Privacy Policy

The data controller responsible for your personal information is [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS], company number [COMPANY NUMBER]. You can reach us about privacy at [PRIVACY CONTACT EMAIL]. Our [DATA PROTECTION OFFICER / REPRESENTATIVE, IF APPLICABLE] can be contacted at the same address.

Depending on how you interact with us, we may collect:

• Identity and contact details: name, email address, phone number, company.
• Enquiry content: the information you choose to share in a contact message or founder conversation.
• ARC diagnostic responses: the answers you provide and the resulting Founder Readiness Report.
• Event registrations: the events you register for and attendance details.
• Technical and usage data: IP address, device and browser information, and pages viewed, collected via cookies and analytics.
• Service delivery data: information exchanged during an engagement, as described in your [ENGAGEMENT / SERVICES AGREEMENT].
• Payment information where applicable, handled by our payment processor — see third-party processors below.

We collect information directly from you through website forms (contact enquiries, ARC, and event registrations), through communication by email and phone, and automatically through cookies and analytics when you use the site. We may also receive information from [THIRD-PARTY SOURCES, IF ANY].

• To respond to enquiries and route them to the right person at Aether.
• To deliver the ARC diagnostic and produce your Founder Readiness Report.
• To manage event registrations and send you related event communication.
• To provide and administer our services and manage our relationship with you.
• To process payments where applicable.
• To operate a CRM system that records our interactions so we can respond and follow up appropriately.
• To send marketing communication where you have chosen to receive it.
• To improve the website and understand how it is used, via analytics.
• To meet legal, regulatory and accounting obligations under [APPLICABLE LAW / JURISDICTION].

Where [UK GDPR / EU GDPR / OTHER] applies, we rely on the following legal bases: your consent (for example, non-essential cookies and marketing); the performance of a contract; our legitimate interests in operating and improving our business; and compliance with legal obligations. Where we rely on legitimate interests, we balance those interests against your rights.

We use essential cookies to make the site work, and — with your consent — analytics and other cookies to understand and improve the site. You can review and change your choices at any time. For full detail, see our Cookie Policy. Our analytics provider is [ANALYTICS PROVIDER, e.g. Vercel Analytics].

We use trusted third parties to process data on our behalf under appropriate agreements. These may include a [CRM PROVIDER], an [EMAIL / COMMUNICATION PROVIDER], a [HOSTING PROVIDER], an [ANALYTICS PROVIDER], and a [PAYMENT PROCESSOR] where applicable. A current list of processors is available on request.

Where personal data is transferred outside [UK / EEA / YOUR REGION], we put appropriate safeguards in place, such as [STANDARD CONTRACTUAL CLAUSES / ADEQUACY DECISION]. You can request a copy of the relevant safeguards.

We keep personal information only as long as necessary for the purposes described, or as required by law. Indicative retention periods are [RETENTION PERIODS PER DATA CATEGORY]. After that, data is securely deleted or anonymised.

We use appropriate technical and organisational measures to protect personal information, including [SECURITY MEASURES SUMMARY]. No system is completely secure, but we work to protect your data and to notify you and any regulator of a breach where required.

Subject to applicable law, you may have the right to access, correct, delete, restrict or object to the processing of your data, to data portability, and to withdraw consent. To exercise any right, contact us at [PRIVACY CONTACT EMAIL]. You also have the right to complain to a supervisory authority, such as [RELEVANT AUTHORITY, e.g. the ICO].

Where you receive marketing from us, you can opt out at any time using the unsubscribe link in our emails or by contacting us. Opting out of marketing does not affect communication necessary to deliver a service you have requested.

Our website and services are intended for business users and are not directed at children. We do not knowingly collect personal information from anyone under [AGE THRESHOLD].

We may update this policy from time to time. Material changes will be indicated by the “last updated” date above. For any privacy question, contact [PRIVACY CONTACT EMAIL] or write to us at [REGISTERED ADDRESS].