Privacy Policy

AAG IITS Ltd (“AAG IITS”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit aagiits.com, use our website, contact us, submit an enquiry, request a quotation, purchase or enquire about products or services, or otherwise interact with AAG IITS Ltd.

1. Who We Are

AAG IITS Ltd is a company registered in England and Wales.

Company number: 10706484
Website: aagiits.com

For the purposes of UK data protection law, AAG IITS Ltd is the data controller for the personal data described in this Privacy Policy.

If you have a question about this Privacy Policy, wish to exercise a data protection right, or need to contact us about your personal data, please use our Contact Us page:

aagiits.com/contact-us

2. Personal Data We May Collect

The personal data we collect depends on how you interact with us.

We may collect:

• your name;

• email address;

• telephone number, where you choose to provide one;

• company or organisation name;

• billing and delivery information where required for an order;

• details of products, services, quotations or other requirements you enquire about;

• information relating to orders and transactions;

• customer service information;

• correspondence and communications with us;

• information you submit through our website forms;

• technical information relating to your use of our website, such as IP address, browser type, device information and website activity where this information is collected through website technologies, cookies or similar technologies; and

• other personal data you voluntarily provide to us.

Please do not provide personal data that is unnecessary for your enquiry or transaction.

3. How We Collect Personal Data

We may collect personal data directly from you when you:

• submit an enquiry through our Contact Us page;

• request a quotation;

• place or discuss an order;

• purchase or enquire about a product or service;

• request customer support;

• communicate with us;

• provide information in connection with a business relationship; or

• otherwise interact with our website or services.

We may also receive personal data from third parties where necessary for our business activities, including service providers, suppliers, payment providers, delivery and logistics providers, and other organisations involved in processing or fulfilling a transaction.

Where we receive personal data from another source, we will handle it in accordance with applicable data protection law.

4. How and Why We Use Personal Data

We may process personal data to:

• receive, manage and respond to enquiries;

• understand your requirements;

• prepare and provide quotations;

• take steps requested by you before entering into a contract;

• process, manage and fulfil orders;

• supply products and services;

• arrange delivery and logistics;

• provide customer service and support;

• communicate with customers, prospective customers and business contacts;

• manage customer, supplier and other business relationships;

• maintain appropriate business, accounting and transaction records;

• operate, maintain and secure our website and systems;

• detect, prevent and investigate fraud, misuse and security incidents;

• improve our services, website and business operations;

• comply with legal, regulatory, tax and accounting requirements; and

• establish, exercise or defend legal claims.

We will not use personal data for a purpose that is incompatible with the purpose for which it was collected unless the further processing is permitted or required by law.

5. Our Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing personal data. The basis we rely upon will depend on the particular processing activity.

Contract

We may process personal data where it is necessary to take steps at your request before entering into a contract or to perform a contract with you.

This may include responding to a request for a quotation, processing an order, arranging delivery and providing customer support connected with a purchase.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• responding to business enquiries;

• managing customer, supplier and prospective-customer relationships;

• operating and improving our business;

• maintaining the security and integrity of our website and systems;

• preventing fraud and misuse;

• maintaining appropriate business records; and

• protecting or enforcing our legal rights.

Legal Obligation

We may process personal data where necessary to comply with a legal obligation, including applicable tax, accounting, regulatory and other legal requirements.

Consent

Where required, we may rely on your consent for a particular processing activity.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Information You Need to Provide

Where information is marked as required on our website, we need that information to process the relevant request.

For example, our Contact Us form requires certain information so that we can receive and respond to your enquiry.

If information is required to enter into or perform a contract and you do not provide it, we may be unable to provide a quotation, process an order, supply a product or service, or otherwise fulfil your request.

7. Sharing Personal Data

We do not sell your personal data.

Where necessary and lawful, we may share personal data with organisations that help us operate our business or fulfil your requirements, including:

• website hosting and technology providers;

• IT and communications service providers;

• payment service providers, where applicable;

• suppliers and fulfilment partners where necessary to satisfy a customer requirement;

• delivery, courier and logistics providers;

• accounting, legal, insurance and other professional advisers;

• service providers that process personal data on our behalf; and

• government authorities, regulators, courts, law-enforcement agencies or other parties where disclosure is required or permitted by law.

We seek to disclose only the personal data reasonably necessary for the relevant purpose.

Where an organisation processes personal data on our behalf, we take appropriate steps to ensure that suitable data protection arrangements are in place where required by law.

8. Payments

Where online payment functionality is available, payments may be processed by a third-party payment service provider.

Where payment information is entered directly into a payment provider's systems, AAG IITS Ltd may not receive or retain your complete payment-card details.

