Privacy Policy

Effective date: 9 September 2026
Last updated: 9 September 2026

AOLR (“AOLR”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal information that we collect and use.

This Privacy Policy explains what personal information we may collect, why we may use it, how we protect it, when we may share it, and the rights you may have in relation to your information.

This policy applies to the AOLR website, applications and apps, and to any related services or interactions that expressly refer to this Privacy Policy.

We aim to process personal information lawfully, fairly and transparently and only use it for appropriate and legitimate purposes.

1. Who we are

The Website, Applications and related services are operated under the name AOLR.

AOLR is a trading/business name and is not represented as a separate incorporated legal entity.

Contact address:
Surrey, United Kingdom

Email:
[email protected]

For data protection enquiries, requests concerning your personal information, or questions about this Privacy Policy, please contact us using the email address above.

2. What is personal information?

“Personal information” means information that identifies you or could reasonably be used to identify you, either directly or when combined with other information.

Depending on how you interact with AOLR, including through the Website or Application, this may include:

  • your name;
  • email address;
  • postal or other contact address;
  • telephone number;
  • account or login information;
  • information contained in communications you send to us;
  • information relating to transactions or services you use;
  • information you voluntarily provide through forms or other Website or Application features;
  • technical information about the device, operating system or browser you use;
  • IP address and approximate location derived from it;
  • information about how you use or interact with the Website, Application or Services;
  • cookie and similar technology information; and
  • other information that you voluntarily provide to us.

We do not intend to collect more personal information than is reasonably necessary for the relevant purpose.

3. Information you provide directly

We may collect personal information when you:

  • visit or use the Website;
  • download, install or use an Application;
  • create or use an account, where accounts are provided;
  • contact us;
  • complete a form;
  • purchase or request a product or service;
  • subscribe to communications;
  • submit content, comments, feedback or other information;
  • participate in a promotion, survey or similar activity; or
  • otherwise voluntarily provide information to us.

You should avoid providing sensitive personal information unless it is specifically requested and there is an appropriate reason for us to collect it.

4. Information collected automatically

When you visit the Website or use an Application, certain technical information may be collected automatically.

Depending on the Website’s or Application’s configuration and the technologies in use, this may include:

  • IP address;
  • browser type and version;
  • operating system;
  • device type and model;
  • application version;
  • unique or pseudonymous device identifiers;
  • screen or language settings;
  • approximate geographic location;
  • referring website or application;
  • pages or screens visited;
  • dates and times of visits or use;
  • interactions with Website or Application features;
  • crash reports and diagnostic information; and
  • technical information relating to Website or Application performance and security.

Some of this information may constitute personal information under applicable data-protection law.

We use such information where reasonably necessary to operate, secure, maintain and improve the Website, Application and Services and to understand how they are being used.

5. Cookies and similar technologies

The Website and, where applicable, the Application may use cookies, local storage, pixels, software development kits (SDKs), device identifiers and similar technologies.

These technologies may be used for purposes such as:

  • enabling essential functionality;
  • maintaining security;
  • authentication and session management;
  • remembering preferences;
  • understanding Website or Application usage;
  • measuring performance;
  • diagnosing errors;
  • improving services; and
  • where applicable, providing or measuring communications or advertising.

Strictly necessary technologies

Some cookies or similar technologies may be necessary for the Website or Application to function correctly.

These may include technologies used for security, authentication, session management, essential preferences, fraud prevention or technical operation.

These technologies may be used without consent where permitted by applicable law.

Non-essential technologies

Where applicable law requires consent before non-essential cookies or similar technologies are used, we will request that consent before using them.

You may be able to control cookies through your browser settings and, where provided, through a Website cookie-management tool.

Application permissions and operating-system controls may also allow you to restrict certain types of information collected by an Application.

Disabling certain technologies or permissions may affect Website or Application functionality.

Where the Website or Application uses specific third-party technologies, additional information about them may be provided through the Website’s cookie notice, privacy settings or other relevant information.

6. Why we use personal information

Depending on how you interact with AOLR, we may use personal information for the following purposes:

Providing the Website, Application and Services

We may use information to:

  • operate the Website and Application;
  • provide requested products or services;
  • manage accounts;
  • authenticate users;
  • process transactions;
  • respond to enquiries;
  • provide customer support;
  • administer subscriptions or other services; and
  • provide features requested by users.

Website and Application operation and security

We may process technical and usage information to:

  • maintain and troubleshoot the Website and Application;
  • prevent fraud and abuse;
  • detect security incidents;
  • investigate suspected misuse;
  • diagnose application crashes or technical problems;
  • protect our systems and users; and
  • maintain the integrity and security of the Website, Application and Services.

