Who we are
ASERAY LTD (company number 17186619, registered office Suite 10790, 5 Brayford Square, London, E1 0SG, United Kingdom) is the controller of the personal data described in this policy. Contact: [email protected].
What we collect
- Contact details you give us: name, email address, phone number and company name, when you send a message or place an order.
- Order details: what you bought, the amount and the date. Payment card details are collected and processed by Stripe; we never see or store your full card number.
- Project information you share with us to deliver the service.
- Technical data: IP address, browser type and pages visited, used to keep the website secure.
Why we use it and our lawful basis
- To deliver the services you buy and to communicate with you about them (performance of a contract).
- To reply to enquiries sent through our contact form (legitimate interests).
- To keep accounting and tax records (legal obligation).
- To protect the website from fraud and abuse (legitimate interests).
We do not use your data for marketing without your consent, and we never sell it.
Who we share it with
- Stripe, Inc. and Stripe Payments Europe, to process payments. See stripe.com/privacy.
- Our hosting and email providers, to run the website and send emails.
- Unsplash, which delivers some of the photos on this website from its servers. Your browser shares your IP address with Unsplash when those images load.
- Our accountants and professional advisers, where needed.
- Authorities, where the law requires it.
Some of these providers may process data outside the UK. Where they do, we rely on adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement.
How long we keep it
We keep order and invoice records for 6 years to meet UK tax requirements. Enquiries that do not lead to an order are deleted after 24 months. Project files are kept for the length of our relationship plus 12 months unless you ask us to delete them sooner.
Your rights
Under UK GDPR you have the right to access, correct or delete your personal data, to restrict or object to processing, and to data portability. To use any of these rights, email [email protected]. We will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Changes
We may update this policy. The latest version will always be on this page.
Last updated: 20 October 2026