Purpose of this privacy notice

This privacy notice aims to give you information on how Avensure collects and processes your personal data through your use of this website, including any data you may provide when you sign up or opt in. It also outlines how we may use information obtained when you:

• Do business with us as a client of Avensure, as an adviser to our clients, as a supplier or other contact, or as the officer, employee or other person related to such entities.
• When we receive your personal data from a third party who holds your express consent to pass your data to us.

This website is not intended for children and we do not knowingly collect data relating to children.

It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions. This notice supplements the others and is not intended to override them.

Controller

Avensure is the controller and responsible for your personal data (collectively referred to as "Company", "we", "us" or "our" in this notice). We have appointed a data privacy manager who is responsible for overseeing questions relating to this notice.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.

Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer the following kinds of personal data:

• Identity Data — first name, maiden name, last name, username or similar identifier, and title.
• Contact Data — business address, email address, and telephone numbers.
• Transaction Data — details about payments to and from you and other details of services purchased.
• Technical Data — IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.
• Usage Data — information about how you use our website and services.
• Marketing & Communications Data — information that allows us to choose how best to market specific communications to you.
• Special Categories of Personal Data — where you provide this in the context of your instructions or when applying for a job (includes details about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, genetic and biometric data).

We use different methods to collect data, including:

• Direct interactions — you may give us your data by filling in forms or by corresponding with us by website, post, phone, or email.
• Automated technologies — as you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns.
• Third parties — Technical Data from analytics providers such as Google; Identity and Contact Data from sources such as Experian, Companies House, and the Electoral Register.

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

Third-party marketing: We do not pass your details to any third parties for marketing purposes.

We may share your personal data with internal and external third parties including IT providers, professional advisers, HMRC, or potential buyers of the business. We require all third parties to respect the security of your data and treat it in accordance with the law.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

Under certain circumstances, you have rights under data protection laws, including the right to:

• Request access to your personal data.
• Request correction of inaccurate data.
• Request erasure of your personal data.
• Object to processing based on legitimate interest.
• Request restriction of processing.
• Request the transfer of your data to another party.
• Withdraw consent at any time where we are relying on consent to process your data.

If you wish to exercise any of the rights set out above, please contact us at privacy@avensure.com.