Privacy Policy

Last updated: 12 November 2026.

01Introduction

This Privacy Policy explains how JARAMILLO LOPEZ Vanessa, trading as AORA ("I", "me" or "my"), collects, uses and protects personal information when you visit this website or contact me regarding my consultancy services.

I respect your privacy and am committed to protecting your personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR) and, where applicable, the UK GDPR.

02Who I Am

The data controller responsible for your personal information is:

• VANESSA JARAMILLO LOPEZ
• Trading as: AORA
• Business address: France
• Email: vanessajlopez@aora-solutions.com
• SIRET: 93440154800011

For any questions regarding this Privacy Policy or the processing of your personal data, please contact me using the email address above.

03What Personal Data I Collect

I may collect and process the following categories of personal information:

Information you provide directly:

• Name and surname.
• Business email address.
• Company or organisation name.
• Job title, where provided.
• Telephone number, where provided.
• Information included in messages submitted through the contact form.

Information collected automatically:

When you visit my website, certain technical information may be collected, including:

• IP address.
• Browser type and version.
• Device and operating system information.
• Pages visited and interactions with the website.
• Website usage and analytics information.

04How I Use Your Personal Data

I collect and use personal information for the following purposes:

• To respond to enquiries and messages submitted through the contact form.
• To discuss potential consultancy projects and professional services.
• To communicate with existing and prospective clients.
• To manage professional relationships and contractual arrangements.
• To maintain website security and functionality.
• To understand how visitors use my website and improve its content and performance.
• To comply with applicable legal and regulatory obligations.

I only process personal data where I have an appropriate legal basis to do so.

05Legal Basis for Processing

Depending on the circumstances, I rely on the following legal bases:

• Legitimate interests: To respond to professional enquiries, manage business relationships and maintain website security.
• Pre-contractual steps and contractual necessity: To discuss, prepare and provide consultancy services.
• Legal obligations: To comply with applicable accounting, tax and other legal requirements.
• Consent: Where required, including for non-essential cookies and website analytics.

Where processing is based on consent, you may withdraw your consent at any time.

06Website Analytics and Cookies

This website uses cookies and similar technologies to support its functionality and understand how visitors interact with its content.

I may use Google Analytics to collect information about website traffic and visitor behaviour, such as pages visited, visit duration and general usage patterns.

Non-essential analytics cookies will only be activated where the required consent has been obtained.

You can manage your cookie preferences or withdraw your consent at any time through the website's cookie settings.

For further information about the cookies used on this website, please consult the Cookie Policy.

07Sharing Your Personal Data

I do not sell or rent personal information to third parties.

However, personal data may be shared with trusted service providers where necessary to operate my business and website, including:

• Website hosting providers.
• Email and communication service providers.
• Contact form providers.
• Website analytics providers, including Google.
• IT and technical support providers.

These providers may process personal data on my behalf or act as independent controllers, depending on the services they provide.

Where required, appropriate contractual and data protection safeguards are put in place.

08International Data Transfers

Some service providers may process or store personal data outside the European Economic Area (EEA) or the United Kingdom.

Where personal data is transferred internationally, I take appropriate steps to ensure that such transfers comply with applicable data protection legislation.

This may include relying on adequacy decisions or appropriate safeguards, such as Standard Contractual Clauses, where applicable.

09How Long I Keep Your Data

I retain personal information only for as long as necessary for the purposes for which it was collected, subject to applicable legal requirements.

In general:

• Contact enquiries: Retained for as long as necessary to respond to the enquiry and manage any subsequent professional relationship.
• Client information: Retained for the duration of the business relationship and, where necessary, afterwards to meet legal and contractual obligations.
• Accounting records: Retained for the legally required retention period.
• Website analytics: Retained in accordance with the analytics provider's configuration and applicable consent requirements.

Personal information is securely deleted or anonymised when it is no longer required.

10Your Data Protection Rights

Under applicable data protection legislation, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal data, where applicable.
• Request restriction of processing.
• Object to certain types of processing.
• Request data portability, where applicable.
• Withdraw consent where processing is based on consent.

To exercise your rights, please contact:

• vanessajlopez@aora-solutions.com

You also have the right to lodge a complaint with the relevant data protection authority.

In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL): https://www.cnil.fr/

Where UK data protection legislation applies, you may also contact the UK Information Commissioner's Office (ICO): https://ico.org.uk/

11Data Security

I take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

12Third-Party Websites

This website may contain links to third-party websites or services.

I am not responsible for the privacy practices or content of external websites. Visitors are encouraged to consult the privacy policies of those websites.

13Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my business practices, website functionality or applicable legislation.

The latest version will always be available on this website, together with the date of its most recent update.

14Contact

If you have any questions about this Privacy Policy or how your personal data is handled, please get in contact using the contact details provided above.