Privacy Policy

Last updated: 18 October 2026

This policy explains how personal information is handled in connection with aurafinance.uk and enquiries made through it.

Who is responsible

GSS is the commercial advisory identity of Garry Stevens-Smith, who is responsible for personal information received through this website and its enquiry email. For privacy questions or requests, contact garry@aurafinance.uk.

Information received

If you email or otherwise contact GSS, the information received may include your name, contact details, organisation, role, correspondence and information you choose to provide about your business or enquiry. Information may also come from someone introducing you, or publicly available professional sources where relevant to that enquiry.

Website hosting and security providers may process technical information such as IP addresses, browser details, request times and pages requested to deliver and protect the site. Please avoid sending sensitive personal information or confidential third-party documents in an initial enquiry.

Why information is used

Information is used to respond to enquiries, assess whether assistance may be appropriate, arrange discussions, provide agreed services, keep relevant business records and protect the website and communications.

The legal basis is legitimate interests in responding to business enquiries, managing professional relationships and maintaining security; steps taken at your request before entering a contract, or performing a contract with you; and compliance with legal obligations where applicable. Where consent is the basis for an optional use, it will be requested separately and may be withdrawn. Information is not sold or used for unrelated marketing.

Who may receive it

Information may be handled by providers supporting website hosting, email and business administration, and by professional advisers where necessary. Relevant information may be shared with a specialist or proposed counterparty when you request an introduction or agree that they should be involved. Information may also be disclosed where required by law or necessary to establish, exercise or defend legal rights.

International handling

Technology providers or people involved in an agreed international matter may be located outside the UK. Where a restricted international transfer is required, the applicable transfer requirements must be met, using an appropriate adequacy decision, contractual safeguard or other permitted basis. Contact GSS for details relevant to your enquiry before providing information you regard as sensitive.

How long information is kept

Information is kept only while needed for the enquiry, professional relationship or purpose for which it was collected. Retention is assessed by whether the matter remains active, whether follow-up is reasonably expected, and any contractual, accounting, legal or dispute-related requirements. Records no longer needed are deleted or anonymised. You can ask about the retention applicable to your information.

Cookies and website features

The website's own pages do not include advertising trackers, analytics scripts, contact forms or visitor accounts. Contact links open your email application. Hosting or security services may use technical measures necessary to serve and protect the site. External sites, including WolfIntel and LinkedIn, have their own privacy and cookie arrangements, which apply when you follow their links.

Your rights and choices

Depending on the circumstances and legal basis, you may request access to your information, correction, deletion, restriction of use or portability, and may object to processing based on legitimate interests. These rights are subject to applicable conditions and exemptions. You can withdraw consent where it is relied on, without affecting earlier lawful processing. No solely automated decision with legal or similarly significant effects is made through this website.

Contact garry@aurafinance.uk to exercise a right or raise a concern. Identity checks may be needed. You may also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint, or to another relevant supervisory authority.

Changes

This policy will be updated when relevant website features or information-handling arrangements change. The date above identifies the latest revision.