Privacy Policy

Last updated: 22 July 2026

1. Introduction

Aurea Trade Group respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you:

• visit or use our website;
• complete our Request a Quote form;
• contact us by email or through another communication channel;
• request information about our products or services;
• discuss or enter into a commercial relationship with us;
• act as a customer, prospective customer, supplier, manufacturer, distributor, service provider or other business contact.

It also explains your rights under applicable United Kingdom data protection legislation, including the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable privacy and electronic communications legislation.

2. Who We Are

Aurea Trade Group is a trading name used by Eugenio Colantuono, operating as a sole trader in the United Kingdom.

For the purposes of applicable United Kingdom data protection law, the data controller is:

Data controller: Eugenio Colantuono
Trading name: Aurea Trade Group
Business structure: Sole trader
Business location: United Kingdom
Email: info@aureatradegroup.co.uk
Website: www.aureatradegroup.co.uk

In this Privacy Policy, references to “Aurea Trade Group”, “we”, “us” or “our” refer to Eugen Colant, trading as Aurea Trade Group.

3. Scope of This Privacy Policy

This Privacy Policy applies to personal data relating to identifiable individuals.

Although Aurea Trade Group operates primarily on a business-to-business basis, information relating to employees, directors, representatives, agents, sole traders, partners, suppliers, manufacturers and customers may constitute personal data.

This Privacy Policy does not apply to anonymous information from which an individual cannot reasonably be identified.

4. Personal Data We Collect

The personal data we collect depends on how you interact with us.

4.1 Identity and contact information

We may collect:

• your full name;
• your job title or professional role;
• the company or organisation you represent;
• your business email address;
• your telephone or mobile number;
• your business, billing or delivery address;
• your city, region or country;
• your preferred method of communication.

4.2 Request for quotation information

When you complete our Request a Quote form, we may collect:

• company name;
• contact name;
• email address;
• telephone number;
• city or region;
• products requested;
• preferred product formats;
• estimated quantities;
• pallet or mixed-pallet requirements;
• delivery or destination information;
• information included in the notes field;
• files or documents you choose to upload;
• any other information you voluntarily provide.

Please do not upload documents containing unnecessary confidential, sensitive or special category personal data.

4.3 Business and professional information

We may collect information concerning:

• the company or organisation you represent;
• your role and responsibilities;
• your purchasing or supply requirements;
• products and product categories of interest;
• product formats and specifications;
• expected order quantities;
• delivery requirements;
• target markets or destinations;
• your commercial relationship with us.

4.4 Transaction and commercial information

Where a business relationship is established, we may process:

• quotations and pricing information;
• purchase orders and sales orders;
• contracts and agreed commercial terms;
• invoices and payment records;
• delivery and logistics information;
• customs and import or export documentation;
• product specifications and technical documentation;
• certifications and compliance documents;
• complaints, claims, returns and product-quality information;
• correspondence relating to transactions.

4.5 Financial information

Where necessary for a commercial transaction, we may collect or receive:

• billing and invoicing details;
• payment status;
• bank account details;
• tax or VAT information;
• credit-related or payment-related information.

We do not normally collect or store payment-card details directly through our website.

Where payments are processed by an external bank, financial institution or payment provider, that organisation may process payment information in accordance with its own privacy policy.

4.6 Technical and website information

When you visit our website, we or our authorised service providers may automatically collect:

• Internet Protocol address;
• browser type and version;
• device type;
• operating system;
• approximate location and time zone;
• referring website;
• pages viewed;
• date, time and duration of visits;
• website navigation and interaction information;
• security and diagnostic information;
• cookie identifiers and similar technical information.

Further information about cookies and similar technologies will be provided in our separate Cookie Policy.

4.7 Communications information

We may retain records of communications exchanged with you, including:

• emails;
• website-form submissions;
• requests for information;
• quotation requests;
• instructions and feedback;
• complaints;
• data protection requests;
• notes relating to telephone calls or business meetings.

