Legal & Compliance
Privacy Policy
Effective Date: 6 September 2026
1. Who We Are
This Privacy Policy applies to Alchemetryx Ltd ("Alchemetryx", "we", "us", or "our").
We are a private limited company registered in England and Wales under company number 17199377. Our registered office address is 83 Arthur Grove, London, England, SE18 7ES.
For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Alchemetryx Ltd acts as a data controller for personal data collected through this website and through our direct client and business relationships.
Data Protection Officer / Privacy Contact: Ashok Verma. Email: support@alchemetryx.com.
2. Scope
This policy explains how we collect, hold, process, and transfer personal data when you:
- Visit our website at alchemetryx.com.
- Schedule or attend a consultation call with us.
- Enquire about our consulting, software engineering, or system rebuild services.
- Engage us to rebuild, maintain, or support your internal business workflows and tools.
When we process business data on behalf of our clients as part of a technical build engagement, we act as a data processor. Such processing is governed by our client agreements and a separate Data Processing Addendum (DPA).
3. What Data We Collect
We collect only the minimum personal data needed to communicate with you and perform our work:
| Category | Examples of Data Collected | Collection Method |
|---|---|---|
| Contact Details | Full name, business email address, phone number, company name, job title. | Call booking form, email, or direct correspondence. |
| Consultation Details | Notes on your existing operational bottlenecks, current software, spreadsheets, and processes. | Shared directly by you during intro or discovery calls. |
| Commercial Data | Invoices, billing contacts, payment confirmations, and contract records. | Client agreements and accounting transactions. |
| Technical & Usage Data | IP address, browser type, device details, and basic anonymous page visit timestamps. | Server access logs and hosting infrastructure. |
We do not collect any special category personal data (such as health, political, or biometric data) through this website.
4. Lawful Basis for Processing
Under Article 6 of the UK GDPR, we rely on the following lawful bases:
- Contract: Processing necessary to enter into or perform our service agreement with you (e.g. delivering software builds, communicating on active work, billing).
- Legitimate Interests: Processing necessary for our legitimate commercial interests, provided your interests and fundamental rights do not override them (e.g. responding to inquiries, maintaining system security, preventing fraud).
- Legal Obligation: Processing required to comply with UK company law, tax reporting, and statutory record-keeping rules (e.g. HMRC records).
- Consent: Where you have granted explicit consent for a specific activity (e.g. opt-in communications). You can withdraw consent at any time.
5. How We Use Data
We use the data we collect solely for the following business purposes:
- Scheduling, confirming, and conducting discovery or diagnostic calls.
- Evaluating your business requirements to prepare scopes of work and project quotes.
- Building, delivering, and maintaining custom software systems under agreed terms.
- Managing client invoicing, bookkeeping, and accounting compliance.
- Protecting the security, integrity, and operational availability of our website and services.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
6. Who We Share Data With
We share data only with selected third-party service providers (data processors) who assist us in operating our business. Each provider is vetted and bound by strict confidentiality and data protection obligations:
| Processor | Purpose | Location |
|---|---|---|
| Cal.com | Appointment scheduling and calendar booking embed. | EU / US (Standard Contractual Clauses) |
| Vercel Inc. | Website hosting, edge delivery, and deployment infrastructure. | US / Global (Data Privacy Framework / SCCs) |
| Google Workspace | Business email, document storage, and direct correspondence. | EU / US (Standard Contractual Clauses) |
| Professional Advisers | Accountants, legal counsel, and banking partners. | United Kingdom |
We may also disclose information where required by law, court order, or regulatory authority (such as HMRC or law enforcement agencies).
7. International Transfers
Alchemetryx operates across the United Kingdom and maintains development resources in India.
Where personal data is accessed or transferred outside the UK, we ensure appropriate safeguards are implemented in accordance with Chapter V of the UK GDPR.
For personnel access between the UK and India, Alchemetryx is currently implementing a formal UK International Data Transfer Agreement (IDTA) and standard contractual safeguards to ensure an equivalent standard of protection for all client and business data.
For cloud vendors based in the United States or other jurisdictions, we rely on the UK extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to the European Commission standard contractual clauses.
8. Data Retention
We keep personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or regulatory requirements:
| Data Type | Retention Period | Reason |
|---|---|---|
| Prospective client inquiries | 12 months from last interaction | To respond to follow-ups and assess past requirements. |
| Active client engagement records | Duration of contract plus 6 years | Limitation Act 1980 (contract claim limitation period). |
| Financial and accounting records | 6 full financial years plus current year | HMRC and Companies Act statutory obligations. |
| Server access logs | 90 days | Security monitoring, incident investigation, and error analysis. |
When the retention period ends, data is securely erased or permanently anonymised.
9. Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:
| Right | What It Means |
|---|---|
| Right to Access | You can request confirmation of whether we process your personal data and obtain a copy of it. |
| Right to Rectification | You can ask us to correct inaccurate or incomplete personal data. |
| Right to Erasure | You can ask us to delete your personal data where there is no ongoing lawful reason to hold it. |
| Right to Restriction | You can ask us to suspend the processing of your data in specific circumstances. |
| Right to Data Portability | Where the lawful basis for processing is consent or contract, and the data was provided by you and processed by automated means, you can request your personal data in a structured, commonly used, machine-readable format. |
| Right to Object | You can object to processing based on legitimate interests or direct communications. |
| Right to Withdraw Consent | Where processing relies on consent, you may withdraw that consent at any time without penalty. |
To exercise any of these rights, please write to support@alchemetryx.com. We respond to all verified requests within one calendar month.
You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF | Website: ico.org.uk.
10. Cookies and Tracking
Our website does not use tracking cookies, advertising pixels, or invasive behavioral profiling tools.
We use strictly necessary functional mechanisms required to deliver the website securely and preserve basic session choices. If you use the embedded booking widget, third-party functional cookies may be set by Cal.com to manage the appointment scheduling sequence.
You can instruct your web browser to refuse all cookies or notify you when a cookie is sent.
11. Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, misuse, or alteration.
Measures include TLS encryption in transit for all web traffic, role-based access controls, multi-factor authentication on administrative accounts, and encrypted cloud storage repositories.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our legal duties, business practices, or service offerings.
Any changes will be posted directly on this page with an updated effective date. We encourage you to review this page periodically.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Alchemetryx Ltd
Registered Office: 83 Arthur Grove, London, England, SE18 7ES
Email: support@alchemetryx.com
Company Number: 17199377