1. Who we are
This policy explains how AULEVEXI LTD ("Aulevexi", "we", "us") collects and uses personal data when you visit aulevexi.uk, create an account, buy a subscription or template, or contact us. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
- Legal entity: AULEVEXI LTD, registered in England and Wales
- Company number: 17444162
- Registered address: Unit 13 Roding House, 2 Cambridge Road, Barking, United Kingdom, IG11 8NL
- Email: [email protected]
- Phone: +44 7418 562093
For the personal data described in sections 2 and 3 we are the controller. For the data our business customers put into the apps about their own clients, we act as a processor — see section 4.
2. Data we collect
Account data
Your name, business name, email address, phone number, password (stored only as a secure hash), business address, VAT number if you add one, and your account preferences.
Order and checkout data
When you place an order on our website we collect your full name, email address, phone number, billing address, town or city, postcode, any comment you add to the order, the items ordered and your chosen payment method (card, Apple Pay, Google Pay, Klarna, PayPal or bank transfer).
Subscription and payment data
Your plan, billing period, invoices, trial dates and payment status. Card and wallet details are entered on our payment provider's secure pages and held by that provider; we never see or store your full card number. We receive only a token, the card type, the last four digits and the expiry date.
Support data
Messages, call notes and files you send us when you ask for help or book a setup session.
Technical data and logs
IP address, browser and device type, operating system, pages and app screens visited, timestamps, error reports and security logs (for example sign-in attempts).
Cookies
Small files set by our website and apps, described in section 9.
3. Purposes and lawful bases
| What we do | Lawful basis |
|---|---|
| Create and run your account, provide the apps and deliver templates you buy | Contract |
| Process orders, take payments, send order confirmations and receipts | Contract |
| Provide setup and technical support | Contract |
| Keep accounting and tax records | Legal obligation |
| Keep the service secure, prevent fraud and abuse, fix errors | Legitimate interests |
| Improve the apps using aggregated usage statistics | Legitimate interests |
| Send service notices such as trial reminders and changes to terms | Contract / legitimate interests |
| Send product news and offers by email | Consent (or the soft opt-in for existing customers, with an unsubscribe link in every email) |
| Set non-essential cookies | Consent |
Where we rely on legitimate interests, we have weighed them against your rights and you can object at any time (section 10).
4. Data you store in our apps
Business customers use Aulevexi to store information about their own clients — for example names, contact details, appointments, invoices and task notes. For that data, you are the controller and we are your processor under Article 28 UK GDPR.
- We process it only on your documented instructions and to provide the service.
- Our Data Processing Agreement (DPA) forms part of our terms for business customers. Email [email protected] for a signed copy.
- Our staff and sub-processors are bound by confidentiality.
- We help you respond to your clients' rights requests and notify you without undue delay of any personal data breach affecting your data.
- When your account closes, you can export your data; we then delete it as described in section 7.
If you are a client of one of our customers and want to exercise your rights, please contact that business directly. We will pass on any request we receive to them.
5. Who we share data with
We do not sell personal data. We share it only with:
- Cloud hosting and infrastructure providers that run our servers, databases and backups (sub-processors).
- Payment providers — card processors, Apple Pay, Google Pay, Klarna and PayPal — to take payments. Some act as independent controllers for fraud checks and, for Klarna, credit assessment under their own privacy notices.
- Customer support and email delivery tools used to answer messages and send transactional emails (sub-processors).
- Error monitoring and analytics tools, configured to minimise personal data.
- Professional advisers such as accountants, auditors and lawyers.
- Authorities and regulators when the law requires it, such as HMRC.
- A buyer or successor if our business is sold or restructured, under equivalent protection.
An up-to-date list of our sub-processors is available on request.
6. International transfers
Some of our providers store or access data outside the UK. When this happens we make sure an appropriate safeguard is in place:
- UK adequacy regulations (for example for the European Economic Area or the UK–US Data Bridge for certified organisations);
- the ICO's International Data Transfer Agreement (IDTA); or
- the EU Standard Contractual Clauses with the UK International Data Transfer Addendum.
We also carry out transfer risk assessments where needed. You can ask us for a copy of the relevant safeguards.
7. How long we keep data
| Data | Retention |
|---|---|
| Account data | While your account is open, then 30 days after closure |
| Data you store in the apps | Available to export for 30 days after closure, then deleted; removed from backups within a further 35 days |
| Orders, invoices and payment records | 6 years from the end of the financial year, as required by UK tax law |
| Support conversations | 2 years after the conversation ends |
| Technical and security logs | Up to 90 days, longer only if needed to investigate an incident |
| Marketing preferences | Until you unsubscribe, then a suppression record so we don't email you again |
8. Security
We use encryption in transit (TLS) and at rest, role-based access with multi-factor authentication for staff, daily encrypted backups, access logging and regular updates. Payment details are handled by PCI DSS compliant providers.
No system is completely secure. If a breach is likely to put your rights at risk we will tell you and the ICO as the law requires.
9. Cookies
We use strictly necessary cookies to keep you signed in, protect forms and remember your cookie choice — these don't need consent. With your consent we may also use analytics cookies to understand which pages are useful. You can change your choice at any time in your browser settings; blocking necessary cookies may stop the apps from working.
The shopping cart on this website is held only in your browser's memory for the current page visit and is not saved in cookies or local storage.
10. Your rights
Under UK GDPR you have the right to:
- Access — get a copy of the personal data we hold about you;
- Rectification — have inaccurate data corrected;
- Erasure — ask us to delete your data where there is no reason to keep it;
- Restriction — ask us to pause the use of your data;
- Portability — receive data you gave us in a machine-readable format;
- Objection — object to processing based on legitimate interests and to direct marketing at any time;
- Withdraw consent — where we rely on consent (section 11).
Email [email protected] to use any of these rights. We will reply within one month and may ask you to confirm your identity. There is usually no fee.
11. Withdrawing consent
You can withdraw consent at any time: use the unsubscribe link in any marketing email, change your preferences in Account → Notifications, clear or block analytics cookies in your browser, or email us. Withdrawing consent does not affect processing that took place before.
12. Complaints
If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk, telephone 0303 123 1113.
13. Age restriction
Aulevexi is a service for businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.
14. Changes to this policy
We may update this policy when our services or the law change. We will post the new version here with a new "Last updated" date and, for significant changes, tell account holders by email before they take effect.
Last updated: 19 October 2026.