Privacy Policy

Effective Date: April 30, 2026

At AIBA Business Solutions Ltd, your privacy is a priority. This policy outlines how we collect, process, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller and Contact Information

2. The Data We Collect

We collect and process the following categories of personal data:

• Identity Data: Name, username, and business role.
• Contact Data: Email address, physical billing address, and phone number.
• Financial Data: Payment card details, which are processed securely via third-party encryption.
• Technical Data: IP address, browser type, time zone, and operating system used to access our services.
• Usage Data: Information regarding how you interact with our hosting, VPS, and web development platforms.

3. Legal Bases for Processing

We only process your data when we have a legal basis to do so:

• Contractual Necessity: To provide the web hosting or development services you have purchased.
• Legal Obligation: To comply with UK tax, accounting, and corporate transparency laws.
• Legitimate Interests: To secure our infrastructure, prevent fraud, and improve our service offerings.
• Consent: Where you have explicitly opted-in to receive marketing materials.

4. Data Sharing and Transfers

We do not sell your data. We share information only with service providers essential to our business operations:

• Infrastructure Providers: Secure data centers (e.g., Hetzner) used to host client websites and databases.
• Payment Processors: Authorized gateways (e.g., Stripe) to handle financial transactions.
• Support Tools: Communication platforms used for technical support and automated invoicing.

International Transfers: Some data may be processed outside the UK. We ensure all transfers are protected by Standard Contractual Clauses (SCCs) to maintain the same level of protection required by UK law.

5. Data Security and Retention

We implement robust security measures, including encryption and strict access controls, to prevent data breaches. We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal and tax reporting requirements.

6. Your Legal Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request the update of inaccurate information.
• Erasure: Request the deletion of your data where legally permissible.
• Objection: Object to processing based on legitimate interests or direct marketing.

To exercise these rights, please email us at support@aiba.dev. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

7. Cookies

We do not use non-essential cookies by default. If analytical or marketing cookies are introduced, you will be prompted to provide explicit consent before they are deployed.