Payment providers process personal data in accordance with their own legal obligations and privacy information.

9. Cookies and Similar Technologies

Our website may use cookies and similar storage or access technologies for purposes such as providing website functionality, maintaining security, remembering user choices and, where enabled, understanding how the website is used.

We will provide information about the cookies and similar technologies used on our website and apply any consent or choice requirements that apply under UK law.

Where a cookie or similar technology requires consent, it will be subject to the appropriate consent controls.

Some technologies may be used without consent where an applicable legal exemption permits this.

Further information is available in our Cookie Policy and through any cookie controls provided on our website.

10. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including where retention is necessary to meet legal, tax, accounting, regulatory, contractual or reporting requirements or to establish, exercise or defend legal claims.

Retention periods may therefore differ depending on the type of information and the circumstances in which it was collected.

When determining an appropriate retention period, we may consider:

• the nature and amount of the personal data;

• why we collected and use it;

• whether we continue to need it for that purpose;

• the sensitivity of the information;

• the potential risk associated with retaining it;

• our contractual requirements;

• applicable limitation periods; and

• legal, tax, accounting and regulatory requirements.

When personal data is no longer required, we will take appropriate steps to delete, anonymise or securely dispose of it, subject to any continuing legal or legitimate requirement to retain it.

11. International Transfers

Some organisations that provide services to us may process or store personal data outside the United Kingdom.

Where personal data is transferred to a country or organisation outside the UK and UK data protection law requires safeguards for that transfer, we will take appropriate steps to ensure that a lawful transfer mechanism or other required protection is in place.

Where applicable, you may contact us through our Contact Us page for information about safeguards relevant to transfers of your personal data.

12. Security

We take appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Access to personal data is limited as appropriate to people and service providers who require it for legitimate business purposes.

However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.

13. Your Data Protection Rights

Depending on the circumstances and the lawful basis on which we process your personal data, UK data protection law may give you rights including:

• Right of access – to request a copy of personal data we hold about you;

• Right to rectification – to ask us to correct inaccurate personal data or complete information that is incomplete;

• Right to erasure – to ask us to delete personal data in certain circumstances;

• Right to restriction – to ask us to restrict the processing of personal data in certain circumstances;

• Right to data portability – to receive certain personal data in a structured, commonly used and machine-readable format or request its transfer to another organisation where the right applies;

• Right to withdraw consent – where we rely on consent, to withdraw that consent at any time; and

• rights relating to certain forms of automated decision-making where applicable.

These rights are subject to the conditions and exemptions contained in applicable data protection law and do not apply in every circumstance.

To exercise a data protection right, please submit your request through our Contact Us page at:

aagiits.com/contact-us

We may need to request information reasonably necessary to verify your identity before acting on certain requests.

14. Your Right to Object

You have the right to object to certain processing of your personal data where we rely on legitimate interests.

If you object, we will consider your request in accordance with applicable data protection law and will stop the relevant processing where required unless we have lawful grounds to continue.

You also have an absolute right to object to the use of your personal data for direct marketing.

You can exercise your right to object through our Contact Us page:

aagiits.com/contact-us

15. Automated Decision-Making

We do not currently use personal data collected through this website to make decisions about individuals based solely on automated processing that produce legal effects or similarly significant effects.

If this changes, we will update this Privacy Policy and provide the information required by applicable data protection law.

16. Complaints

If you have concerns about how AAG IITS Ltd collects or uses your personal data, please contact us first through our Contact Us page so that we have an opportunity to address your concerns:

aagiits.com/contact-us

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Information about the ICO and how to make a complaint is available at:

ico.org.uk

Your right to complain to the ICO is not affected by first raising the matter with us.

17. Third-Party Websites

Our website may contain links to websites, platforms or services operated by third parties.

AAG IITS Ltd is not responsible for the privacy practices of third-party websites or services. We recommend reviewing the relevant organisation's privacy information before providing personal data to it.

18. Children's Privacy

Our website, products and business services are not specifically directed at children.

We do not knowingly seek to collect personal data from children through the website. If we become aware that personal data relating to a child has been provided in circumstances where it should not have been, we will take appropriate action.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, business activities, services, technologies, legal requirements or data protection practices.

Where appropriate, we will bring significant changes to the attention of affected users.

The current version of this Privacy Policy will be published on this page and identified by the “Last updated” date at the top.

20. Contact AAG IITS Ltd

For privacy enquiries, data protection requests, questions about this Privacy Policy or concerns about how we handle personal data, please contact us through our website:

AAG IITS Ltd
Company No. 10706484
Registered in England & Wales

Contact Us:
aagiits.com/contact-us