Last updated: August 2026
Aureum Global Ltd (“Aureum”, “we”, “us”) is committed to protecting your privacy. This policy explains what we collect, why, and the rights you have under UK GDPR. We are registered with the ICO (registration C1900974) and are the data controller for the personal data described here.
We process personal data on the basis of your consent, to take steps at your request before entering a contract, and for our legitimate interests in operating and improving Aureum. Special-category health data is processed only with your explicit consent.
We do not sell your data. Employee psychological data is never shared with employers. We use carefully selected processors (for hosting, email and, where enabled, analytics) under data-processing agreements, hosted in the UK and EU.
We keep personal data only as long as necessary for the purposes above or as required by law, then delete or anonymise it.
Data is encrypted in transit and at rest, with clinical records protected at row level. See our Security & Compliance page.
You have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent at any time. To exercise these, email admin@aureumglobal.co.uk. You may also complain to the ICO.
We host data in the UK and EU and do not transfer personal data outside GDPR jurisdiction without appropriate safeguards and your consent.
See our Cookie Policy.
We may update this policy and will revise the date above when we do.
Aureum Global Ltd, Company No. 16862523. Email admin@aureumglobal.co.uk.