Privacy Policy

Avsa Limited (“Avsa”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit our website, contact us, submit an enquiry or otherwise communicate with us in connection with a potential or existing business relationship.
This policy applies primarily to business users and professional contacts, including brands, manufacturers, distributors, wholesalers, trade suppliers, trade buyers, retailers and other commercial organisations.
We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as applicable.
1. Who We Are
The website is operated by Avsa Limited, a haircare and beauty product trading company.
Avsa Limited operates within the professional haircare and beauty supply chain and may buy, sell and supply professional haircare and beauty products in bulk. We work with businesses, suppliers, brands, distributors, wholesalers, trade buyers and other commercial organisations.
For the purposes of applicable data protection legislation, Avsa Limited may act as the data controller in respect of personal data collected and processed through this website and our business communications.
If you have any questions about this Privacy Policy or how we handle personal data, you can contact us at:
Avsa Limited
Email: info@avsline.co.uk
2. Personal Data We May Collect
Personal data means information relating to an identified or identifiable individual.
Depending on how you interact with us, we may collect and process the following categories of personal data:
Contact and identification information
This may include:
·        Full name;
·        Job title or professional role;
·        Company or organisation name;
·        Business email address;
·        Telephone or mobile number;
·        Business address; and
·        Other professional contact details.
Business and enquiry information
This may include:
·        The nature and type of your enquiry;
·        Information about your company or organisation;
·        Information about products or services you are interested in;
·        Supplier, purchasing or distribution information;
·        Information relating to potential business opportunities;
·        Details of commercial discussions;
·        Information contained in messages or correspondence; and
·        Other information that you voluntarily provide to us.
Technical information
When you visit our website, we may collect limited technical information where applicable, such as:
·        IP address;
·        Browser type and version;
·        Device type;
·        Operating system;
·        General or approximate geographical information;
·        Pages visited;
·        Date and time of access;
·        Referring website; and
·        Basic website usage information.
The extent to which technical information is collected will depend on the configuration of the website, hosting services and any cookies or similar technologies in use.
We do not seek to collect unnecessary personal data and aim to limit the information we collect to what is reasonably required for our business and operational purposes.
3. How We Collect Personal Data
We may collect personal data directly from you when you:
·        Submit an enquiry through our website;
·        Complete a contact or enquiry form;
·        Contact us by email;
·        Contact us by telephone or other business communication channels;
·        Discuss potential purchasing or supply arrangements with us;
·        Discuss supplier, distribution or partnership opportunities;
·        Provide information during commercial discussions; or
·        Otherwise communicate with us in connection with our business activities.
We may also collect limited technical information automatically when you access or use our website, depending on the technologies and services used on the website.
Where appropriate, we may receive professional contact information from your organisation or from publicly available business sources where this is lawful and relevant to our business activities.
4. How We Use Personal Data
We use personal data only where there is a lawful and legitimate reason to do so.
Depending on the circumstances, we may use personal data to:
·        Respond to enquiries and requests;
·        Communicate with you regarding potential business opportunities;
·        Discuss potential purchases, sales or supply arrangements;
·        Assess supplier, buyer, distributor or partnership opportunities;
·        Provide quotations or other commercial information where appropriate;
·        Manage and maintain business relationships;
·        Communicate regarding existing or potential commercial transactions;
·        Maintain accurate business and correspondence records;
·        Administer and operate our website;
·        Monitor and maintain the security of our website and systems;
·        Improve our website, services and business processes;
·        Prevent fraud, misuse or other unlawful activity;
·        Establish, exercise or defend our legal rights;
·        Comply with applicable legal, accounting, tax and regulatory requirements; and
·        Carry out other purposes that are compatible with the circumstances in which the information was collected.
We do not use personal data for purposes that are incompatible with the purpose for which it was originally collected unless we have an appropriate legal basis to do so.
5. Lawful Bases for Processing Personal Data
Under the UK GDPR, we must have a lawful basis for processing personal data.
Depending on the circumstances, we may rely on one or more of the following lawful bases.
Legitimate Interests
We may process personal data where this is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and interests.
This may include:
·        Responding to business enquiries;
·        Communicating with prospective suppliers, buyers or commercial partners;
·        Assessing potential business opportunities;
·        Managing professional relationships;
·        Maintaining appropriate business records;
·        Protecting our business, systems and property; and
·        Managing and improving our business operations.
Where we rely on legitimate interests, we consider the nature and purpose of the processing and balance our legitimate interests against the rights and expectations of the individual concerned.
Contract and Pre-Contractual Steps
We may process personal data where this is necessary to take steps at your request before entering into a contract or where processing is necessary to perform a contract with you or your organisation.
This may include processing information relating to quotations, orders, supply arrangements, deliveries, payments or other commercial activities.
Legal Obligations
We may process personal data where necessary to comply with a legal obligation applicable to us.
This may include legal, tax, accounting, regulatory, reporting or record-keeping requirements.
Consent
In certain circumstances, we may rely on your consent to process personal data.
Where consent is the lawful basis for processing, you have the right to withdraw your consent at any time.
Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
6. Sharing Personal Data
We do not sell, rent or trade personal data to third parties.
