Privacy Policy

Effective date: 10 May 2026 · Last updated: 10 May 2026

1. Introduction

This Privacy Policy explains how Aurelia Technology Consulting Ltd (“Aurelia”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you use this website (aureliatech.it and aureliatech.co.uk) and the Aurelia services we provide (“the Service”), including our marketing website, the Early Access Partner Programme, and our web applications.

Aurelia provides precision-viticulture services to vineyards, including vineyard mapping, IoT sensors, AI-powered analytics (Aura AI), and drone surveying, designed to help vineyard managers make informed decisions.

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR).

2. Data Controller

The data controller responsible for your personal data is:

Aurelia Technology Consulting Ltd Email: enquiries@aureliatech.co.uk

As a small organisation that does not carry out large-scale processing of special category data, we are not required to appoint a Data Protection Officer (DPO). If you have any questions about how we handle your data, please contact us at the email address above.

3. What Personal Data We Collect

3.1 Marketing Website (Early Access and Contact Forms)

When you apply to the Early Access Partner Programme or register your interest via our contact forms, we collect:

First name and last name
Email address
Phone number
Website URL (optional)
Vineyard or business name
Business address (street, city, province, postal code, country)
Region
Grape varieties grown
Approximate vineyard size in hectares

3.2 User Account and Profile

When you create an account and use our applications (including Aura AI), we store:

First name and last name
Email address
Phone number
Preferred language (English or Italian)
Marketing communication preferences

3.3 Vineyard and Farm Data

To deliver the Service, we collect and store detailed information about your vineyard, including:

Vineyard or business name and address
Website URL
Region and location
Total area in hectares and elevation
GPS coordinates (latitude and longitude)
Vine block details, including block names, area, aspect, root depth, grape varieties, rootstocks, and GPS coordinates per block

3.4 Weather and Climate Data

We collect and process environmental data for your vineyard location:

Daily weather records (temperature, rainfall, humidity, wind, and related metrics)
Historical climate data sourced from ERA5 Reanalysis via the Open-Meteo API
Growing degree day calculations
Frost and heat stress event indicators

3.5 Soil Sensor Data

For vineyards equipped with Sentek soil probes, we collect:

Soil moisture readings at multiple depths
Soil temperature readings at multiple depths
Soil salinity readings (where available)
Timestamps for each reading

3.6 Payment Information

Payments are processed securely by Stripe. We do not store your credit or debit card details. Stripe handles all payment card data in accordance with the Payment Card Industry Data Security Standard (PCI DSS). We store only your Stripe customer ID, subscription status, and plan type.

3.7 Authentication Data

Authentication is managed by Supabase Auth using email-based magic link authentication. We do not store passwords. Session tokens are stored in your browser to maintain your logged-in session.

4. How We Use Your Personal Data

We use your personal data for the following purposes:

To provide and operate the Service
To personalise weather data, alerts, and recommendations for your vineyard
To process payments and manage your subscription
To communicate with you about your account, including transactional emails
To send marketing communications (where you have opted in)
To improve the Service based on usage patterns and feedback
To comply with legal obligations

5. Third-Party Service Providers

We share personal data with the following third-party service providers, each of whom processes data on our behalf under appropriate contractual safeguards. We require all third-party processors to respect the security of your personal data and to treat it in accordance with the law.

6. International Data Transfers

We store and process the majority of your personal data within the European Economic Area (EEA). Our primary database is hosted by Supabase in the EU (Ireland), and our payment and email services also operate within the EU.

Where any personal data is transferred outside the UK or EEA, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or the UK Secretary of State, or transfers to countries that have been deemed to provide an adequate level of data protection.

7. Data Retention

Active accounts: Your personal data and vineyard data are retained for as long as your account remains active.
Deleted accounts: When you delete your account, all personal data and associated vineyard data are permanently and irreversibly deleted.
Early Access applications: Retained until your application is approved or rejected.

Under the UK GDPR and EU GDPR, you have the following rights in relation to your personal data:

Right of access: You may request a copy of the personal data we hold about you.
Right to data portability: You can download all your data in a machine-readable format (JSON) from Account Settings.
Right to rectification: You may update or correct your personal data at any time through the application.
Right to erasure: You can permanently delete your account and all associated data from Account Settings.
Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances.
Right to object: You may object to the processing of your personal data where we rely on legitimate interest.
Right to withdraw consent: Where we process your data based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us at enquiries@aureliatech.co.uk.

9. Cookies and Local Storage

The following are strictly necessary for the operation of the Service:

Authentication tokens: Stored in your browser’s local storage by Supabase to maintain your logged-in session.
Language preference: Stored in your browser’s local storage to remember your preferred display language.

Our Websites use Google Analytics 4 (GA4) to help us understand how visitors interact with our content. Analytics cookies are only set after you have given your consent through our cookie consent banner.

10. Communications We Send

We send the following types of email from enquiries@aureliatech.co.uk and partners@aureliatech.co.uk:

Early Access Partner Programme application confirmation
Contact-form replies
Newsletter double-opt-in confirmation (sent via Brevo)
Newsletter campaigns (sent via Brevo, only after double opt-in)
Account-related transactional emails (where you hold an account)

You can manage your marketing email preferences at any time using the unsubscribe link in any newsletter or, for account holders, through the application settings.

11. Data Security

We take appropriate technical and organisational measures to protect your personal data, including hosting in a secure EU-based data centre, passwordless authentication, PCI DSS-compliant payment processing, encryption in transit using HTTPS/TLS, and restricted access to authorised personnel only.

12. Children’s Privacy

Aurelia is a business-to-business service designed for vineyard managers and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16.

13. Automated Decision-Making and Recommendations

Aura AI provides climate intelligence, alerts, and recommendations based on weather data, soil sensor readings, and vineyard characteristics. These outputs are intended as decision-support tools only and do not constitute professional agronomic advice. No fully automated decisions with legal or similarly significant effects are made about you.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Where changes are significant, we will notify you by email or through a notice within the application.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: