Airoc Ltd (“We”/ “Airoc") is committed to safeguarding your personal data and respecting your privacy. This privacy policy pertains to your utilisation of our website at airoc-uk.com (“our site”) and outlines the fundamental principles governing the collection and processing of any personal data obtained from you or provided by you to us. This information may be gathered when you inquire about our products and sustainability initiatives, make purchases from our product range, or engage in any form of communication with us.

To comprehend our approach and procedures related to your personal data and how it will be managed, we strongly urge you to read the following carefully. Additionally, this privacy policy informs you about your privacy rights and the legal safeguards in place to protect your data.

Please be aware that our website is not designed for use by children. If you are under the age of 18 and wish to make purchases from our site, it is mandatory for your parent or guardian to place the order on your behalf and provide your personal data.

Your acceptance of this privacy policy is deemed to occur upon your initial use of our site. If you do not concur with the terms and conditions set forth in this privacy policy, we kindly request that you discontinue using our site without delay.

While in contact with us, you have the option to furnish us with personal data, which refers to information that can identify or enable contact with you. We understand that providing the requested personal data is optional, but please note that opting not to do so might result in our inability to deliver the products and services you've sought.

Should we merge personal data with non-personal data, the amalgamated information will be treated as personal data for as long as it remains in a combined state. It's important to clarify that personal data does not encompass data from which the identity has been removed, rendering it anonymous data.

In compliance with the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) and the Data Protection Act 2018 (“Data Protection Legislation”), Airoc UK Limited, a company registered in England and Wales under company registration No. 13311909. Registered address: 71-75 Shelton Street, Covent Garden, London. WC2H 9JQ.

We may gather, utilize, store, and transfer various categories of personal data concerning you, which we have categorized as follows:

• Identity Data: This category encompasses your first name, last name, date of birth, and gender. Identity data may be processed for purposes like creating your account, sending order-related information, order processing and delivery, payment verification, managing our relationship with you (including notifications about privacy policy changes, reviews, or surveys), enabling your participation in competitions, and safeguarding and maintaining our business and site. The legal basis for this processing is the performance of a contract and/or taking steps to enter into such a contract at your request, as well as our legitimate interests (including debt recovery, record keeping, site usage analysis, business operations, administration, IT services, and network security).

• Contact Data: This category includes your billing address, delivery address, email address, and telephone numbers. Contact data may be processed for similar purposes as Identity Data, such as account setup, order processing and delivery, payment verification, relationship management, competition participation, and business and site administration. The legal basis for this processing aligns with the performance of a contract and our legitimate interests.

• Financial Data: Financial data involves payment card details (type, number, name on the card, expiry date, and CCV code) and is used solely for processing and delivering your order, including payment management and debt collection. The legal basis for this processing is the performance of a contract and our legitimate interests.

• Transaction Data: This category pertains to details regarding payments to and from you, along with product and service-related information. Transaction data is processed for the purpose of order processing and delivery and the proper administration of our site and business. The legal basis for this processing is the performance of a contract and our legitimate interests.

• Technical Data: Technical data comprises your internet protocol (IP) address, login data, browser details, operating system, and other device-related information. This data is processed for business and site administration, as well as for delivering relevant website content and advertisements, and assessing advertising effectiveness. The legal basis for this processing is our legitimate interests.

• Profile Data: This category encompasses your email, password, purchase history, preferences, feedback, and survey responses. Profile data may be processed for purposes such as relationship management, competition participation, making recommendations, and keeping our records updated. The legal basis for this processing is the performance of a contract and our legitimate interests.

• Usage Data: Usage data pertains to information about how you interact with our site and services. It is processed for various purposes, including competition participation, delivering relevant website content and advertisements, conducting data analytics to improve our website and marketing, and providing suggestions about goods or services of interest to you. The legal basis for this processing is the performance of a contract and our legitimate interests.

• Marketing and Communications Data: This category relates to your preferences for receiving marketing from us and communication preferences. It is processed for sending relevant notifications, newsletters, and brochures via email, text, or post. The legal basis for this processing is consent and our legitimate interests.

In addition to the specified purposes, we may process your personal data to fulfill legal obligations or protect vital interests.

We also gather, use, and share Aggregated Data, which is statistical or demographic data not directly revealing your identity. Such data is used for various purposes but is not considered personal data under the law. If Aggregated Data is combined with your personal data to identify you, it will be handled in accordance with this privacy notice.

Furthermore, we may provide information about offers and products similar to your past interactions with us. This depends on whether you have an existing contract with us or are a potential new customer. You have the option to opt out of these communications at any time.

We use various methods to gather data from and about you, which encompass the following:

Direct Interactions: You may provide us with your Identity, Contact, and Financial Data during various interactions, including when you order products, complete forms on our website, or correspond with us via postal mail, telephone, email, or other means.

These interactions encompass personal data you share when:

• Placing orders from our site.
• Creating an account on our site.
• Subscribing to our newsletters.
• Requesting marketing materials to be sent to you.
• Participating in competitions, promotions, or surveys.
• Providing feedback or contacting us.

Automated Technologies or Interactions:

• While you engage with our website, we may automatically collect Technical Data relating to your devices, browsing behaviour, and patterns. We gather this personal data through the use of cookies, server logs, and similar technologies.

