Privacy Policy

The data controller responsible for your data is:

• Owner: Aiden Technologies Ltd
• Company number: 14561220 (Companies House, United Kingdom)
• Registered address: Kemp House, 128 City Road, London EC1V 2NX, United Kingdom
• Contact email: support@aiden.es

You can contact us through any of these channels for any question regarding the processing of your data.

Depending on your relationship with us, we may process the following categories of data:

• Identification data: name, surname, ID card or passport number, nationality.
• Contact details: email address, phone number, postal address.
• Business data: information needed to form and manage your company (company name, business activity, corporate structure, details of shareholders and directors).
• Financial and billing data: payment details, subscription history, invoices.
• Usage data: information about how you use our platform, access logs, IP addresses, device and browser type.
• Communications: the content of your communications with our advisory team.

We process your data for the following purposes:

• To provide the services you've contracted (company formation, registered office address, bookkeeping, advisory services).
• To manage the contractual relationship, billing, and payments.
• To comply with our legal obligations, including anti-money laundering requirements (KYC) and those required by authorities such as Companies House, the Delaware Division of Corporations, HMRC, or the IRS.
• To handle your queries and support requests.
• To send you service-related communications (deadline reminders, plan changes, etc.).
• With your consent, to send you marketing communications about Aiden's products and services.
• To improve our platform and services through aggregated usage analysis.

The legal basis for processing your data is:

• Performance of a contract: to provide the services you contract for.
• Legal obligation: to comply with tax, corporate, and anti-money laundering regulations.
• Legitimate interest: to improve our services and prevent fraud.
• Consent: for sending marketing communications and using non-essential cookies. You can withdraw it at any time.

We keep your data for as long as necessary to provide the service and, afterwards, for the periods required by law:

• Contractual and billing data: for the duration of the contract and, after it ends, for the applicable tax and corporate limitation periods (generally between 4 and 6 years, or longer where required by the regulations of each jurisdiction).
• Anti-money laundering data (KYC): for the periods required by applicable regulations (typically up to 5 years after the end of the relationship).
• Data processed with your consent: until you withdraw that consent.

To provide our services, we may share your data with:

• Public authorities and official registries (Companies House, Delaware Division of Corporations, HMRC, IRS) when necessary for company formation and corporate compliance.
• Technology providers who deliver services to us (hosting, payment processing such as Stripe, banking such as Wise or Mercury, support tools).
• Advisors and collaborating professionals when necessary for the service.

Some of these providers may be located outside the European Economic Area (for example, in the United States or the United Kingdom). In such cases, we ensure the transfer is carried out with the appropriate safeguards required by the GDPR (adequacy decisions or standard contractual clauses).

You can exercise the following rights at any time by writing to support@aiden.es:

• Access: find out what data of yours we process.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data when it's no longer necessary.
• Objection: object to certain types of processing.
• Restriction: request that we restrict processing in certain cases.
• Portability: receive your data in a structured, commonly used format.
• Withdraw consent: at any time, without affecting the lawfulness of processing carried out beforehand.

If you believe we haven't properly handled your rights, you can file a complaint with the competent supervisory authority (in Spain, the Spanish Data Protection Agency, www.aepd.es).

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, or alteration, including encryption in transit, access controls, and backups. However, no system is completely foolproof, so we cannot guarantee absolute security.

We may update this policy to reflect legal changes or changes to our services. Any updates will be published on this page, along with the date of the last revision. We recommend reviewing it periodically.