01Who we are
This website is run by Aevion Labs (“we”, “us”), a product studio based in Manchester, United Kingdom.
We decide why and how the personal data described in this notice is used, which makes us its controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have a question about it, email hello@theaevionlabs.com.
- Trading name
- Aevion Labs
- Based in
- Manchester, United Kingdom
02What we collect
When you get in touch
If you send a brief through our form, we receive your name, email address and message, and, if you add them, your company, the kind of product you need and how you would like to pay. If you email or call us, we receive whatever you choose to share.
When we work together
We keep contact and billing details for the people we work with, and project records such as proposals, feedback and invoices. Material you share for a project may contain personal data about your own staff or customers; we handle that only to do the work, as described in our terms of business.
When you browse, if you allow analytics
Only if you choose Accept in our cookie banner, each page you open sends us a visit record. It contains:
- a random visitor ID stored in your browser, and a count of your visits;
- the page address, title and query string, and the page that sent you here;
- your browser and version, operating system, language, screen and window size, pixel density, touch support, number of processor cores, device memory and connection type and speed;
- your time zone and how long the page took to load;
- your IP address, and an approximate location worked out from it: country, region, town, postcode area, coordinates, network provider, and whether the connection looks like a mobile network, a proxy or a data centre;
- a precise position, but only if you have already allowed this website to use your location in your browser's settings. We never ask for it.
If you choose Reject, none of this is collected and the visitor ID is removed.
On every visit
Like any website, our hosting provider processes your IP address and the details of each request in order to deliver pages and keep the service secure. In production we also measure page speed with Vercel Speed Insights, which records anonymous performance figures and does not use cookies or store anything on your device.
On our Live newspage, story images load from the publishers' own servers, so those servers receive your IP address. Videos there load from their hosts only if you choose to play them.
We do not knowingly collect special category data, and we ask you not to send it to us.
03Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Reply to enquiries and prepare proposals | Legitimate interests in answering people who contact us; and taking steps you ask for before a contract |
| Deliver projects and Aevion Care, and send invoices | Contract; and legal obligation, for accounting and tax records |
| Understand how the site is used, so we can improve it | Consent, which you can withdraw at any time |
| Keep the website secure and working | Legitimate interests in running a safe, reliable website |
| Meet legal requests and defend legal claims | Legal obligation; and legitimate interests |
We do not sell personal data, use it for advertising, or make decisions about you by automated means that have legal or similarly significant effects. We do not send marketing emails unless you ask us to.
05International transfers
Some of our providers are based in, or process data in, the United States and other countries outside the UK. Where they do, we rely on the safeguards UK law provides for those transfers, such as the International Data Transfer Agreement or Addendum, standard contractual clauses, or the UK extension to the EU–US Data Privacy Framework for providers certified under it.
06How long we keep it
- Enquiries: 24 months after our last contact, unless we go on to work together.
- Client and project records: six years after the end of the project, as UK tax and company law expects.
- Visit records from analytics: 24 months.
07Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected, and incomplete data completed;
- have your data erased, in some circumstances;
- restrict how we use it, or object to our use of it based on legitimate interests;
- receive data you gave us in a portable format, where we rely on consent or contract;
- withdraw consent at any time, without affecting what we did before you withdrew it.
To use any of these rights, email hello@theaevionlabs.com. We will reply within one month, and there is usually no charge. To change your analytics choice now: .
08Complaints
If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
09Keeping it safe
This website is served over HTTPS. We limit access to personal data to the people who need it, use providers who commit to protecting it, and review what we keep. No system is perfectly secure, so if we become aware of a breach that puts you at risk, we will tell you and the regulator as the law requires.
10Children
This website is for businesses and is not aimed at children. We do not knowingly collect data from them.
11Changes to this notice
We update this notice when what we collect or how we use it changes. The date at the top shows the latest version. For anything significant, we will make the change clear on this website.