secure manner in accordance with applicable privacy and data protection requirements.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, company name, job title, and similar identifiers.
- Contact data: email address, telephone number, billing address, delivery address, and correspondence details.
- Account and transaction data: purchase history, order details, invoices, payment status, and service records.
- Technical data: IP address, browser type, device identifiers, operating system, referral source, and usage logs.
- Communication data: messages sent to us by email, telephone, contact forms, or other channels.
- Marketing preferences: subscription choices, communication preferences, and consent records.
- Audio-related project data: content and materials you provide for recording, mixing, mastering, production, consultation, or other audio services.
We collect personal data directly from you, automatically through our website and systems, and from third parties where permitted by law, such as payment processors, delivery providers, and professional advisers.
We do not intentionally collect special category data unless you choose to provide it or it is necessary for a specific service. If you provide such information, we will handle it with appropriate care and only where a lawful basis applies.
3. Purpose of data processing
We process personal data for the following purposes:
- To respond to enquiries and provide quotations, consultations, and customer support.
- To supply audio products and services, including recording, mixing, mastering, production, and related work.
- To manage orders, payments, invoices, deliveries, refunds, and account administration.
- To communicate with you about your projects, appointments, and service updates.
- To maintain business records, meet contractual obligations, and manage relationships with clients and suppliers.
- To improve our services, website, operations, and customer experience.
- To send marketing communications where permitted and/or with your consent.
- To detect, prevent, and investigate fraud, abuse, security incidents, and unlawful activity.
- To comply with legal obligations, regulatory requirements, and lawful requests.
4. Legal basis for processing
We only process personal data where we have a valid legal basis. Depending on the context, we rely on one or more of the following:
- Consent: where you have given clear permission, for example for certain marketing communications or optional cookies.
- Contract: where processing is necessary to enter into or perform a contract with you, including providing requested services or products.
- Legal obligation: where processing is required to comply with applicable laws, tax rules, accounting obligations, or lawful requests from authorities.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as operating and improving our services, securing our systems, managing customer relationships, and protecting our business, provided those interests are not overridden by your rights and freedoms.
Where required by applicable law, we will seek your consent before processing your personal data for a specific purpose.
5. Data sharing and third parties
We may share personal data with third parties where necessary and lawful, including:
- Service providers: IT hosting, cloud storage, email providers, website analytics, customer relationship tools, and other technology suppliers.
- Payment processors: companies that process card or online payments on our behalf.
- Delivery and logistics partners: providers involved in shipping or delivering products.
- Professional advisers: accountants, auditors, insurers, lawyers, and similar advisers.
- Regulators and authorities: where disclosure is required by law or necessary to protect our rights.
- Business partners: contractors, collaborators, or studios involved in delivering audio services, where appropriate.
We require third parties to handle personal data securely and only for specified purposes. Some third parties may act as independent controllers and will process your data under their own privacy notices.
6. Data transfer to third countries
Some of our service providers may be located outside the United Kingdom, including in countries that may not provide the same level of data protection as the UK. Where we transfer personal data internationally, we will take appropriate safeguards as required by applicable law.
These safeguards may include:
- Using approved contractual clauses or equivalent transfer mechanisms.
- Assessing the adequacy of the destination country’s protections.
- Applying additional technical and organisational measures where appropriate.
By using our services or communicating with us, you acknowledge that your personal data may be transferred internationally in accordance with this policy and applicable law.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, contractual, and reporting requirements.
- Customer and contract records: typically retained for the duration of the relationship and for a reasonable period afterwards.
- Financial and tax records: retained for the period required by applicable law.
- Marketing data: retained until you unsubscribe, withdraw consent, or object where applicable.
- Support and communications: retained as needed to manage enquiries and maintain records.
- Technical logs and security records: retained for limited periods unless a longer retention is necessary for security, investigation, or legal reasons.
When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request limitation of processing in certain situations.
- Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where applicable, have it transmitted to another controller.
- Objection: to object to processing based on legitimate interests and, in some cases, to direct marketing.
To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding. We will respond within any timeframe required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain optional features, services, or communications. You can withdraw consent by contacting us at [email protected] or by using any unsubscribe or preference-management option we provide.
10. Right to complain
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.
You may also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In the United Kingdom, this is the Information Commissioner's Office (ICO). We encourage you to contact us before submitting a complaint so that we may address your concerns directly.
11. Data security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, encryption, secure storage, role-based permissions, staff confidentiality obligations, and regular security reviews.
However, no system can be guaranteed to be completely secure. You are responsible for keeping any passwords, credentials, or access details confidential and for notifying us promptly if you suspect any unauthorised use of your information.
12. Contact information
If you have questions about this Privacy Policy or how Aurora Soundworks Ltd handles personal data, please contact us:
Aurora Soundworks Ltd
Aurora Soundworks, Unit 4, The Maltings, Station Road, Long Eaton, Nottingham NG10 1GX, United Kingdom
Email: [email protected]
Phone: +44 115 946 7283
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any updated version will be posted on our website with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Aurora Soundworks Ltd processes personal data. Continued use of our services after any changes become effective will constitute acceptance of the updated policy, to the extent permitted by law.