Privacy Policy
Privacy Policy
Effective date: 5 October 2026
Aurea Regula is operated by HENRY HARRISON INVESTMENTS LTD., a company registered in England and Wales under company number 14583363.
Registered office:
5 Brayford Square
Stepney Green
London E1 0SG
United Kingdom
In this Privacy Policy, “Aurea Regula”, “we”, “us” and “our” refer to HENRY HARRISON INVESTMENTS LTD. in connection with the operation of the Aurea Regula website and related services.
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we use it, how we protect it, when we may share it, and the rights available to you under applicable UK data protection law.
Our processing of personal data is primarily governed by the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and other applicable UK data protection and privacy legislation.
1. Who is responsible for your personal data?
For the purposes of applicable UK data protection law, HENRY HARRISON INVESTMENTS LTD. is the data controller responsible for personal data processed through Aurea Regula.
Company: HENRY HARRISON INVESTMENTS LTD.
Company number: 14583363
Registered office: 5 Brayford Square, Stepney Green, London E1 0SG, United Kingdom
For privacy-related enquiries, please contact:
For general enquiries:
For editorial enquiries:
For partnership enquiries:
2. What personal data do we collect?
The personal data we collect depends on how you interact with Aurea Regula.
Information you provide directly
We may collect information that you voluntarily provide to us, including:
- Email address
- Name or display name
- Information contained in messages you send to us
- Subscription information
- Membership information
- Any other information you choose to provide when contacting us
For example, when you subscribe to Aurea Regula, we may collect your email address in order to provide the requested subscription service.
We do not ask you to provide sensitive personal information in order to read the website or subscribe to ordinary Aurea Regula communications.
3. Information collected automatically
When you visit Aurea Regula, certain technical information may be processed automatically by our website and hosting infrastructure.
This may include:
- IP address
- Browser type and version
- Operating system
- Device type
- Language and general technical preferences
- Pages requested
- Date and time of access
- Referring website
- Basic server and security log information
This information may be processed for purposes including:
- Operating the website
- Maintaining website security
- Detecting abuse or malicious activity
- Troubleshooting technical problems
- Maintaining system reliability
- Understanding basic website performance
We do not use this information to attempt to identify individual visitors unnecessarily.
4. Membership and subscriptions
Aurea Regula allows visitors to subscribe to our membership and email services.
When you subscribe, we may collect your email address and other information necessary to provide the requested service.
Your email address may be used to:
- Confirm your subscription
- Send account-related emails
- Send authentication or sign-in emails
- Send requested editorial communications
- Manage your subscription
- Respond to requests relating to your membership
Where marketing consent is required by applicable law, we will obtain that consent before sending marketing communications.
You can unsubscribe from marketing communications at any time by using the unsubscribe mechanism provided in the relevant email or by contacting us.
5. Email services
Aurea Regula uses third-party email infrastructure to deliver certain emails.
We currently use Brevo for SMTP email delivery.
Brevo may process information such as your email address and technical email delivery information when sending emails on our behalf.
We use this service primarily to deliver website and membership-related emails and other communications that you have requested or that are necessary for the operation of the service.
We do not sell your email address to advertisers.
6. How we use your personal data
We may use personal data for the following purposes:
Website operation
- To provide and maintain Aurea Regula
- To operate membership features
- To manage subscriptions
- To provide requested services
- To maintain website functionality
Communications
- To send requested emails
- To respond to enquiries
- To provide account or subscription-related communications
- To send editorial communications where you have requested or consented to receive them
Security
- To protect Aurea Regula against spam, fraud, abuse and malicious activity
- To maintain the security of our website and infrastructure
- To investigate technical or security incidents
Improvement of the service
- To understand how our website is used
- To identify technical problems
- To improve website performance and usability
- To improve our editorial and digital products
Legal compliance
We may process personal data where necessary to:
- Comply with applicable legal obligations
- Respond to lawful requests from public authorities
- Establish, exercise or defend legal claims
- Protect our rights, property and users
7. Our lawful bases for processing
Under the UK GDPR, we rely on different lawful bases depending on the purpose of processing.
Consent
We may rely on your consent where you have actively agreed to a particular use of your personal data.
For example, where applicable, this may include certain marketing communications.
You may withdraw consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Contract
We may process personal data where this is necessary to provide a service you have requested, such as managing your membership or subscription.
Legitimate interests
We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
Examples may include:
- Website security
- Fraud and abuse prevention
- Technical maintenance
- Service improvement
- Protecting our legal rights
Legal obligation
We may process personal data where necessary to comply with a legal obligation.
The UK GDPR requires organisations to identify the lawful basis for processing and explain it clearly to individuals. ICO
8. How we share personal data
We do not sell your personal data.
We may share personal data with trusted service providers where necessary for them to provide services on our behalf.
Depending on the service involved, these providers may include:
Ghost
Aurea Regula uses the Ghost publishing platform to operate the website, membership functionality and related services.
OVHcloud
Our website infrastructure and server environment are hosted using OVHcloud infrastructure.