4.8 Marketing preferences

We may record:

• whether you have agreed to receive marketing communications;
• the types of communications you wish to receive;
• whether you have unsubscribed;
• whether you have objected to direct marketing;
• your communication preferences.

5. Special Category Personal Data

We do not normally require or intentionally collect special category personal data.

Special category personal data includes information relating to:

• racial or ethnic origin;
• political opinions;
• religious or philosophical beliefs;
• trade union membership;
• genetic or biometric information;
• physical or mental health;
• sex life or sexual orientation.

Please do not provide this type of information through our website, quotation form or email unless it is strictly necessary and we have specifically requested it.

6. How We Collect Personal Data

6.1 Directly from you

We may collect personal data when you:

• complete our Request a Quote form;
• contact us by email;
• request product or commercial information;
• request or receive a quotation;
• negotiate or enter into a contract;
• provide business documents;
• place or fulfil an order;
• communicate with us as a customer, supplier or commercial partner;
• attend a meeting, trade event or business introduction.

6.2 From the organisation you represent

Your employer, company, organisation, colleague or business partner may provide your contact details where you are involved in a commercial enquiry, order, delivery or business relationship.

6.3 From third parties

We may obtain personal data from:

• suppliers and manufacturers;
• distributors and wholesalers;
• commercial agents and introducers;
• freight forwarders and logistics providers;
• customs agents;
• professional advisers;
• payment and financial service providers;
• compliance and due-diligence providers;
• publicly accessible company websites;
• business directories;
• public registers;
• trade-event organisers;
• professional networking platforms.

6.4 Automatically

Technical information may be collected automatically through:

• website server logs;
• cookies;
• security systems;
• analytics systems;
• similar website technologies.

7. Purposes and Lawful Bases for Processing

We process personal data only where we have a lawful basis for doing so.

Depending on the circumstances, we may rely on:

• your consent;
• steps taken at your request before entering into a contract;
• performance of a contract;
• compliance with a legal obligation;
• our legitimate business interests.

7.1 Responding to enquiries and quotation requests

We use personal data to:

• receive and review enquiries;
• prepare quotations;
• respond to requests for information;
• identify suitable products or suppliers;
• discuss product availability, pricing and specifications;
• request additional information;
• take steps towards establishing a commercial relationship.

Our lawful bases are:

• taking steps at your request before entering into a contract;
• our legitimate interests in responding to enquiries and developing commercial relationships.

7.2 Managing customer and supplier relationships

We use personal data to:

• communicate with customers, suppliers and commercial partners;
• negotiate and administer contracts;
• manage orders and deliveries;
• coordinate sourcing, import, export and distribution activities;
• provide customer or supplier support;
• manage commercial correspondence;
• manage complaints, product-quality issues, returns and claims.

Our lawful bases are:

• performance of a contract;
• taking steps before entering into a contract;
• compliance with legal obligations;
• our legitimate interests in operating and managing our business.

7.3 Financial, accounting and tax administration

We use personal data to:

• issue and retain quotations and invoices;
• process and record payments;
• administer outstanding balances;
• maintain accounting and tax records;
• comply with financial, tax, customs and audit requirements;
• prevent financial fraud.

Our lawful bases are:

• performance of a contract;
• compliance with legal obligations;
• our legitimate interests in maintaining accurate financial records and protecting our business.

7.4 Import, export, customs and logistics

We may process and share personal data to:

• organise freight, transport and delivery;
• prepare shipping and customs documentation;
• communicate with customs agents, freight forwarders and carriers;
• complete import or export procedures;
• verify product origin or regulatory compliance;
• manage insurance, transport or delivery claims;
• comply with trade, sanctions, customs and product-safety requirements.

Our lawful bases are:

• performance of a contract;
• compliance with legal obligations;
• our legitimate interests in completing commercial transactions.