We may, however, disclose personal data to trusted third parties where this is reasonably necessary to operate our business, provide services, respond to enquiries, manage commercial relationships or comply with legal obligations.
Depending on the circumstances, these third parties may include:
·        Website hosting and infrastructure providers;
·        Email and communication service providers;
·        Customer relationship management (CRM) systems;
·        Business administration and document management providers;
·        IT and technical support providers;
·        Professional advisers, including accountants, auditors and legal advisers;
·        Payment service providers;
·        Logistics, delivery and fulfilment providers;
·        Business service providers supporting our operations; and
·        Government bodies, regulators, courts, law enforcement agencies or other authorities where disclosure is required or permitted by law.
Where we appoint third-party service providers to process personal data on our behalf, we expect them to process that information only for authorised purposes and to implement appropriate security measures.
7. International Transfers of Personal Data
Some of our service providers or business partners may process or store personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that the personal data receives an appropriate level of protection.
Depending on the circumstances, this may include relying on:
·        An adequacy decision or regulations recognising an adequate level of protection;
·        Appropriate contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or UK Addendum, where applicable; or
·        Another lawful transfer mechanism permitted under applicable data protection legislation.
Further information about relevant safeguards may be available upon request.
8. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, taking into account our legal, regulatory, accounting and business requirements.
The appropriate retention period may depend on the nature of the information and our relationship with you.
For example, business enquiry information may be retained for as long as reasonably necessary to:
·        Respond to and manage the enquiry;
·        Continue relevant commercial discussions;
·        Assess future business opportunities;
·        Maintain appropriate business records;
·        Manage an ongoing business relationship;
·        Establish or defend legal claims; or
·        Comply with legal, accounting, tax or regulatory requirements.
Where an enquiry does not result in an ongoing business relationship, we will generally seek to delete or securely dispose of personal data when it is no longer reasonably required, subject to any legal or legitimate business requirement to retain it.
When personal data is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it.
9. Your Data Protection Rights
Depending on the circumstances and subject to applicable legal conditions and exemptions, you may have certain rights under UK data protection law.
These may include the right to:
·        Request access to personal data we hold about you;
·        Request correction of inaccurate or incomplete personal data;
·        Request deletion of personal data in certain circumstances;
·        Request restriction of the processing of your personal data in certain circumstances;
·        Object to certain types of processing, including processing based on legitimate interests;
·        Request data portability, where applicable;
·        Withdraw consent where processing is based on consent; and
·        Lodge a complaint with the Information Commissioner's Office (ICO).
These rights are not absolute and may be subject to legal conditions, exemptions and limitations.
If you wish to exercise any of these rights, please contact us at:
info@avsline.co.uk
We may need to request additional information from you to verify your identity before responding to a data protection request.
10. Cookies and Similar Technologies
Our website is designed to minimise the use of cookies and similar technologies.
Where required for the operation, security or basic functionality of the website, we may use strictly necessary cookies.
Where applicable, strictly necessary cookies may be used without consent where permitted by law.
We do not currently use the website for behavioural advertising, remarketing or cross-site advertising tracking.
If we introduce non-essential cookies or similar technologies in the future, such as analytics or marketing technologies, we will review the applicable legal requirements and obtain consent where required.
For further information about our use of cookies, please see our Cookie Policy.
11. Data Security
We take reasonable and appropriate technical and organisational measures to protect personal data against:
·        Unauthorised access;
·        Accidental loss;
·        Destruction;
·        Misuse;
·        Alteration;
·        Unauthorised disclosure; and
·        Other unlawful or unauthorised processing.
The specific security measures used may vary depending on the nature and sensitivity of the information and the systems involved.
However, no website, email service, electronic communication method or internet transmission can be guaranteed to be completely secure.
You should therefore take reasonable precautions when communicating sensitive or confidential information electronically.
12. Third-Party Websites
Our website may contain links to third-party websites, services or platforms.
If you choose to access a third-party website, that website will operate under its own privacy policy and terms.
Avsa Limited does not control and is not responsible for the privacy practices, security, content or data handling practices of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information to that website.
13. Children's Privacy
Our website is intended primarily for business and professional users and is not directed at children.
We do not knowingly seek to collect personal data from children through this website.
If you believe that a child has provided personal data to us, please contact us so that we can review the information and take appropriate action where necessary.
14. Complaints
We encourage you to contact us first if you have any concerns about how we collect, use or otherwise process your personal data.
You can contact us at:
info@avsline.co.uk
We will consider your concern and seek to address it appropriately.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.
Further information about the ICO and how to make a complaint is available on its official website: https://ico.org.uk/
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business activities, website functionality, technology, legal requirements or data processing practices.
Any updated version will be published on this page and will include a revised “Last Updated” date.
We recommend reviewing this Privacy Policy periodically to ensure that you remain informed about how we process personal data.
Where required by applicable law, we may provide additional notice or take other appropriate steps in relation to material changes.
16. Contact Us
If you have any questions about this Privacy Policy, our handling of personal data, or your rights under applicable data protection law, please contact us:
Avsa Limited
Email: info@avsline.co.uk