Skip to main content
Legal

Privacy Policy

Last updated: 5 March 2025

1. Introduction

AETHUS (“we”, “us”, “our”) is a digital agency based in Bedford, UK. We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and share information when you:

  • Visit or interact with our website at aethus.co.uk (the “Website”)
  • Use our social media management tool, Turbo
  • Engage with our advertising or marketing communications
  • Contact us or use any of our services

We are the data controller for the personal data described in this policy. If you have questions, you can contact us at hello@aethus.co.uk.

2. Information We Collect

2.1 Information you provide directly

  • Contact & enquiry forms: name, email address, phone number, company name, and any details you include in your message.
  • Account registration (Turbo): name, email address, password, and billing information when you sign up for Turbo.
  • Social media credentials (Turbo): when you connect social accounts to Turbo, we receive authentication tokens and profile information from those platforms (e.g. Facebook, Instagram, LinkedIn, X/Twitter). We do not store your social media passwords.

2.2 Information collected automatically

  • Device & browser data: IP address, browser type and version, operating system, screen resolution, and language preferences.
  • Usage data: pages visited, time spent on pages, click paths, referring URLs, and search terms used on the Website.
  • Cookies & similar technologies: see Section 5 below.

2.3 Information from third parties

  • Analytics providers: aggregated and pseudonymised data from Google Analytics and Google Tag Manager.
  • Advertising platforms: conversion and audience data from Google Ads and Meta (Facebook/Instagram) advertising platforms.
  • Social media platforms (Turbo): post engagement metrics, follower counts, and content performance data from connected social accounts.

3. How We Use Your Information

We process your personal data for the following purposes:

3.1 Website operation & improvement

  • To deliver, maintain, and improve the Website
  • To understand how visitors use the Website via analytics
  • To respond to your enquiries and provide customer support

3.2 Turbo — social media management

  • To schedule, publish, and manage social media posts on your behalf
  • To provide analytics and reporting on your social media performance
  • To manage your connected social accounts and authentication tokens
  • To send you service-related notifications (e.g. scheduled post confirmations, account alerts)

3.3 Analytics

  • We use Google Analytics (via Google Tag Manager) to collect pseudonymised usage data. This helps us understand traffic patterns, popular content, and user journeys so we can improve the Website.
  • Analytics cookies are only loaded after you provide consent via our cookie banner.
  • IP addresses are anonymised before being stored by Google Analytics.

3.4 Advertising

  • We may use Google Ads and Meta Ads (Facebook & Instagram) to run targeted advertising campaigns.
  • These platforms may place cookies on your device to measure ad performance and deliver relevant ads based on your browsing activity.
  • Advertising cookies are only set with your consent.
  • You can opt out of personalised advertising via Google Ads Settings and Facebook Ad Preferences.

3.5 Marketing communications

  • With your consent, we may send you emails about our services, offers, or content we think you'll find useful.
  • You can unsubscribe at any time using the link in any marketing email.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases:

  • Consent: for analytics cookies, advertising cookies, marketing communications, and connecting social accounts via Turbo.
  • Contractual necessity: to provide services you have requested, including operating Turbo on your behalf.
  • Legitimate interests: to improve our Website, prevent fraud, and ensure network security, where these interests are not overridden by your rights.
  • Legal obligation: to comply with applicable laws and regulations.

5. Cookies & Tracking Technologies

When you first visit our Website, a cookie banner gives you the choice to accept or reject non-essential cookies. Essential cookies (required for the Website to function) are always active.

5.1 Essential cookies

These are strictly necessary for the Website to operate (e.g. session management, cookie consent preference). They cannot be disabled.

5.2 Analytics cookies

Set by Google Analytics (via Google Tag Manager) to collect pseudonymised usage statistics. Only loaded after you accept cookies.

5.3 Advertising cookies

Set by Google Ads and Meta to measure ad performance and deliver relevant advertising. Only loaded after you accept cookies.

5.4 Managing your preferences

You can change your cookie preferences at any time by clicking “Manage Cookies” in the footer of our Website. You can also control cookies through your browser settings.

6. Who We Share Your Data With

We do not sell your personal data. We may share it with:

  • Service providers: hosting providers, email services, CRM platforms (e.g. HubSpot), and payment processors who act on our behalf.
  • Analytics & advertising partners: Google and Meta, as described above, who process data under their own privacy policies.
  • Social media platforms (Turbo): when you use Turbo to publish or schedule content, data is sent to the connected social platforms (Facebook, Instagram, LinkedIn, X/Twitter, etc.) in accordance with their terms and privacy policies.
  • Legal requirements: if required by law, court order, or regulatory authority.

7. International Data Transfers

Some of our service providers (e.g. Google, Meta, HubSpot) are based in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or the provider's participation in recognised data protection frameworks.

8. Data Retention

  • Enquiry data: retained for up to 24 months after your last interaction, unless we have an ongoing relationship.
  • Turbo account data: retained for the duration of your account. If you close your account, we will delete your data within 30 days, except where retention is required by law.
  • Analytics data: retained in pseudonymised form for up to 26 months (Google Analytics default).
  • Marketing data: retained until you unsubscribe or withdraw consent.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”)
  • Restrict processing in certain circumstances
  • Object to processing based on legitimate interests or for direct marketing
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at hello@aethus.co.uk. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Turbo — Additional Information

Turbo is our social media management tool that allows you to schedule, publish, and analyse social media content across multiple platforms. The following additional provisions apply:

  • Connected accounts: Turbo accesses your social media accounts via official platform APIs using OAuth tokens. We never store your social media passwords. You can disconnect accounts at any time from within Turbo.
  • Content you create: posts, images, and other content you create or schedule in Turbo are stored on our servers until published. Published content is governed by the respective social media platform's terms.
  • Analytics data: Turbo retrieves engagement metrics (likes, shares, comments, reach) from connected platforms to provide performance reports. This data is used solely to deliver the service to you.
  • Data security: all data in Turbo is encrypted in transit (TLS) and at rest. Access to your account is protected by your login credentials.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • HTTPS/TLS encryption across all pages and services
  • Regular security updates and vulnerability assessments
  • Access controls limiting data access to authorised personnel only
  • Secure hosting infrastructure with regular backups

12. Children's Privacy

Our Website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

13. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal data.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Get in Touch