7.5 Compliance and due diligence

We may use personal data to:

• verify the identity and legitimacy of businesses and contacts;
• conduct supplier or customer due diligence;
• perform sanctions or compliance checks where appropriate;
• verify certifications or commercial documentation;
• prevent fraud, corruption or unlawful trade;
• respond to requests from public authorities.

Our lawful bases are:

• compliance with legal obligations;
• our legitimate interests in protecting our business and conducting lawful commercial activities.

7.6 Website operation and security

We may use technical information to:

• operate and maintain our website;
• ensure website security;
• prevent unauthorised access and misuse;
• diagnose technical problems;
• investigate security incidents;
• improve performance and usability.

Our lawful bases are:

• our legitimate interests in operating and protecting our website;
• your consent where consent is required for cookies or similar technologies.

7.7 Business administration and development

We may process personal data to:

• maintain customer and supplier records;
• manage business contacts;
• plan and develop our services;
• improve our commercial processes;
• prepare business reports;
• analyse commercial performance;
• maintain evidence of communications and transactions;
• establish, exercise or defend legal claims.

Our lawful basis is our legitimate interests in managing, developing and protecting Aurea Trade Group.

7.8 Marketing and commercial communications

Where permitted by law, we may use business contact information to:

• provide information about our products or services;
• communicate sourcing or supply opportunities;
• introduce relevant commercial products;
• maintain relationships with customers, suppliers and prospective business contacts;
• contact organisations whose products or services may be relevant to our business activities.

Depending on the circumstances, our lawful basis may be:

• your consent;
• our legitimate interests in developing and promoting our business.

Marketing and commercial communications will also be handled in accordance with applicable privacy and electronic communications rules.

You may object to direct marketing at any time.

8. Our Legitimate Interests

Where we rely on legitimate interests, those interests may include:

• responding to business enquiries;
• establishing and maintaining commercial relationships;
• sourcing, importing, exporting and distributing products;
• identifying customers, suppliers and manufacturers;
• communicating with business representatives;
• managing contracts, orders, deliveries and payments;
• improving our website and business operations;
• maintaining accurate commercial records;
• preventing fraud and securing our systems;
• protecting and enforcing our legal rights;
• promoting our products and services in a proportionate manner.

Before relying on legitimate interests, we consider whether the processing is necessary and whether your interests, rights or freedoms override our interests.

9. Providing Personal Data

Certain personal data may be necessary for us to:

• respond to an enquiry;
• prepare an accurate quotation;
• identify or verify a business;
• enter into a contract;
• process an order;
• issue an invoice;
• arrange delivery;
• complete customs documentation;
• comply with legal or regulatory requirements.

Where required information is not provided, we may be unable to respond fully, provide a quotation, enter into a contract or complete a commercial transaction.

10. Sharing Personal Data

We may share personal data where reasonably necessary for the purposes described in this Privacy Policy.

Recipients may include:

• website-hosting and email-service providers;
• information-technology and cybersecurity providers;
• customer-relationship and business-administration service providers;
• suppliers and manufacturers;
• distributors and wholesalers;
• freight forwarders, couriers, carriers and logistics providers;
• warehouses and fulfilment providers;
• customs agents and customs authorities;
• banks, payment providers and financial institutions;
• insurers and insurance brokers;
• accountants, auditors, solicitors and other professional advisers;
• certification, inspection and compliance providers;
• government departments, regulators, courts and law-enforcement authorities;
• prospective buyers, investors or advisers in connection with a sale, transfer or restructuring of our business.

Service providers processing personal data on our behalf must only use the information for authorised purposes and must apply appropriate confidentiality and security measures.

We do not sell personal data to third parties.

11. International Data Transfers

Aurea Trade Group operates in the import and export sector and may communicate with businesses and service providers located outside the United Kingdom.

Personal data may therefore be transferred to or accessed from countries outside the United Kingdom.