Third Parties or Publicly Available Sources:

We may receive personal data concerning you from various third-party sources, including:

• Technical Data from analytics and search engine providers (such as Google and Bing) located outside the UK.
• Contact, Financial, and Transaction Data from providers of technical, payment, and delivery services.
• Identity and Contact Data from social media platforms (such as Facebook, Instagram, Pinterest) situated outside the UK.
• Identity and Contact Data from publicly available sources like Companies House and the Electoral Register within the UK.

You have the option to configure your web browser settings to either reject all cookies from websites or selectively receive notifications when websites attempt to set or access cookies. However, it's important to be aware that if you choose to disable or decline cookies, certain sections of this site may become inaccessible or may not function as intended.

You acknowledge and agree that we may divulge your information, including personal data, to the following categories of third parties:

• Suppliers and Subcontractors: This disclosure is necessary for the performance of any contract we establish with them or you.
• Third-Party Service Providers: We may share your data with service providers who offer various services to us.
• Analytics and Search Engine Providers: These parties aid us in enhancing and optimizing our website.
• Data Storage Providers: We collaborate with data storage providers for cloud storage and file hosting services.
• Third-Party Software Providers: This includes entities like CACI Ltd, the provider of Acorn, which assists us in analyzing consumer behaviors and enhancing our site.
• Third-Party Advertising Providers: We engage with providers like Google AdSense, Facebook Custom Audiences, and Rakuten Advertising to deliver effective advertising to you.
• Social Media Platforms: For the purpose of delivering effective advertising, we may share data with platforms such as Facebook, Instagram, and Pinterest.
• Operators of Data Cooperatives: Entities like Epsilon International UK Ltd and Experian, along with third parties who are members of the data cooperative. These parties, which encompass retailers and charities in various categories, analyze Identity Data, Contact Data, and Transaction Data to determine consumer habits. Epsilon may also share this data with third-party cooperative members who may send you marketing materials by post. The legal basis for this processing is consent, typically acquired through an opt-in process on the page where your details are collected.

We may disclose your personal data to third parties in the following circumstances:

• With Your Consent: When you have provided explicit consent.
• Legitimate Interests: When we have a legitimate interest, such as providing or improving our services.
• Business Transactions: In the event of selling or acquiring any business or assets, where personal data may be disclosed to prospective buyers or sellers.
• Change of Ownership: If a third party acquires Airoc Ltd or a significant portion of its assets, personal data held by us about you will be among the transferred assets.
• Legal Obligations: When required to disclose or share your personal data to comply with legal obligations or protect the rights of Airoc Ltd our customers, suppliers, contractors, or others. This includes sharing data with other companies and organizations for purposes like fraud protection and credit risk reduction.

We ensure that all third parties treat your personal data with the utmost security and in accordance with the applicable laws.

Under Data Protection Legislation, you possess the following rights regarding your personal data:

• Right to Access: You can request access to your stored information. We'll provide a copy of your personal data free of charge, except in cases of excessive requests or multiple copies, where a reasonable fee may apply. You're entitled to receive certain details about the processing of your data and its source if not directly collected from you. Additionally, you have the right to ask for your data to be transferred to a third party.
• Right to Object to Data Processing: You can withdraw your consent for personal data processing at any time by contacting us or opting out of marketing materials. Upon receiving your request, we'll promptly cease data processing and, if requested, erase the information unless necessary for legitimate business or legal purposes.
• Right to Restrict Processing: You may request the suspension of data processing in specific situations. These include if you believe your data is inaccurate, if we're processing unlawfully but you don't want the data erased, if data is needed for legal claims, or if you've objected to data use but we need to assess overriding legitimate grounds for its use.
• Right of Rectification and Erasure: You have the right to request corrections or erasure of inaccuracies, incomplete, or unlawfully processed personal data.

If we rely on your consent to process your data, you can withdraw it at any time.

However, this won't affect the lawfulness of prior processing. Note that withdrawing consent may impact our ability to provide certain services, and we'll inform you of such cases when you withdraw your consent.

To exercise these rights, please contact us via email at connect@airoc-uk.com.

We reserve the right to decline requests that are unreasonable or require disproportionate effort, pose a fundamental change to our existing practices, or risk the privacy of others.

Please be aware that our site may contain links to third-party websites, each with its own privacy policies. We are not responsible for these policies and recommend reviewing them before sharing any personal data with these websites.

We will retain your personal data only for as long as reasonably necessary to accomplish the purposes for which it was collected. This includes meeting legal, regulatory, tax, accounting, or reporting requirements. In certain instances, such as the presence of a complaint or if there is a reasonable expectation of litigation related to our relationship with you, we may retain your personal data for a longer period.

To establish the appropriate retention period for personal data, we assess various factors, including the volume, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, and whether those objectives can be achieved through alternative means. We also consider the relevant legal, regulatory, tax, accounting, or other requirements. Once personal data is no longer necessary, we will securely delete or destroy it.

In some cases, we may anonymise your personal data (making it no longer identifiable as yours) for research or statistical purposes. In such instances, this anonymised information may be used indefinitely without further notice to you.

Any future modifications to our privacy policy will be published on this page and, when suitable, communicated to you via email. We encourage you to visit this page regularly to stay informed about any updates or alterations to our privacy policy.

It's crucial that the personal data we maintain about you remains accurate and up-to-date. Kindly keep us informed of any changes to your personal data throughout your association with us.

Please visit our contact page here.