Improvement and development

Where appropriate, we may use information to understand how the Website and Application are used and to improve existing or develop new services and features.

Where practical, we will use aggregated, anonymised or otherwise de-identified information for these purposes.

Communications

We may use contact information to respond to enquiries and provide information concerning services you have requested.

Where marketing communications require consent under applicable law, we will seek the appropriate consent and provide a straightforward means of withdrawing it.

Legal and regulatory purposes

We may process information where necessary to:

  • comply with legal obligations;
  • respond to lawful requests from public authorities;
  • establish, exercise or defend legal claims;
  • detect or prevent unlawful activity; or
  • protect our legal rights and legitimate interests.

7. Our lawful bases for processing

Where the UK GDPR or another applicable data-protection law applies, we will rely on an appropriate lawful basis for processing personal information.

Depending on the circumstances, this may include:

Contract

We may process information where it is necessary to enter into or perform a contract with you, such as providing a product or service you have requested.

Legal obligation

We may process information where necessary to comply with a legal or regulatory obligation.

Legitimate interests

We may process information where this is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

  • operating and improving the Website and Application;
  • maintaining Website and Application security;
  • preventing fraud and abuse;
  • communicating with users;
  • administering our activities; and
  • establishing or defending legal claims.

Consent

Where required, we may ask for your consent before processing personal information for a particular purpose.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

Vital interests

In exceptional circumstances, personal information may be processed where necessary to protect someone’s vital interests.

8. Special category information

We do not generally seek to collect special category personal information, such as information concerning health, racial or ethnic origin, political opinions, religious beliefs or sexual orientation.

If such information is voluntarily provided to us, we will only process it where there is a lawful basis and, where required, an additional lawful condition under applicable data-protection law.

Please do not provide sensitive information through the Website or Application unless it is necessary for the relevant service or we specifically request it.

9. Information about children

The Website and Application are not generally intended to encourage children to provide personal information.

We do not knowingly seek to collect children’s personal information unnecessarily.

Where a service or Application is intended for children or we knowingly process children’s information, we will take appropriate additional measures required by applicable law.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us at:

[email protected]

10. Information obtained from other sources

Where appropriate and lawful, we may receive personal information from sources other than you.

These sources may include:

  • service providers;
  • payment or transaction providers;
  • technology providers;
  • publicly available sources;
  • business partners;
  • app stores or application distribution platforms; or
  • other organisations involved in providing a service to you.

Where we obtain personal information from another source, we will handle it in accordance with applicable data-protection law and provide any privacy information that the law requires.

11. Sharing personal information

We do not sell personal information to third parties.

We may share personal information where reasonably necessary with:

  • technology and hosting providers;
  • Website and software providers;
  • application hosting or distribution providers;
  • payment and transaction providers;
  • communications and email providers;
  • analytics or Website/Application-performance providers, where used;
  • security and fraud-prevention providers;
  • professional advisers;
  • insurers;
  • legal or regulatory authorities where required or permitted by law; and
  • other service providers acting on our behalf.

Where a third party processes personal information for us, we will take appropriate steps to ensure that the processing is subject to appropriate contractual, security and data-protection requirements where required by law.

We may also disclose information where necessary to comply with a legal obligation, protect our rights or property, protect the safety of users or others, or investigate suspected unlawful activity.

12. Third-party services

The Website or Application may use third-party services to provide functionality, hosting, security, analytics, communications, payment processing, crash reporting or other services.

Those third parties may process information in accordance with their own privacy policies and applicable contractual arrangements.

Where third-party services use cookies, SDKs or similar technologies on or through the Website or Application, information about those technologies will be provided where required.

We do not intend this Privacy Policy to imply that any particular third-party service is currently being used if it is not.

13. Application stores and platforms

Applications may be distributed through third-party application stores or platforms.

Those platforms may collect information about your device, account, downloads, purchases, updates or use of applications in accordance with their own privacy policies.

AOLR does not control the privacy practices of third-party application stores or operating-system providers.

You should review the privacy policy of the relevant platform for information about how it processes your personal information.

14. International transfers

Some service providers or other recipients of personal information may be located outside the United Kingdom.

Where personal information is transferred outside the UK or otherwise to a jurisdiction that does not provide an adequate level of protection under applicable law, we will use an appropriate lawful transfer mechanism and safeguards where required.

These may include:

  • an applicable adequacy decision or regulation;
  • approved contractual safeguards;
  • appropriate technical and organisational measures; or
  • another lawful transfer mechanism.

Where required by law, further information about relevant safeguards can be requested by contacting us.

15. How long we keep personal information

We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:

  • provide a requested service;
  • maintain appropriate business and transaction records;
  • comply with legal or regulatory obligations;
  • resolve disputes;
  • enforce agreements; or
  • establish or defend legal claims.

