By using the Aorta Arts website and associated services (“Our Site”), you are confirming that you accept and agree to this Privacy & Cookies Policy. If you do not agree with it, you must stop using Our Site immediately.

1. Definitions and Interpretation

1.1 In this Policy, the following terms shall have the following meanings:

1.1.1 “Account” means an account required to access and/or use certain features of Our Site.

1.1.2 “Cookie” means a small text file placed on your computer or device when you visit Our Site. Further details are set out in section 13.

1.1.3 “Cookie Law” means the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003.

1.1.4 “Personal Data” means data relating to an identifiable person who can be directly or indirectly identified from that information. This includes any personal data provided through Our Site.

1.1.5 “GDPR” means EU Regulation 2016/679—the General Data Protection Regulation.

1.1.6 “We/Us/Our” refers to Aorta Arts, a business operating out of [Placeholder Address, City, Country].

2. Information About Us

2.1 Our Site is owned and operated by Aorta Arts, [Placeholder Address, City, Country].

2.2 You can contact us at: support@medystudios.com (or your preferred email).

2.3 We are responsible for the protection of your personal data under this policy.

3. What Does This Policy Cover?

3.1 This Policy applies only to your use of Our Site.

3.2 Our Site may contain links to third-party websites. We have no control over how other websites collect, store or use your data. You are advised to review their privacy policies before providing any personal information.

4. Your Rights

4.1 Under GDPR, you have the following rights:

4.1.1 The right to be informed about our collection and use of your personal data.

4.1.2 The right to access the personal data we hold about you.

4.1.3 The right to rectification of inaccurate or incomplete personal data.

4.1.4 The right to be forgotten (to request deletion of your data).

4.1.5 The right to restrict or prevent processing of your data.

4.1.6 The right to data portability.

4.1.7 The right to object to the use of your personal data.

4.1.8 Rights relating to automated decision-making and profiling.

4.2 If you have concerns about our use of your data, please contact us using the details in section 2.2. You also have the right to lodge a complaint with the UK Information Commissioner’s Office.

5. What Data Do We Collect?

Depending on your use of Our Site, we may collect:

5.1 Name

5.2 Email address

5.3 Business name (if applicable)

5.4 Country/region

5.5 IP address

5.6 Browser type/version

5.7 Operating system

5.8 Usage data and analytics

5.9 Details you submit through contact forms or project enquiries

5.10 Any content or files you upload for project work

5.11 AI-related interactions where applicable (described in section 14)

6. How Do We Use Your Data?

6.1 We store and process your data securely and only for as long as necessary.

6.2 We may use your data for:

6.2.1 Providing, managing, and improving Our Site

6.2.2 Communicating with you

6.2.3 Responding to enquiries

6.2.4 Delivering project work and design services

6.2.5 Personalising your user experience

6.2.6 Sending email updates you have opted into

6.2.7 Internal business optimisation and analytics

6.2.8 Research, development, and service improvement

6.2.9 Ensuring compliance with legal obligations

6.3 With your permission, we may use your data for marketing purposes such as newsletters, updates, and service announcements. You may unsubscribe at any time.

6.4 You may withdraw consent at any time by contacting us.

6.5 We will not retain your personal data for longer than necessary to fulfil the purposes outlined above.

7. How and Where Do We Store Your Data?

7.1 We only keep your personal data for as long as necessary.

7.2 Some of your data may be stored outside the UK/EEA. Where this occurs, we ensure that adequate safeguards (such as Standard Contractual Clauses) are in place.

7.3 We take data security seriously and implement appropriate technical and organisational measures.

7.4 These include:

7.4.1 Secure, GDPR-compliant hosting

7.4.2 Encrypted data transmission (HTTPS/SSL)

7.4.3 Password hashing and secure authentication

7.4.4 Access restrictions and security audits

7.4.5 Encrypted storage where applicable

8. Do We Share Your Data?

8.1 We may share anonymised analytics or aggregated insights.

8.2 We may share information when legally required (e.g., court orders, regulatory compliance).

8.3 If you use AI-related features (section 14), your inputs may be processed by third-party AI providers (e.g., OpenAI). These providers do not use your data for training unless explicitly stated.

8.4 We may work with service providers including:

Hosting companies

Email delivery services

Payment processors

Customer support tools

Analytics providers

8.5 These providers handle data only as necessary to deliver their services.

9. Business Transfers

If Aorta Arts is sold, acquired, or undergoes a structural change, your personal data may be transferred to the new owner under the terms of this Policy.

10. Your Control Over Your Data

10.1 You may limit Our use of your data, including opting out of marketing communications.

10.2 You may control cookie usage (see section 13).

11. Your Right to Withhold Information

11.1 You may browse Our Site without providing personal data.

11.2 Some features may require certain data to function.

12. Accessing Your Data

You may request a copy of the personal data we hold about you. Please contact support@aortaarts.com.

13. Cookies

13.1 We use cookies to enhance your experience and analyse site performance.

13.2 Types of cookies used:

13.2.1 Strictly Necessary Cookies

Enable essential site functionality such as login and security.

13.2.2 Analytical/Performance Cookies

Help us understand site traffic and user behaviour.

13.2.3 Functionality Cookies

Remember your preferences.

13.2.4 Targeting Cookies

Used for personalised advertising and audience insights.

13.3 Third parties may use cookies we do not control.

13.4 You may block cookies in your browser settings. Blocking essential cookies may affect site functionality.

13.5 Most cookies expire within 24 months unless otherwise stated.

14. Artificial Intelligence Features

14.1 If Our Site includes AI-powered tools (e.g., design feedback, chat assistants, image/asset analysis), you may provide input (“Input”) to these tools.

14.2 AI features may be powered by third parties such as OpenAI.

14.3 Your Input may be transmitted to these providers solely for generating responses.

14.4 Third-party AI providers do not use your data to train models unless explicitly disclosed.

14.5 We may store AI transcripts or interaction logs internally for:

User experience improvement

Research and development

Quality assurance

14.6 Sensitive medical or client project information should only be submitted if you are authorised to share it.