Privacy notice

This notice explains how AeroVia Medical Ltd collects, uses, and protects personal information submitted through this website.

Who we are

AeroVia Medical Ltd ("AeroVia", "we", "us") is the data controller for personal information collected through this website. We are registered in [REPLACE: jurisdiction] under company number [REPLACE: number], with registered office at [REPLACE: address].

For data protection enquiries, contact us at info@aeroviamedical.com.

What information we collect

When you submit the enquiry form on this website, we collect:

• Name — required, so we know who to reply to
• Email address — required, so we can reply
• Organisation — optional, for context
• Role indicator — optional, e.g. clinician, investor, partner
• Message — required, the content of your enquiry
• Technical metadata — submission timestamp; we do not log IP addresses ourselves but our form processor (see below) may do so for spam prevention

We do not use cookies or tracking technologies on this website. We do not run analytics.

Why we collect it and our lawful basis

We use the information you submit to:

• Respond to your enquiry
• Continue relevant business conversations (e.g. clinical engagement, investor relations, partnerships)
• Keep an internal record of business contacts

Our lawful basis under UK GDPR Article 6(1) is:

• Article 6(1)(b) — performance of a contract (or steps to enter into one) where you have made an enquiry related to a potential business relationship
• Article 6(1)(f) — legitimate interests where you have made a general enquiry — our legitimate interest being to respond to people who proactively contact us about our work

Who else sees this information

Your submission is processed by the following third parties acting as data processors on our behalf:

• Web3Forms (Vinodh Group, Estonia) — the service that receives your form submission and forwards it to our inbox. Their privacy policy: web3forms.com/privacy-policy
• Microsoft 365 — our email and document platform, where the enquiry is stored. Microsoft's data protection terms: Microsoft DPA

We do not sell, rent, or share your information with any other third parties for marketing purposes.

International transfers

Our processors may store or process data in countries outside the UK. Where this happens, we rely on transfer mechanisms approved under UK GDPR (such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum) to protect your information.

How long we keep it

We retain enquiries for as long as needed to respond and follow up on the relevant business conversation. As a default:

• Enquiries that lead to no further contact: deleted after 12 months
• Ongoing business conversations: retained while the conversation is active, then archived for up to 7 years to support audit and regulatory requirements relevant to medical technology development

Your rights

Under UK GDPR you have the right to:

• Access the personal information we hold about you
• Have inaccurate information corrected
• Have information deleted in certain circumstances
• Restrict or object to how we use your information
• Receive your information in a portable format
• Withdraw consent (where consent is the lawful basis)
• Lodge a complaint with the Information Commissioner's Office

To exercise any of these rights, email info@aeroviamedical.com. We will respond within one month of your request.

Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. This site is served over HTTPS, and we operate under documented information security controls including Cyber Essentials Plus.

Changes to this notice

We may update this notice from time to time. The "last updated" date at the top reflects the most recent revision. Material changes will be communicated through the site or directly where appropriate.