1. Introduction

We operate under GDPR, UK‑GDPR, the Data Protection Act 2018, PECR, and aligned frameworks. Our stance is to exceed minimum requirements and only process data when it benefits the user or is essential for operating the service.

We do not sell your data. We will never sell your data. We take considerable effort to avooid partnering with companies whose business model includes selling or monetising user data or "insights".

2. Who We Are

AEG CloudCMS forms part of the wider AEG ecosystem. Our infrastructure operates within the UK/EU under strict access controls, encrypted transport, and hardened security configurations.

Privacy enquiries: This email address is being protected from spambots. You need JavaScript enabled to view it.

3. What Data We Collect

3.1 Data You Provide Voluntarily

  • Contact form submissions
  • Newsletter sign‑ups
  • Account registration (if applicable)
  • Support enquiries
  • Optional demographic or preference fields

3.2 Data Collected Automatically

  • Server logs (IP, user agent, timestamp)
  • Security logs (firewall blocks, suspicious activity)
  • Minimal, privacy‑preserving analytics (if enabled)

3.3 Sensitive Data

We do not request sensitive personal data. If you voluntarily provide it, we process it solely to respond to your enquiry.

4. How We Use Your Data

  • Operating and securing the website
  • Responding to enquiries
  • Managing subscriptions or memberships
  • Sending updates you explicitly opted into
  • Fulfilling legal obligations

We never use your data for:

  • Advertising profiling
  • Selling insights to third parties
  • Monetised behavioural tracking
  • Algorithmic scoring

5. Data Sharing

We share data only when necessary to provide the service or comply with law.

We never share data for:

  • Third‑party advertising
  • Marketing exchanges
  • Affiliate tracking
  • Data brokerage

We do share data with:

  • Our hosting provider
  • Essential infrastructure partners
  • Authorities where legally required

6. International Transfers

All data is kept within the UK/EU wherever possible. If transfers are required, we use Standard Contractual Clauses (SCCs) and strict technical safeguards.

7. Data Retention

  • Contact forms: only as long as required for your enquiry
  • Accounts: retained while active
  • Server/Security logs: typically 7–30 days
  • Backups: encrypted, rotated, and time‑limited

8. Your Rights

  • Access your personal data
  • Correct inaccuracies
  • Request deletion
  • Restrict processing
  • Data portability
  • Withdraw consent

Contact: This email address is being protected from spambots. You need JavaScript enabled to view it.

9. Security Measures

  • HTTPS everywhere
  • Hardened server configurations
  • Regular patching
  • Minimal plugin exposure (Joomla best‑practice)
  • Restricted access and audit trails
  • Encrypted offsite backups

10. Third‑Party Services

We maintain a presence on Facebook, Instagram, Twitter/X, and YouTube strictly for promotion and community engagement.

These platforms are not used to:

  • Host full‑length content
  • Profile users
  • Track behaviour across the web

All substantial content lives on aegiscycle.uk.

Embedded YouTube videos use privacy‑enhanced mode.

11. Children’s Privacy

We do not target children and do not knowingly collect data from individuals under 13.

12. Updates to This Policy

We may update this policy to reflect improvements or legal changes. Significant updates are posted on the website.

13. Contact Us

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

14. Purchases, Payments & Stripe

14.1 What Stripe Handles Directly

Stripe processes all payment data directly. We never see or store card numbers, CVC codes, bank credentials, or authentication data.

14.2 What We Receive from Stripe

  • Payment confirmation
  • Last four digits of the card
  • Billing name & email
  • Transaction ID

14.3 No Data Selling or Sharing (with YouTube Exception)

  • Never sold
  • Never shared with advertising or data‑brokering entities

The YouTube Exception

We publish the Quotient Chronicles on YouTube purely for accessibility. We:

  • Do not send AEG user data to YouTube
  • Do not enable behavioural ads
  • Do not use YouTube analytics for profiling
  • Do not integrate YouTube tracking code

We Do Not Funnel Users to YouTube

All YouTube content is also available for free streaming and/or download directly on aegiscycle.uk.

14.4 Refunds, Chargebacks & Disputes

Stripe may provide limited metadata to resolve billing issues.

14.5 Purchase Record Retention

We retain transaction records as legally required (e.g., HMRC). We never store card details.

End of Privacy Policy — AEG CloudCMS