DATA PROTECTION STATEMENT

Document Code: AL-LGL-010

Version: 1.0

Status: Production Locked

Classification: Public

Effective Date: 24/07/2026

Last Updated: 24/07/2026

Next Review: Within 12 months or sooner if required by changes to legislation, regulatory guidance or business operations.

1. Purpose

ARONARO LABS LTD, trading as ARONARO Health™, is committed to protecting personal data and respecting the privacy rights of individuals.

This Data Protection Statement outlines our commitment to handling personal information lawfully, fairly, securely and transparently in accordance with applicable UK data protection legislation.

2. Our Commitment

We are committed to:

Protecting the confidentiality of personal information.
Processing data fairly and lawfully.
Collecting only information that is necessary.
Maintaining appropriate technical and organisational safeguards.
Respecting the rights of data subjects.
Continually improving our data protection practices.

3. Legal Compliance

We aim to comply with all applicable UK data protection legislation, including:

UK General Data Protection Regulation (UK GDPR).
Data Protection Act 2018.
Privacy and Electronic Communications Regulations (PECR), where applicable.
Guidance issued by the Information Commissioner's Office (ICO).

4. Data Protection Principles

When processing personal data, we seek to ensure that information is:

Processed lawfully, fairly and transparently.
Collected for specified and legitimate purposes.
Limited to what is necessary.
Accurate and kept up to date where appropriate.
Retained only for as long as necessary.
Protected against unauthorised access, loss or misuse.
Processed in a manner that demonstrates accountability.

5. Information Security

We take reasonable and proportionate measures to protect personal information, which may include:

Secure website technologies.
Encrypted communications where appropriate.
Access controls.
Password protection.
Secure hosting environments.
Software updates and maintenance.
Appropriate third-party service providers.

No internet-based system can be guaranteed to be completely secure. However, we continually seek to maintain appropriate safeguards.

6. Third-Party Service Providers

We may use trusted third-party providers to assist in operating our business, including services relating to:

Website hosting.
Payment processing.
Email communications.
Analytics.
Customer support.
Cloud storage.
Marketing.

Where personal data is processed by third parties on our behalf, we seek to ensure that appropriate contractual and security measures are in place.

7. Individual Rights

Individuals may have rights under applicable data protection legislation, including the right to:

Request access to personal data.
Request correction of inaccurate information.
Request deletion where applicable.
Restrict certain processing.
Object to certain processing.
Request data portability where applicable.
Withdraw consent where processing is based on consent.
Lodge a complaint with the Information Commissioner's Office (ICO).

8. Staff and Contractors

As ARONARO LABS LTD grows, employees, contractors and authorised representatives who process personal data on behalf of the company will be expected to:

Handle personal information responsibly.
Follow internal policies and procedures.
Maintain confidentiality.
Report potential data security incidents promptly.
Receive appropriate guidance where necessary.

9. Data Breach Management

Where a personal data breach occurs, we aim to:

Identify and contain the incident.
Assess the risks.
Take appropriate corrective action.
Notify affected individuals where legally required.
Notify the ICO where required by law.
Review processes to reduce the likelihood of recurrence.

10. Continuous Improvement

Data protection is an ongoing process.

We regularly review our policies, procedures and technical measures to improve security, governance and compliance as our business develops.

11. Changes to This Statement

This Data Protection Statement may be updated periodically to reflect legislative developments, regulatory guidance or operational changes.

The latest version will always be available on our website.

Related Policies

This statement should be read together with our:

Privacy Policy.
Cookie Policy.
Terms & Conditions.
Website Disclaimer.
Medical & Health Information Disclaimer.
Affiliate Disclosure.
Accessibility Statement.
Copyright & Intellectual Property Policy.
Complaints Procedure.