Privacy notice
This notice explains how the Aegaea entity identified in your order or account record handles personal data for Aegaea Digital. Contact chris@aegaea.com about this notice or your data rights.
1. Data we use
We use account identity and verification records, contact and organisation details, site and boundary inputs, order and payment status, legal acceptance evidence, support correspondence, API credential metadata and usage records. Stripe handles complete card details; Aegaea does not store them.
2. Purposes and lawful bases
We use data to create and secure accounts, perform contracts, take payment, generate and deliver products, provide support, prevent misuse, keep legal and audit evidence and comply with law. Depending on the activity, the lawful basis is contract, legal obligation, legitimate interests in operating and protecting the service, or consent where requested.
3. Recipients and international transfers
We share only what is needed with service providers for payment, hosting, storage, email, geospatial processing and professional fulfilment, and with authorities or advisers where legally required. Where data is transferred outside the UK, we use an applicable adequacy decision or contractual safeguard.
4. Retention and security
We keep account, contractual, acceptance, order, payment and fulfilment evidence for the applicable legal and operational retention period. We delete or anonymise information when it is no longer needed, while preserving evidence that law requires us to retain. Access controls, encryption and audit records protect the service, but no system is completely risk-free.
5. Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier processing. You may complain to the UK Information Commissioner's Office. We may need to verify identity before acting on a request.