Privacy Policy
Last updated: 17 September 2026
Aurelisse Limited (“Aurelisse”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, submit a quotation enquiry, upload documents or otherwise communicate with us through our website.
Aurelisse is a UK-based hospitality textile supplier providing products and sourcing services to hotels, serviced apartments, spas, wellness facilities and other hospitality businesses. Our website is primarily designed for business-to-business enquiries and quotation requests.
This Privacy Policy should be read together with our Cookie Policy and Terms & Conditions.
1. Who We Are
The organisation responsible for your personal data is:
Aurelisse Limited
Company number: 17386479
Registered Office: [Registered Office Address]
London, United Kingdom
Email: marija@aurelisse.uk
Telephone: +44 7704 099747
For any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details above.
2. Personal Data We Collect
Depending on how you interact with our website and services, we may collect:
- your name;
- company name;
- email address;
- telephone number;
- information contained in your enquiry or message;
- information about your business and textile requirements;
- product specifications and requirements;
- documents, product lists, specifications or other files that you choose to upload;
- information contained in correspondence between you and Aurelisse; and
- technical information relating to your use of our website, such as IP address, browser type, device information and website usage information, where collected through cookies or similar technologies.
Our quotation form allows users to provide company name, contact name, email address, telephone number and an existing specification or product list.
Please do not submit unnecessary sensitive or special category personal data through our website.
3. How We Collect Personal Data
We may collect personal data when you:
- submit a quotation request;
- complete our contact form;
- contact us by email or telephone;
- upload a product specification, product list or other document;
- communicate with us regarding our products or services;
- request information about our products; or
- use our website and interact with cookies or similar technologies.
Where we collect personal data directly from you, we provide privacy information at the point of collection or otherwise in accordance with applicable data protection law. Under the UK GDPR, privacy information should generally be provided when personal data is obtained from the individual.
4. How We Use Your Personal Data
We may use your personal data for the following purposes:
- responding to enquiries and requests;
- understanding your business and textile requirements;
- preparing quotations;
- communicating with you about quotations and potential orders;
- reviewing product specifications and requirements;
- identifying suitable products and sourcing options;
- arranging and administering the supply of products and services;
- maintaining appropriate business and enquiry records;
- providing customer support;
- improving our website and services;
- maintaining website security and preventing misuse, fraud or other unlawful activity;
- complying with legal and regulatory obligations; and
- carrying out direct marketing where permitted by applicable law.
The website is primarily intended to generate quotation enquiries rather than operate as a traditional online shop.
We will only use personal data for purposes that are compatible with the purposes for which it was collected, or where another lawful basis permits us to do so. The UK GDPR requires organisations to specify their processing purposes and observe the principle of purpose limitation.
5. Lawful Bases for Processing
We rely on one or more lawful bases under applicable UK data protection law, depending on the circumstances.
Contract and Pre-Contractual Steps
Where you request a quotation, provide requirements or ask us to take steps towards supplying products or services, we may process your personal data where this is necessary to take steps at your request before entering into a contract or to perform a contract.
Legitimate Interests
We may process personal data where this is necessary for our legitimate interests, including:
- responding to business enquiries;
- communicating with potential and existing business customers;
- managing business relationships;
- maintaining business records;
- improving our products and services;
- protecting our website and business systems; and
- preventing fraud or misuse.
Where we rely on legitimate interests, we consider whether the processing is necessary and whether our interests are balanced against the rights and freedoms of the individual.
Legal Obligations
We may process personal data where this is necessary to comply with a legal or regulatory obligation.
Consent
Where consent is required by law, we will ask for your consent before carrying out the relevant processing.
Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
6. Information We Receive From Other Sources
In some circumstances, we may receive personal data about you from another person or organisation, such as your employer, a colleague, business partner or another business contact.
Where applicable, we will provide the privacy information required by UK data protection law regarding the source and use of that information.
7. Who We Share Personal Data With
We may share personal data where reasonably necessary to operate our business, respond to enquiries, provide products and services, or comply with legal obligations.
This may include sharing information with:
- website hosting and technical service providers;
- email and communication service providers;
- IT, security and support providers;
- file or document storage providers;
- professional advisers;
- suppliers or manufacturers where necessary to assess or fulfil a customer requirement;
- logistics or delivery providers where relevant to an order; and
- government authorities, regulators or law enforcement bodies where required by law.
We expect third-party service providers handling personal data on our behalf to use appropriate safeguards and only process information in accordance with applicable requirements.
8. International Transfers
Some of our service providers may process personal data outside the United Kingdom.
Where personal data is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection law and that appropriate safeguards are in place where required.
Further information about applicable safeguards may be requested from us.
9. Data Retention
We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to satisfy legal, accounting, contractual or reporting obligations.
For example, information relating to an enquiry or quotation may be retained after the enquiry has ended where reasonably necessary to maintain business records, manage a potential future relationship, resolve disputes or comply with legal obligations.
We will periodically review personal data that we hold and will delete or anonymise information when there is no longer a legitimate reason to retain it.
The UK GDPR’s storage limitation principle requires personal data not to be kept for longer than necessary. It does not prescribe one universal retention period; organisations should determine and justify appropriate retention periods based on their purposes and legal requirements.
10. Your Data Protection Rights
Depending on the circumstances and subject to applicable legal conditions and exemptions, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request erasure of your personal data;
- request restriction of processing;
- object to certain processing;
- request portability of your personal data where applicable;
- withdraw consent where processing is based on consent; and
- object to direct marketing at any time.
More information about these rights is available from the Information Commissioner’s Office (ICO).
To exercise your rights, please contact:
We may need to request additional information to verify your identity before responding to a request.
11. Direct Marketing
Where permitted by applicable law, Aurelisse may contact business contacts regarding our products, services and business activities.
Where direct marketing rules apply, we will comply with applicable requirements under data protection law and the Privacy and Electronic Communications Regulations (PECR).
You have the right to object to direct marketing at any time.
12. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, alteration or disclosure.
The UK GDPR requires organisations to apply appropriate security measures to protect personal data.
Although we take reasonable steps to protect information, no internet transmission or electronic storage system can be guaranteed to be completely secure.
13. Cookies and Similar Technologies
Our website may use cookies and similar technologies for technical, security, preference, analytics or other purposes.
Some cookies may be strictly necessary for the operation of the website, while other cookies may require your consent under applicable law.
For more information about the cookies and similar technologies used on our website, please see our Cookie Policy.
Where consent is required for non-essential cookies, we will provide an appropriate mechanism for users to make and manage their choices. The ICO states that non-essential cookies generally require user consent, while strictly necessary cookies may fall within an applicable exemption.
14. Children's Privacy
Our website is intended primarily for business-to-business use and is not directed at children.
We do not knowingly seek to collect personal data from children through the website.
15. Third-Party Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices, content, security or availability of third-party websites.
When you access a third-party website, we recommend reviewing its privacy policy and other applicable terms.
16. Complaints
If you have concerns about how Aurelisse handles your personal data, please contact us first so that we can try to resolve your concern.
You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/
The ICO is the independent supervisory authority for data protection matters in the UK.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, technology or applicable legal requirements.
Any updated version will be published on this page and will show the date on which it was last updated.
18. Contact Us
If you have any questions about this Privacy Policy or how we process personal data, please contact:
Aurelisse Limited
Company number: 17386479
Registered Office: [Registered Office Address]
London, United Kingdom
Email: marija@aurelisse.uk
Telephone: +44 7704 099747