Privacy Policy
Effective: 1 January 2026 · Last updated: 20 August 2026
This policy explains how WeAreAutumn ("Autumn," "we," "us") collects, uses, shares and protects personal data across weareautumn.com, our forms, our booking tools and our client engagements. It applies to visitors, prospective clients and client contacts. The data controller is WeAreAutumn, registered in Bangalore, India. In response, you have the right to lodge a complaint with your local supervisory authority.
Data We Collect and Why
Category
Collected via
Purpose & lawful basis
Retention
Contact details (name, work email, company, phone)
Audit form, contact form, calendar booking
Responding to enquiries; legitimate interest / consent
36 months from last contact
Website & usage data
Analytics cookies
Improving the site; consent (where required)
14 months
Engagement & project data
Client onboarding, contracts
Delivering contracted services; contract performance
Duration of engagement + 7 years (statutory)
Marketing preferences
Newsletter signup, forms
Sending relevant updates; consent
Until you unsubscribe
How We Share and Transfer Data
We share personal data with a limited set of processors who support our operations: our CRM and email providers, our calendar-booking provider, and our website analytics and hosting providers. We do not sell personal data.
Where data is transferred outside the jurisdiction it was collected in for example from a GCC or EU visitor to our India-based systems we rely on appropriate safeguards, including standard contractual clauses where applicable, and limit transfers to what’s necessary to deliver the service.
3. Your Rights
Jurisdiction
Rights available
EU / UK (GDPR, UK GDPR)
Access, rectification, erasure, restriction, portability, objection
California (CCPA/CPRA)
Know, delete, correct, opt out of sale/sharing, limit use of sensitive data
Saudi Arabia (PDPL)
Access, correction, deletion, and withdrawal of consent
UAE (PDPL framework)
Access, correction, deletion, objection to processing
Cookies and Tracking
Category
Purpose
Essential
Site functionality; cannot be disabled
Analytics
Understanding site usage in aggregate
Marketing
Measuring campaign performance
5. Security and Contact
We apply industry-standard technical and organisational measures encryption in transit, access controls and regular review to protect personal data. In the event of a data breach affecting your personal data, we will notify affected individuals and relevant authorities as required by applicable law.
Data protection contact: admin@weareautumn.com. If you’re not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.
We Are Autumn
The AI-forward commerce transformation company for D2C, growth-stage and enterprise brands scaling across the GCC and beyond.
Privacy Policy
Effective: 1 January 2026 · Last updated: 20 August 2026
This policy explains how WeAreAutumn ("Autumn," "we," "us") collects, uses, shares and protects personal data across weareautumn.com, our forms, our booking tools and our client engagements. It applies to visitors, prospective clients and client contacts. The data controller is WeAreAutumn, registered in Bangalore, India. In response, you have the right to lodge a complaint with your local supervisory authority.
Data We Collect and Why
Category
Collected via
Purpose & lawful basis
Retention
Contact details (name, work email, company, phone)
Audit form, contact form, calendar booking
Responding to enquiries; legitimate interest / consent
36 months from last contact
Website & usage data
Analytics cookies
Improving the site; consent (where required)
14 months
Engagement & project data
Client onboarding, contracts
Delivering contracted services; contract performance
Duration of engagement + 7 years (statutory)
Marketing preferences
Newsletter signup, forms
Sending relevant updates; consent
Until you unsubscribe
How We Share and Transfer Data
We share personal data with a limited set of processors who support our operations: our CRM and email providers, our calendar-booking provider, and our website analytics and hosting providers. We do not sell personal data.
Where data is transferred outside the jurisdiction it was collected in for example from a GCC or EU visitor to our India-based systems we rely on appropriate safeguards, including standard contractual clauses where applicable, and limit transfers to what’s necessary to deliver the service.
3. Your Rights
Jurisdiction
Rights available
EU / UK (GDPR, UK GDPR)
Access, rectification, erasure, restriction, portability, objection
California (CCPA/CPRA)
Know, delete, correct, opt out of sale/sharing, limit use of sensitive data
Saudi Arabia (PDPL)
Access, correction, deletion, and withdrawal of consent
UAE (PDPL framework)
Access, correction, deletion, objection to processing
Cookies and Tracking
Category
Purpose
Essential
Site functionality; cannot be disabled
Analytics
Understanding site usage in aggregate
Marketing
Measuring campaign performance
5. Security and Contact
We apply industry-standard technical and organisational measures encryption in transit, access controls and regular review to protect personal data. In the event of a data breach affecting your personal data, we will notify affected individuals and relevant authorities as required by applicable law.
Data protection contact: admin@weareautumn.com. If you’re not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.
We Are Autumn
The AI-forward commerce transformation company for D2C, growth-stage and enterprise brands scaling across the GCC and beyond.