Privacy Policy

Last updated: 1 January 2025
Data Controller: AlrloNet, 66 Greenwich High Rd, London SE10 8JL
Contact: [email protected]

This Privacy Policy explains how AlrloNet ("we", "us", "our") collects, uses, stores, and protects personal data when you visit alrloinfo.site or interact with our advisory service. We are committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect

We collect the following categories of personal data:

Contact form data: Name, email address, and message content submitted via our contact form.
Technical data: IP address, browser type, operating system, and pages visited, collected automatically via server logs.
Preference data: Cookie consent status stored in your browser's localStorage under the key cookieConsent_alrloinfo.site.

We do not collect payment information, government identifiers, or sensitive personal data as defined by UK GDPR.

2. Legal Basis for Processing

We process personal data on the following legal bases:

Legitimate interests: Server log data is processed to maintain website security and diagnose technical issues.
Consent: Cookie consent preference is stored only after you explicitly accept via the consent banner.
Contract performance: Contact form data is processed to respond to your enquiry.

3. How We Use Your Data

Contact form data is used solely to respond to your enquiry. We do not use it for marketing, profiling, or automated decision-making. Server log data is used for security monitoring and is not linked to individual identities. Preference data (localStorage) is used to remember your cookie consent choice and avoid showing the consent banner repeatedly.

We do not sell, rent, or share your personal data with third parties for commercial purposes. Data may be shared with:

Hosting provider: Server logs are stored on our hosting provider's infrastructure, subject to a data processing agreement.
Legal authorities: We will disclose data if required by law, court order, or regulatory authority.

5. Data Retention

Contact form submissions are retained for 12 months and then securely deleted. Server logs are retained for 90 days. localStorage data persists in your browser until you clear it manually or we update the consent mechanism.

6. Cookies and localStorage

This website uses localStorage (not cookies) to store your consent preference. The key used is cookieConsent_alrloinfo.site. We do not use tracking cookies, advertising cookies, or third-party analytics. No data is transmitted to external services via cookies or localStorage.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access: Request a copy of the data we hold about you.
Right to rectification: Request correction of inaccurate data.
Right to erasure: Request deletion of your data where no legal basis for retention exists.
Right to restrict processing: Request that we limit how we use your data.
Right to object: Object to processing based on legitimate interests.
Right to data portability: Receive your data in a machine-readable format.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. Our website uses HTTPS encryption. Access to contact form submissions is restricted to authorised personnel only.

9. International Transfers

We do not intentionally transfer personal data outside the UK or EEA. If our hosting provider processes data in a third country, this is subject to appropriate safeguards under UK GDPR.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of alrloinfo.site after a policy update constitutes acceptance of the revised policy.