Where a transfer is subject to United Kingdom international-transfer restrictions, we will use an appropriate lawful safeguard, which may include:

• transferring information to a country recognised by the United Kingdom as providing an adequate level of protection;
• using an approved International Data Transfer Agreement;
• using the UK Addendum to approved contractual clauses;
• relying on another legally permitted transfer mechanism;
• implementing additional contractual, organisational or technical safeguards where appropriate.

You may contact us for further information about safeguards relevant to your personal data.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

We also consider legal, accounting, tax, customs, regulatory, insurance and reporting requirements.

12.1 Enquiries and unsuccessful quotations

Information relating to an enquiry or quotation that does not result in a commercial relationship will normally be retained for up to 24 months after the last meaningful communication.

12.2 Customers, suppliers and transactions

Contracts, orders, invoices, payment information, delivery records, customs documentation and related commercial records will normally be retained for up to six years after the end of the relevant transaction or commercial relationship.

Information may be retained for longer where required by law, regulation, insurance requirements, a public authority or an unresolved dispute.

12.3 Marketing information

Marketing contact information will be reviewed periodically and may be deleted where there has been no meaningful interaction for approximately 24 months.

We may retain a minimal suppression record for as long as necessary to ensure that we continue to respect an unsubscribe request or objection to marketing.

12.4 Website and security information

Technical, diagnostic and security logs will normally be retained for up to 12 months.

They may be retained for longer where necessary to investigate fraud, unauthorised access, a security incident or unlawful activity.

12.5 Complaints and data protection requests

Records relating to complaints, data protection requests and investigations may be retained for up to six years after the matter is closed, where necessary to demonstrate compliance or establish, exercise or defend legal claims.

12.6 Anonymised information

We may anonymise personal data so that it can no longer identify an individual.

Anonymised information may be retained and used for business, statistical or analytical purposes.

13. Data Security

We use appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access;
• unlawful use;
• accidental loss;
• destruction;
• alteration;
• unauthorised disclosure;
• misuse.

These measures may include:

• access restrictions;
• password protection;
• secure hosting;
• system and software updates;
• backups;
• anti-malware protections;
• confidentiality obligations;
• secure communication and storage procedures.

Access to personal data is limited to persons and service providers who have a legitimate business need to use it.

No internet-based system or method of electronic storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we take reasonable measures to reduce relevant risks.

14. Your Data Protection Rights

Depending on the circumstances and the lawful basis used, you may have the following rights.

14.1 Right of access

You may request confirmation of whether we process your personal data and request a copy of the personal data we hold about you.

14.2 Right to rectification

You may ask us to correct personal data that is inaccurate or complete information that is incomplete.

14.3 Right to erasure

You may ask us to delete your personal data where there is no lawful reason for us to continue processing it.

This right does not apply in every circumstance, including where retention is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

14.4 Right to restriction

You may ask us to restrict the processing of your personal data in certain circumstances.

14.5 Right to data portability

Where legally applicable, you may request certain personal data in a structured, commonly used and machine-readable format.

You may also ask us to transfer that information directly to another controller where technically feasible and legally required.

14.6 Right to withdraw consent

Where we rely on your consent, you may withdraw it at any time by contacting us.

Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

14.7 Right to object

You have the right to object at any time to the use of your personal data for direct-marketing purposes.

Where you object to direct marketing, we will stop using your personal data for that purpose.

You may also object to processing based on our legitimate interests.

Where you object, we will stop the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless processing is necessary for legal claims.

14.8 Automated decision-making

You may have rights relating to decisions made solely through automated processing that produce legal or similarly significant effects.

Aurea Trade Group does not currently use personal data to make solely automated decisions producing legal or similarly significant effects.

15. Exercising Your Rights

To exercise a data protection right, contact:

Email: info@aureatradegroup.co.uk

Please provide:

• your full name;
• your contact details;
• a clear description of your request;
• any information reasonably necessary to identify the relevant personal data.

We may request reasonable evidence of identity where necessary to prevent unauthorised access to personal data.

There is normally no charge for exercising your data protection rights.

