Privacy Notice
Who we are
AVLI Advisory is a sole-trader business in the United Kingdom, of 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. AVLI Advisory is the data controller for the personal data described here, registered with the Information Commissioner’s Office under registration reference ZC195894. Contact: [email protected].
What we collect
- Regional Risk Brief requests. Your name, email address and the region you selected.
- Risk Snapshot orders. Your name, email address, optional phone number, your answers about the property (including its location and description), any documents you choose to upload (such as deeds, permits, plans or surveys), your order reference, and your chosen turnaround. Documents you upload may contain personal data about other people, such as a seller; by uploading them you confirm you are entitled to share them with us for the purpose of preparing your report.
- Payments. Card payments are processed by Stripe. We receive confirmation of payment, the amount and your order reference. We never see or store your card details.
- Waitlist signups. Your name, email address, the service you are interested in, and anything you tell us in the message field.
- Contact enquiries. Your name, email address, optional phone number, topic and message.
Why we use it, and on what basis
- To prepare and deliver a Risk Snapshot you have ordered, and to communicate with you about that order — performance of a contract with you, and steps taken at your request before a contract is formed.
- To send you the Regional Risk Brief you asked for, and to reply to your enquiry — steps taken at your request and our legitimate interest in responding to people who contact us.
- To keep records of orders, payments and delivered reports — our legal obligations (including tax) and our legitimate interest in keeping evidence of the service provided.
- To tell you when further services open, if you joined the waitlist — your consent.
- To send occasional emails about AVLI — your consent, which you can withdraw at any time via the unsubscribe link in every email.
Who we share data with
We use carefully chosen providers who act on our instructions under written data-processing terms:
- Forms — FormSubmit and Formspree. Relay form submissions, including Risk Snapshot intakes and any documents you upload, to our inbox.
- Payments — Stripe. Processes card payments. Stripe handles your card details under its own privacy terms as a payment processor.
- Email / mailing list — Zoho Mail.
- Website hosting and security — Cloudflare.
- Report preparation tools. We use secure software, including AI-assisted drafting tools, to help prepare reports. These providers act under data-processing terms, and your information is not used to train their models. Every report is reviewed by a qualified professional before delivery.
- Professional support. Where a report calls for closer scrutiny, we may share relevant material with qualified professionals from our network, under confidentiality, solely to prepare or review your report.
We do not sell your data, and we do not share it for anyone else’s marketing. We never share your details or documents with sellers, agents or anyone else involved in your purchase.
International transfers
Some providers are outside the UK, mainly in the USA. Where we transfer your data abroad we rely on appropriate safeguards, such as Standard Contractual Clauses with the UK International Data Transfer Addendum, as set out in each provider’s data-processing terms.
How long we keep it
- Brief requests and contact enquiries: 12 months.
- Risk Snapshot orders, including your intake answers, uploaded documents, the delivered report and payment records: 6 years from delivery, to meet tax obligations and to keep evidence of the service provided in case of any dispute. You may ask us to delete uploaded documents sooner; we will do so unless we need them for those purposes.
- Waitlist and mailing-list data: until you unsubscribe or ask us to remove you.
Your rights
You have the right to access your data; to have it corrected or erased; to restrict or object to processing; to data portability; and to withdraw consent. To exercise any of these, email [email protected]. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).
Security
We protect your data with encryption in transit, access controls, and least-access handling. We do not keep personal data in our code or version-control systems.
Cookies
Our website does not use tracking cookies.
Changes and contact
We may update this notice; the current version is always on this page. Questions: [email protected].