Different types of information may therefore be retained for different periods.

Where it is not possible to specify a fixed retention period, we will determine the appropriate retention period using criteria such as the nature and sensitivity of the information, the purpose for which it was collected, legal requirements and whether an ongoing relationship exists.

When personal information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it.

16. Security

We take reasonable technical and organisational measures to protect personal information against:

  • unauthorised access;
  • accidental loss;
  • destruction;
  • alteration;
  • disclosure; and
  • other unlawful or unauthorised processing.

The specific security measures used will depend on the nature of the information and the systems involved.

No internet transmission, Website, Application or electronic storage system can be guaranteed to be completely secure. You should therefore also take reasonable precautions when communicating with us or using the Website or Application.

If we become aware of a personal-data breach that requires notification under applicable law, we will take the appropriate steps required by that law.

17. Your data protection rights

Depending on the circumstances and applicable law, you may have rights concerning your personal information.

These may include the right to:

  • obtain confirmation that we process your personal information;
  • request access to your personal information;
  • request correction of inaccurate or incomplete information;
  • request deletion of your information;
  • request restriction of processing;
  • object to certain processing;
  • request transfer of certain information to you or another organisation;
  • withdraw consent where processing is based on consent; and
  • object to direct marketing.

Some of these rights are subject to conditions and exceptions under applicable law and may not apply in every circumstance.

For example, we may be entitled or required to retain certain information despite a request for deletion.

Right to object

Where we process personal information based on legitimate interests, you may have the right to object to that processing.

You may also have an absolute right to object to the processing of your personal information for direct marketing purposes.

18. How to exercise your rights

To exercise a data protection right or ask a question about how we use your information, contact:

Email: [email protected]

Please provide enough information for us to identify you and understand your request.

We may need to request additional information to verify your identity where reasonably necessary to protect personal information from unauthorised disclosure.

We will normally respond within the time period required by applicable law.

We will not normally charge a fee for exercising your data protection rights. However, where permitted by law, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.

19. Direct marketing

Where permitted by law, we may send information about AOLR, its services or related matters.

Where consent is required for direct marketing, we will obtain that consent before sending the relevant communications.

You can unsubscribe from marketing communications at any time using the unsubscribe mechanism provided in the communication or by contacting us.

Unsubscribing from marketing communications will not necessarily prevent us from sending important non-marketing communications relating to services you use or transactions you have made.

20. Automated decision-making and profiling

We do not intend to make decisions about individuals based solely on automated processing where those decisions produce legal or similarly significant effects unless permitted by applicable law and appropriate safeguards are provided.

If this changes, we will provide the information and rights required by applicable law.

21. Data relating to third parties

If you provide us with personal information about another person, you should only do so where you have a lawful basis for providing that information and, where appropriate, have informed that person about the disclosure.

For example, if you provide another person’s contact details to enable us to contact them, you should ensure that doing so is appropriate and lawful.

22. Links to other websites and applications

The Website or Application may contain links to websites, applications or services operated by third parties.

This Privacy Policy applies only to AOLR’s processing of personal information.

We are not responsible for the privacy practices, security or content of third-party websites, applications or services.

You should review the privacy policy of any third-party website, application or service before providing personal information to it.

23. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to the Website or Application;
  • changes to our services;
  • changes in how personal information is processed;
  • changes to technology;
  • changes to applicable law or regulatory guidance; or
  • other legitimate business or operational requirements.

The latest version will be published on the Website and, where appropriate, within the Application, with its effective date.

If we make a material change to how we process personal information, we will provide any additional notice required by applicable law.

We recommend checking this page periodically.

24. Complaints

If you have concerns about how AOLR handles your personal information, we encourage you to contact us first so that we can try to resolve the issue.

Email: [email protected]

If you are in the United Kingdom, you also have the right to complain to the Information Commissioner’s Office (ICO), which is the UK’s independent supervisory authority for data protection.

You can find information about making a complaint on the ICO’s website.

If you are located elsewhere, you may also have the right to complain to the data-protection supervisory authority in your country or jurisdiction.

25. Data protection outside the United Kingdom

If you access the Website or Application from outside the United Kingdom, additional data-protection laws may apply to the processing of your personal information.

Where applicable, we will comply with mandatory requirements imposed by those laws.

Nothing in this Privacy Policy is intended to remove or restrict a right that cannot lawfully be removed or restricted.

26. Contact us

If you have any questions about this Privacy Policy, your personal information, or how we process personal information, please contact:

AOLR
Surrey, United Kingdom

Email: [email protected]


End of Privacy Policy

Version: 1.0
Effective: 9 September 2026