However, where legally permitted, we may charge a reasonable administrative fee or refuse to act where a request is manifestly unfounded or excessive.

We will respond within the period required by applicable data protection law. Where an extension is legally permitted, we will inform you.

16. Direct Marketing

Where permitted by law, we may send business and marketing communications concerning:

• available products;
• sourcing and supply opportunities;
• import or export services;
• new product categories;
• trade-related information;
• relevant commercial opportunities.

You may opt out at any time by:

• using an unsubscribe link, where available;
• replying to the communication and requesting removal;
• emailing info@aureatradegroup.co.uk.

Opting out of marketing will not prevent us from sending necessary transactional, contractual, financial, product-safety or regulatory communications.

We may retain a minimal record of your email address and marketing preference to ensure that we respect your request.

17. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• operate essential website functions;
• maintain website security;
• remember user preferences;
• measure website performance;
• understand how visitors use the website;
• improve website content and functionality.

Where consent is legally required, non-essential cookies will not be activated before you have made an appropriate choice.

Further details will be provided in our separate Cookie Policy and cookie-consent settings.

18. Third-Party Websites

Our website may contain links to websites operated by suppliers, manufacturers, service providers, public authorities or other third parties.

We do not control those websites and are not responsible for their privacy practices.

You should review the privacy policy of any third-party website before providing personal data.

19. Information About Other People

Where you provide personal data relating to another person, you should ensure that:

• you are authorised to provide the information;
• the information is accurate;
• the person has been informed about how their information may be used;
• providing the information does not breach any duty of confidentiality or applicable law.

20. Children’s Privacy

Our website and services are intended for businesses and adult commercial contacts.

They are not directed at children, and we do not knowingly collect personal data from persons under the age of 18 through our business-enquiry or quotation processes.

Where we become aware that information relating to a child has been collected without an appropriate lawful basis, we will take reasonable steps to delete it.

21. Data Protection Complaints

You have the right to raise a complaint if you are dissatisfied with the way Aurea Trade Group has collected, used, stored, shared or otherwise handled your personal data.

A complaint may be submitted by email to:

info@aureatradegroup.co.uk

Please use the subject line:

Data Protection Complaint

Where possible, include:

• your name and contact details;
• a description of the issue;
• relevant dates or communications;
• the outcome you are seeking;
• any supporting information or documents.

We will:

1. provide a clear method for submitting a data protection complaint;
2. acknowledge receipt of the complaint within 30 days;
3. take appropriate steps to investigate the complaint without undue delay;
4. make reasonable enquiries into the circumstances;
5. request further information where necessary;
6. keep you appropriately informed about the investigation;
7. communicate the outcome of the complaint without undue delay;
8. maintain appropriate records of the complaint and our response.

We encourage you to contact us first so that we have an opportunity to investigate and resolve your concerns.

22. Complaints to the Information Commissioner’s Office

You also have the right to complain to the Information Commissioner’s Office, the United Kingdom supervisory authority for data protection.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Telephone: 0303 123 1113

You can obtain further information or submit a complaint through the Information Commissioner’s Office website.

Your right to complain to the Information Commissioner’s Office is not affected by first making a complaint to Aurea Trade Group.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to our website;
• changes to our business activities;
• changes to the personal data we process;
• changes to our suppliers or service providers;
• changes to applicable laws or regulatory guidance;
• improvements to our privacy and security practices.

The latest version will be published on our website together with the date on which it was last updated.

Where a change materially affects how we use personal data, we will provide additional notice where reasonably appropriate.

24. Contact Us

For questions about this Privacy Policy, to exercise your data protection rights or to make a data protection complaint, contact:

Eugen Colant, trading as Aurea Trade Group
Business structure: Sole trader
Business location: United Kingdom
Email: info@aureatradegroup.co.uk
Website: www.aureatradegroup.co.uk

For data protection requests, please use the subject line:

Data Protection Request

For data protection complaints, please use the subject line:

Data Protection Complaint