Privacy Policy

This website is operated by AeronTech Limited ("AeronTech", "we", "us", "our").

For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, AeronTech Limited is the data controller of the personal data processed in connection with this website and our services. (GOV.UK)

This Privacy Policy explains how we collect, use, store and share your personal data when you:

• Visit or use our website, aerontech.io
• Contact us by email, phone or through online forms
• Use any products, platforms or services we provide under the AeronTech brand

This Privacy Policy does not cover third party websites, services or platforms that you may access via links from our website. Those services have their own privacy notices, and you should review them separately.

The types of personal data we may collect include:

3.1 Information you give us directly

When you:

• Fill in a contact form
• Request a demo, call or consultation
• Subscribe to updates or marketing
• Enter into a contract with us or your organisation does

We may collect:

• Identity data: first name, last name, username or similar identifier, job title, company name
• Contact data: email address, telephone number, postal address, preferred communication channels
• Account and profile data: login details, profile information, service preferences
• Business relationship data: information about your organisation, role, decision making authority, and the products or services you are interested in
• Support and communication data: messages, emails and notes from calls or meetings

If our services are used in relation to financial markets or trading infrastructure, we may also process information required to provide those services and to comply with regulatory and risk management obligations, such as:

• KYC / compliance data: copies of ID documents, proof of address, information required by anti money laundering and sanctions rules (where relevant and appropriate)
• Transaction and usage context: information about how you or your organisation use our technology in connection with trading or market access (usually on a business to business basis rather than directly with consumers)

3.2 Information we collect automatically

When you visit our website or use our online services, we may automatically collect:

Technical data:

• IP address
• Browser type and version
• Device type, operating system and platform
• Time zone setting and approximate location

Usage data:

• Pages viewed, links clicked, time spent on pages
• Referring site or campaign (where available)
• Interaction with forms, buttons and other site features

This information is typically collected using cookies and similar technologies.

3.3 Information from third parties

We may receive personal data about you from:

• Your employer or colleagues, if your organisation is a client or prospective client
• Referrals, partners or introducers who have your permission to share your details
• Analytics providers and advertising networks, where permitted by law and your consent settings
• Public sources such as Companies House, LinkedIn or your company's website

We only process your personal data where we have a valid legal basis under UK GDPR. The main purposes and bases are: (ico.org.uk)

5.1 To provide our services

We use your data to:

• Respond to enquiries and provide information you request
• Set up and manage accounts or access to our technology
• Provide support, maintenance and technical assistance
• Deliver demonstrations, trials or proof of concept work

Legal basis: Performance of a contract or taking steps at your request prior to entering into a contract.

5.2 To operate and improve our website and services

We use technical and usage data to:

• Maintain the security and integrity of our systems
• Diagnose issues and ensure service availability
• Analyse site usage and improve content and user experience
• Develop and enhance our products and features

Legal basis: Legitimate interests in running, securing and improving our business and services, provided these interests are not overridden by your rights and interests.

5.3 To manage our business relationship with you or your organisation

We may process your data to:

• Administer contracts, billing and payments
• Manage communication with you and your organisation
• Record key information about the relationship and relevant decisions

Legal basis: Performance of a contract, and legitimate interests in managing our commercial relationships.

5.4 To comply with legal and regulatory obligations

Given our nature of business (including administration of financial markets and related services), we may need to process personal data to: (Find and Update Company Information)

• Comply with UK financial services, tax and company law
• Comply with anti money laundering, counter terrorist financing and sanctions screening obligations, where applicable
• Respond to lawful requests from regulators, courts or law enforcement

Legal basis: Compliance with legal obligations.

5.5 Marketing and communications

We may use your contact details to send:

• Service updates and operational notices
• News about features, research, events or insights related to our services
• Information about products and services we think may be relevant to you or your organisation

We will only send you direct electronic marketing where we are permitted to do so under UK GDPR and the Privacy and Electronic Communications Regulations, either because:

• You have consented, or
• You are a business contact and we have a legitimate interest in telling you about related services, and you have not opted out.

You can opt out of marketing at any time by using the unsubscribe link in our emails or by contacting us at the email address above.

Under UK data protection law, you have a number of rights in relation to your personal data, including: (ico.org.uk)

• Right of access – to request a copy of the personal data we hold about you
• Right to rectification – to have inaccurate or incomplete data corrected
• Right to erasure – to ask us to delete your data in certain circumstances
• Right to restrict processing – to ask us to limit how we use your data
• Right to data portability – to receive certain data in a structured, commonly used, machine readable format and to have it transferred to another controller, where technically feasible
• Right to object – to object to our processing where we rely on legitimate interests or are using your data for direct marketing
• Rights in relation to automated decision making and profiling – where applicable

You also have the right to withdraw your consent at any time where we rely on consent for processing. Withdrawal of consent will not affect the lawfulness of processing carried out before you withdraw.

To exercise any of these rights, please contact us at privacy@aerontech.io. We may need to verify your identity before responding to your request.

We do not sell your personal data. We may share it with:

Service providers and processors who help us operate our business, such as:

• Cloud hosting and infrastructure providers
• IT support, security and monitoring services
• Email, CRM and analytics platforms

Professional advisers, such as lawyers, auditors and consultants, where necessary for advice or compliance

Business partners or group companies, where services are delivered jointly or via a group structure

Regulators, law enforcement or authorities, where required by law or to protect our rights, users or the public

Prospective buyers or investors, in the context of mergers, acquisitions or restructuring, subject to appropriate confidentiality obligations

Where we use third party processors, we require them to:

• Only process personal data on our instructions
• Keep it secure
• Not use it for their own purposes

Some of our service providers or systems may be located outside the United Kingdom and the European Economic Area. If personal data is transferred internationally, we will ensure that appropriate safeguards are in place, for example: (ico.org.uk)

• The country has been recognised as providing an adequate level of protection; or
• We use appropriate contractual safeguards, such as the UK International Data Transfer Agreement or standard contractual clauses; or
• Another lawful transfer mechanism under UK data protection law applies.

You can contact us if you would like more information about the safeguards in place for a particular transfer.

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including for:

• Providing services to you or your organisation
• Meeting legal, regulatory, accounting or reporting requirements
• Resolving disputes and enforcing our agreements

Retention periods may vary depending on the type of data and our obligations. For example, information related to financial transactions or compliance may need to be retained for a number of years under applicable law.

When data is no longer required, we will either delete it securely or anonymise it so that it can no longer be linked to you.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure, in line with our obligations under UK GDPR and the Data Protection Act 2018. (GOV.UK)

However, no system is completely secure, and we cannot guarantee absolute security of your information transmitted to us or stored by us. Where you have login details or passwords for any AeronTech services, you are responsible for keeping those credentials confidential.

If you are unhappy with how we have used your personal data, please contact us first so we can try to resolve the issue.

You also have the right to make a complaint to the UK supervisory authority, the Information Commissioner's Office (ICO): (ico.org.uk)

• Website: https://ico.org.uk
• Phone: 0303 123 1113
• Postal address:
• Information Commissioner's Office
• Wycliffe House
• Water Lane
• Wilmslow
• Cheshire
• SK9 5AF

Our website and services are designed for business and professional use. They are not intended for children under 18 years of age, and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can take appropriate steps.

We may update this Privacy Policy from time to time, for example to reflect changes in:

• Our services or business structure
• Applicable laws or regulatory guidance
• Technology, security or operational practices

When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the website or by email.

We recommend that you review this Privacy Policy periodically so you stay informed about how we protect your information.

Last updated: 9 December 2025