Brevo
Brevo provides email delivery infrastructure for certain Aurea Regula communications.
These providers may process personal data only to the extent necessary to provide their services to us and subject to applicable contractual and legal requirements.
We may also disclose personal data where required by law, court order, regulatory authority or where necessary to protect our legal rights, users or the security of the service.
9. International transfers
Some of our service providers or their infrastructure may process personal data outside the United Kingdom.
Where a restricted international transfer takes place, we will take appropriate steps to ensure that the transfer is permitted under applicable UK data protection law.
Depending on the circumstances, this may include an adequacy regulation, appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum to EU Standard Contractual Clauses, or another lawful transfer mechanism.
The ICO states that restricted transfers of personal data outside the UK must be covered by an appropriate transfer mechanism or applicable exception. ICO
10. How long do we keep your personal data?
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to meet legal, accounting, security or dispute-resolution requirements.
For example:
- Subscription information: generally retained while your subscription or membership remains active and for a reasonable period afterwards where necessary for legal or administrative purposes.
- Account information: retained while your account remains active and for a reasonable period after closure where necessary.
- Enquiry emails: retained for as long as reasonably necessary to deal with the enquiry and maintain appropriate business records.
- Security and server logs: retained for a limited period appropriate to security and operational requirements.
Retention periods may vary depending on the nature of the information and the reason for which it was collected.
The UK GDPR requires organisations to provide information about retention periods or the criteria used to determine them. ICO
11. Cookies and similar technologies
Aurea Regula may use cookies and similar technologies that are necessary for the operation and security of the website.
Cookies may be used to:
- Maintain website functionality
- Remember necessary settings
- Support membership functionality
- Maintain security
- Understand basic technical usage of the website
Where cookies or similar technologies require consent under applicable law, we will obtain consent before placing or accessing those technologies unless an applicable exemption applies.
Under PECR, organisations generally need to provide information about storage and access technologies and obtain prior consent where required, subject to applicable exceptions. ICO
You can also manage cookies through your browser settings.
12. Your data protection rights
Depending on the circumstances, UK data protection law gives you rights including:
- The right to be informed about how your personal data is used
- The right to access your personal data
- The right to have inaccurate personal data corrected
- The right to request erasure of your personal data
- The right to request restriction of processing
- The right to object to certain processing
- The right to data portability
- The right to withdraw consent where processing is based on consent
- Rights relating to certain automated decision-making and profiling
These rights are subject to certain legal conditions and exemptions.
The ICO identifies these as key rights available to individuals under the UK GDPR. ICO
13. How to exercise your rights
To exercise your data protection rights or ask a question about how we process your personal data, contact:
Please provide enough information for us to understand your request.
For security reasons, we may need to verify your identity before completing certain requests.
We will normally respond to valid requests without undue delay and, in general, within one month as required by applicable data protection law. Where a request is particularly complex or numerous, the response period may be extended where legally permitted.
The ICO advises organisations to provide privacy information in a clear, accessible form and to make it easy for individuals to exercise their rights. ICO
14. Marketing communications
If you subscribe to marketing or editorial communications from Aurea Regula, you can unsubscribe at any time.
You can do this using the unsubscribe mechanism included in the relevant email or by contacting:
Unsubscribing from marketing communications will not necessarily stop essential service or account-related communications.
15. Children's privacy
Aurea Regula is intended for a general adult audience and is not specifically directed at children.
We do not knowingly collect personal data from children for the purpose of creating accounts or subscriptions.
If you believe that a child has provided personal data to us without appropriate permission, please contact:
We will consider the request and take appropriate action where required by applicable law.
16. Data security
We take reasonable technical and organisational measures designed to protect personal data against:
- Unauthorised access
- Accidental loss
- Unauthorised disclosure
- Alteration
- Destruction
- Other unlawful or unauthorised processing
Our website uses HTTPS encryption for communications between visitors and the website.
However, no method of transmission or storage can be guaranteed to be completely secure.
17. Third-party websites
Aurea Regula may contain links to websites operated by third parties.
We are not responsible for the privacy practices, content or security of external websites.
We recommend that you review the privacy policy of any third-party website you visit.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our services
- Changes to our technology
- Changes to applicable laws
- Changes to the way we process personal data
When we make material changes, we will update the effective date shown at the top of this policy and, where appropriate, provide additional notice.
We encourage you to review this page periodically.
19. Complaints
If you have concerns about how we process your personal data, please contact us first:
We will investigate your concern and attempt to resolve it.
You also have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
You can find information about making a complaint through the ICO's official website:
Information Commissioner's Office (ICO)
20. Contact us
For privacy and data protection matters:
HENRY HARRISON INVESTMENTS LTD.
Company number: 14583363
5 Brayford Square
Stepney Green
London E1 0SG
United Kingdom
Privacy: privacy@aurearegula.com
General: contact@aurearegula.com
Editorial: editor@aurearegula.com
Partnerships: partnerships@aurearegula.com
Last updated: 5 October 2026