Privacy Policy

Aynsley Mill ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard personal data submitted through the Aynsley Mill website (the "Site"), specifically through commercial leasing inquiries and newsletter sign-ups.

1. Data We Collect

We collect personal data only when you voluntarily submit it through the Site:

• Commercial inquiries: your name, email address, phone number, company name, unit of interest, intended use, and message.
• Newsletter sign-ups: your email address only.
• Technical data: your IP address is logged when you submit a form, used solely for security, spam prevention, and rate-limiting.

We do not use cookies to track you across the Site, and we do not collect sensitive personal data such as health, ethnicity, or political opinions.

2. How We Use Your Data

We use the data you submit for the following purposes:

• To respond to your commercial leasing inquiry and discuss potential tenancy.
• To send you the newsletter you have subscribed to.
• To maintain site security and prevent abuse, fraud, and automated spam.

We do not sell your personal data to third parties, and we do not use it for profiling or automated decision-making.

3. Legal Basis

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

• Consent: when you submit an inquiry or subscribe to the newsletter, you consent to us processing the data you provide for those purposes.
• Legitimate interest: we process IP addresses to protect the Site from abuse and ensure security.

You may withdraw your consent at any time by contacting us.

4. Data Storage and Security

Your data is stored securely on our platform's encrypted backend. All form submissions are processed through a hardened server-side function that validates input, filters automated bot submissions, and enforces rate limiting. Access to submitted data is restricted to authorised administrators only. We apply appropriate technical and organisational measures to protect against unauthorised access, loss, or disclosure.

5. Third-Party Services

Event tickets are sold through Skiddle, a third-party ticketing platform. If you click through to purchase tickets, you are subject to Skiddle's own privacy policy and terms. We do not share your inquiry or newsletter data with Skiddle.

6. Data Retention

We retain inquiry data for 24 months after your last contact with us, unless a tenancy is active. Newsletter subscriptions are retained until you unsubscribe or request deletion. Security logs (IP addresses) are retained for 90 days for abuse prevention, then automatically purged. You may request deletion of your data at any time.

7. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your personal data ("right to be forgotten").
• Withdraw consent for processing at any time.
• Lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been mishandled.

To exercise any of these rights, please contact us through the inquiry form on the Site or write to Aynsley Mill, Longton, Stoke-on-Trent.

8. Breach Notification

In the event of a personal data breach, we will notify affected individuals and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, in accordance with UK GDPR Article 33. For details of our security controls, see our Security & Compliance page.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.

10. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact us through the inquiry form on the Site or by writing to Aynsley Mill, Longton, Stoke-on-Trent.