AACS Ltd
Website: https://aacsltd.co.uk
Effective Date: 20/02/2026
1. Introduction
AACS Ltd (“AACS”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, process, store, and protect personal data in accordance with:
- The UK General Data Protection Regulation (UK GDPR)
- The Data Protection Act 2018
- The Privacy and Electronic Communications Regulations 2003 (PECR)
For the purposes of data protection law, AACS Ltd is the Data Controller.
2. Data Controller Details
AACS Ltd
Website: https://aacsltd.co.uk
If you have any questions regarding this policy or wish to exercise your legal rights, please contact us using the contact details published on our website.
3. Lawful Basis for Processing
Under Article 6 of the UK GDPR, we rely on the following lawful bases for processing personal data:
- Consent – where you have given clear permission (e.g., optional cookies).
- Contract – where processing is necessary to perform a contract or respond to a pre-contract enquiry.
- Legitimate Interests – for purposes such as website security, spam prevention, and improving our services, provided those interests are not overridden by your rights.
- Legal Obligation – where processing is required to comply with applicable laws or regulatory obligations.
4. Personal Data We Collect
We may collect and process the following categories of personal data:
4.1 Information You Provide
- Name
- Email address
- Telephone number (if submitted)
- Company name (if submitted)
- Any information contained within enquiry messages or comment submissions
This data is collected when you:
- Submit a contact form
- Leave a comment
- Register for an account (if applicable)
- Communicate with us directly
4.2 Technical and Usage Data
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Device information
- Time zone setting
- Pages visited
- Referring website
- Interaction data
This information is used for:
- Website security
- Fraud and spam prevention
- Performance monitoring
- Analytics and service improvement
5. Comments
When visitors leave comments on the site, we collect:
- Data shown in the comments form
- IP address
- Browser user agent string
This is necessary for spam detection and site security (legitimate interests).
An anonymised hash of your email address may be sent to the Gravatar service to determine if you are using it. The Gravatar privacy policy is available at: https://automattic.com/privacy/. Once approved, your profile image may be publicly visible with your comment.
Comments and associated metadata are retained indefinitely unless removal is requested and legally permissible.
6. Media Uploads
If you upload images to our website, you should avoid uploading images containing embedded location data (EXIF GPS). Visitors may download and extract location data from publicly accessible images.
7. Contact Forms and Enquiries
When you contact us via our website:
We process your data in order to:
- Respond to enquiries
- Provide requested services
- Maintain records of communications
- Protect against misuse or abuse
Lawful basis:
- Pre-contractual steps (Article 6(1)(b))
- Legitimate interests (Article 6(1)(f))
We do not use enquiry data for unsolicited marketing.
8. Cookies
Our website uses cookies in compliance with PECR.
8.1 Essential Cookies
These cookies are necessary for website functionality (e.g., login sessions). They do not require consent.
8.2 Functional Cookies
If you leave a comment, you may opt-in to saving your name, email address, and website in cookies for convenience. These last for one year.
8.3 Login Cookies
If you log in to the site:
- Temporary cookie to test browser acceptance (deleted when browser closes)
- Login cookies (2 days)
- “Remember Me” option (2 weeks)
- Screen display cookies (1 year)
8.4 Analytics Cookies
We may use analytics tools to monitor website performance and visitor interaction. Where required, consent will be obtained before placing non-essential cookies.
You can manage cookie preferences via your browser settings or our cookie banner.
9. Embedded Content from Third Parties
Our website may include embedded content (e.g., videos, articles, images).
Embedded content behaves as if you visited the originating website. Those websites may:
- Collect data about you
- Use cookies
- Embed additional tracking
- Monitor your interactions
We recommend reviewing their respective privacy policies.
10. Data Sharing
We do not sell, rent, or trade personal data.
We may share data only where necessary with:
- IT service providers
- Website hosting providers
- Spam detection services
- Professional advisers (where legally required)
All third-party processors are required to process data in accordance with UK GDPR and appropriate contractual safeguards.
11. International Transfers
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:
- UK International Data Transfer Agreements (IDTAs)
- Adequacy decisions
- Standard Contractual Clauses (SCCs)
12. Data Retention
We retain personal data only as long as necessary for:
- The purpose for which it was collected
- Compliance with legal obligations
- Resolution of disputes
- Enforcement of agreements
Comments may be retained indefinitely for administrative efficiency unless deletion is requested and permitted.
Enquiry data is retained only as long as reasonably necessary for business and legal purposes.
13. Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
- SSL encryption
- Secure hosting environments
- Access controls
- Regular security monitoring
However, no system can guarantee absolute security.
14. Your Rights Under UK GDPR
You have the following rights:
- Right of access (Article 15)
- Right to rectification (Article 16)
- Right to erasure (“right to be forgotten”) (Article 17)
- Right to restrict processing (Article 18)
- Right to data portability (Article 20)
- Right to object (Article 21)
- Rights relating to automated decision-making (Article 22)
To exercise any of these rights, please contact us via the website.
We may request proof of identity before responding.
15. Complaints
If you believe your data protection rights have been breached, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
We encourage you to contact us first so we can resolve any concerns directly.
16. Changes to This Policy
We may update this Privacy Policy periodically to reflect legal, technical, or operational changes. The latest version will always be available on our website.
