Privacy Policy

Privacy Policy

Last updated: 16th October 2025

1. Introduction

This Privacy Policy sets out how Auctra LTD (“Auctra LTD”, “we”, “us”, or “our”) collects, uses, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are committed to safeguarding the privacy and security of personal data entrusted to us.

2. Data Controller

Auctra LTD acts as the Data Controller in relation to the personal data it processes.
For any questions or requests relating to this Privacy Policy, please contact us at:
Email: enquiries@auctra.co.uk
Business: Auctra LTD
Jurisdiction: United Kingdom

3. Categories of Personal Data Collected

We may collect and process the following categories of personal data:

Identity Data: Full name and title.
Contact Data: Email address, telephone number, or other contact information provided by you.

We do not collect special category (sensitive) personal data.

4. Method of Collection

Personal data is collected directly from you when you:

Contact us via email, telephone, or website enquiry forms; or
Engage with us in the course of our consultancy services.

5. Lawful Basis for Processing

We process personal data only where lawful under Article 6 of the UK GDPR. The lawful bases applicable to our processing activities are:

Legitimate Interests: To respond to enquiries and manage our business relationships.
Contractual Necessity: Where processing is required to perform a contract or take steps prior to entering into a contract with you.
Legal Obligation: Where processing is necessary for compliance with a legal requirement.

6. Use of Personal Data

Personal data is used for the following purposes:

To respond to enquiries and provide consultancy services;
To maintain communication and manage client relationships;
To maintain records necessary for business operations and compliance.

7. Data Sharing and Disclosure

We do not sell, rent, or trade personal data.

Personal data may be disclosed only:

To legal or regulatory authorities, where required by law; or
To professional advisers (such as auditors or legal counsel) under strict confidentiality obligations, where necessary for legitimate business purposes.

8. Data Retention

Personal data will be retained only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or regulatory requirements.
Retention periods are determined in accordance with our internal data retention policy and applicable laws.

9. Data Security

We implement appropriate technical and organisational measures to ensure the security, integrity, and confidentiality of personal data and to protect it from unauthorised access, alteration, disclosure, or destruction.

10. International Data Transfers

We do not transfer personal data outside the United Kingdom.
If international transfers become necessary in the future, they will be carried out in compliance with Chapter V of the UK GDPR, using appropriate safeguards.

11. Data Subject Rights

Under the UK GDPR, individuals have the following rights in relation to their personal data:

Right of Access to request a copy of personal data held about you.
Right to Rectification to request correction of inaccurate or incomplete data.
Right to Erasure to request deletion of personal data where there is no lawful basis for its continued processing.
Right to Restrict Processing to request limitation of processing under certain circumstances.
Right to Object to object to processing based on legitimate interests.
Right to Data Portability to receive your personal data in a structured, commonly used format.

To exercise any of these rights, please contact us at enquiries@auctra.co.uk
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection: www.ico.org.uk

12. Cookies and Tracking Technologies

Our website does not currently use cookies or similar tracking technologies.
If cookies are introduced in the future, we will update this Privacy Policy and provide a clear Cookie Notice in accordance with the Privacy and Electronic Communications Regulations (PECR).

13. Changes to This Privacy Policy

We may amend this Privacy Policy from time to time. Any updates will be published on our website with the revised “last updated” date displayed at the top of the page.