Privacy Policy

1. Who we are

Aquiterum is an independent circular-water pre-feasibility and decision-support platform for hotels and resorts. It is operated by LiminArc Ltd, a company registered in England & Wales under company number 16939289, with its registered office at [Registered office address to be confirmed].

LiminArc Ltd is the data controller for personal data processed through this website and application. You can reach us at hello@aquiterum.com.

2. What we collect

• Account data: the email address you register with, and authentication metadata handled by our authentication provider. We never see or store your password in readable form.
• Water Snapshot data: the answers you give in the questionnaire (property type, room count, region, water systems and similar operational details) and the results our engine computes from them.
• Contact enquiries: your name, work email, property or company, role, message, and optionally how you heard about us.
• Technical data: standard server and security logs such as IP address, browser type and timestamps, generated when you use the service.
• Local browser storage: we store your questionnaire draft, your theme preference, your data-use acknowledgement and citation-review state in your own browser. This stays on your device and is not sent to us as separate tracking data.

We do not ask for, and ask that you do not send us, special category data (such as health or biometric data) or guest personal data.

3. Why we use it and our lawful basis

• To provide your account and save your Snapshots - performance of a contract with you.
• To answer enquiries you send us through the contact form or by email - our legitimate interest in responding to people who contact us, and steps taken at your request before entering a contract.
• To keep the service secure, prevent abuse and diagnose faults - our legitimate interest in operating a safe, reliable service.
• To improve our benchmarks and methodology using aggregated, de-identified information - our legitimate interest in improving the product. This never identifies you or your property.
• To meet legal or regulatory obligations where they apply - compliance with a legal obligation.

We do not sell personal data, and we do not use it for advertising or automated decision-making that produces legal or similarly significant effects.

4. How long we keep it

• Contact enquiries: 24 months from your last contact with us, then deleted.
• Account and Snapshot data: for as long as your account is active. If you close your account, or ask us to delete it, we remove your Snapshots and account data within 30 days, except where we must keep records for legal reasons.
• Security and server logs: typically no more than 12 months.
• Local browser storage: questionnaire drafts expire after 30 days and data-use acknowledgements after 180 days. You can clear them at any time from your browser.

5. Who processes data on our behalf

We use a small number of carefully chosen service providers, each acting as a processor under contract with us:

• Our application hosting and infrastructure provider, which runs the website and application.
• Our managed database and authentication provider, which stores your account, Snapshots and enquiries.
• Our email delivery provider, which sends notification and transactional email.

We do not share your data with equipment manufacturers, suppliers or consultants unless you explicitly ask us to make an introduction.

6. International transfers

Some of our providers operate outside the UK and the EEA. Where personal data is transferred internationally, we rely on UK adequacy regulations or on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, together with appropriate technical safeguards such as encryption in transit and at rest.

7. Cookies and similar technologies

Aquiterum does not use advertising or third-party tracking cookies. We use strictly necessary storage only: an authentication session so you stay signed in, and local browser storage for drafts and preferences as described above. Because these are strictly necessary for a service you have asked for, no consent banner is required.

8. Your rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you, and receive a copy.
• Have inaccurate data corrected.
• Have your data erased where we no longer need it.
• Restrict or object to our processing, including processing based on legitimate interests.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these, email hello@aquiterum.com. We respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA.

9. Security

Data is encrypted in transit and at rest. Access to production data is restricted to those who need it. Snapshot records are protected by row-level security so only your own account can read them, and contact enquiries are not readable from the browser at all.

10. Nature of the service

Aquiterum produces pre-feasibility decision-support, not engineering design. Outputs are indicative and must be verified by a qualified specialist before any investment, procurement or construction decision. Nothing on this site constitutes engineering, legal or regulatory advice.

11. Changes to this policy

We may update this policy as the service develops. The date at the top shows when it last changed. Material changes affecting how we use your data will be communicated by email to account holders.

12. Contact

LiminArc Ltd, [Registered office address to be confirmed]. Company number 16939289. Email hello@aquiterum.com, or use our contact form.