Privacy notice
Who we are
KTechnology Solutions Limited is the controller of the personal data described in this notice, whether collected through this website, by email, or on paper at or after a viewing. It trades as AvaTayana. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Company no. 16625813. VAT no. GB507817873. Email: ava@avatayana.com. That is the only contact address we publish.
What we collect
When a company requests a viewing, we collect the company name, the Companies House company number and the business premises address for the viewing, so we can identify the buyer and check the company at Companies House. We collect the representative's name and position. We collect the business email so we can reply. We also collect the work the company asks to see, any message, and the wording and time of the confirmations on the form. When you join the waitlist, we collect your name, email address, the series you select, any note, the consent wording you tick, and the time you tick it. We also store a code that lets you unsubscribe, and the time you unsubscribe if you do. When you write to us, we keep that message. If the company decides to buy, after the viewing and before contract we collect on paper, from the company's authorised signatory, the signatory's email address for the sale, any evidence of authority, and the full name, position, date of birth, residential address and identity document details (type, number and expiry) of the signatory and of each beneficial owner, and the nature and extent of each beneficial owner's control. Beneficial owners' details are provided by the company, not by the beneficial owners themselves. We check them against the public register at Companies House. Where the company has no beneficial owner, we collect the same details for its senior managing official. If you are a beneficial owner or senior managing official whose details the company has given us, we will send you this notice, or confirm that the company has given it to you, within one month of receiving your details and before we pass them to an identity or sanctions screening provider. This website does not collect a date of birth, a personal home address, a phone number, card numbers or identity documents.
Why we use it, and the lawful basis
Arranging a viewing uses the company name, Companies House number, business premises address, representative's name and position, business email, chosen work and message to take steps at the company's request before a contract. We use the company name and Companies House number because we have a legitimate interest in checking the company at Companies House. If the company decides to buy, after the viewing and before contract, identity and sanctions checks use the signatory's and each beneficial owner's full name, position, date of birth, residential address and identity document details (type, number and expiry), and the nature and extent of each beneficial owner's control. We use them because we have a legitimate interest in identity and sanctions checks, and because we must comply with sanctions law. This website does not take a card payment. If the company later pays a signed invoice by bank transfer, we keep the invoice and the payment record because the law requires us to keep tax and accounting records. The waitlist is used only to email you about forthcoming chapters and viewings, and only if you tick the consent box. The lawful basis for the waitlist is your consent. The company must give us these details before it can enter into a contract. They are not a legal requirement on the individuals concerned, but if they are not provided, or the checks are not passed, we cannot sell to the company.
Who receives it
Vercel hosts this website. Neon stores the personal data you send through the forms, in a database we control. Resend notifies ava@avatayana.com only. This website does not email you automatically. If that notification is not connected, the message stays in that database for us to read and is not passed on. The print partner prints and frames each work before it is shown and does not receive any buyer's personal data. This website does not take a card payment, and we do not send personal data to a card processor. Payment is by bank transfer against a signed invoice. Our bank receives the payment details when the company pays our invoice. An identity and sanctions screening provider, once appointed, receives the signatory's and beneficial owners' details for those checks. We will name it in this notice before it is used. We do not sell personal data.
International transfers
Vercel and Resend process data in the United States. Neon stores data in the region configured for our database, which may be the United Kingdom, the European Economic Area, or the United States. Where a provider is outside the United Kingdom, the transfer is protected by the UK International Data Transfer Agreement, or by the European Commission’s standard contractual clauses together with the UK addendum, as that provider makes them available.
How long we keep it
Waitlist records are kept until you unsubscribe, or for 24 months after your last contact with us, whichever comes first. Viewing requests, and messages that do not lead to a sale, are kept for 24 months from the last message. Company and identity details collected for Companies House, identity and sanctions checks are kept with the viewing request. Paper identity and beneficial-ownership records are kept for 24 months after our last contact where no sale follows or we decline, and for six years from the end of the tax year of the sale where a sale follows. Where a sale follows, those records, and the tax and accounting records, are kept for six years from the end of the tax year they relate to.
Your rights
You can ask for access, rectification, erasure, restriction, or a portable copy, and you can object to processing that is based on legitimate interests. Where we rely on consent, you can withdraw it at any time. Withdrawing waitlist consent does not affect a viewing request, which is not based on consent, and it does not affect the lawfulness of processing before the withdrawal. To withdraw waitlist consent, email ava@avatayana.com or use the unsubscribe link in any waitlist email. Refusing or withdrawing is no harder than joining. Write to ava@avatayana.com to use any of these rights. We may need to confirm it is you before we act. We do not make solely automated decisions about you.
Complaints
You have the right to complain to us. Write to ava@avatayana.com. We will acknowledge your complaint within 30 days and tell you the outcome. You also have the right to complain to the ICO (ico.org.uk).