Privacy Policy

Last updated: 25 March 2026

AlchemAI Consulting Ltd ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect information about you when you visit our website at alchemai.co.uk or contact us with an enquiry.

We are registered in England and Wales (Company No. 17114520) and act as the data controller for the personal data described in this policy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller: AlchemAI Consulting Ltd

Registered Address: South West of England

Company Number: 17114520

Contact Email: [email protected]

2. What Personal Data We Collect

We collect personal data only when you choose to provide it to us. The information we may collect includes:

Data TypeHow CollectedPurpose
NameContact formTo address you personally in our response
Email addressContact formTo respond to your enquiry
Company nameContact form (optional)To understand your business context
Message contentContact formTo understand and respond to your enquiry
IP address and browser dataAutomatically via server logsSecurity, fraud prevention, and site analytics

We do not collect any special category data (such as health, ethnicity, or political opinions) and we do not use cookies for tracking or advertising purposes.

3. Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR Article 6:

  • Legitimate interests — to respond to enquiries submitted through our contact form and to maintain the security of our website.
  • Consent — where you have explicitly provided information to us for a specific purpose.
  • Contract — where processing is necessary to take steps at your request prior to entering into a contract.

4. How We Use Your Data

We use the personal data you provide solely to:

  • Respond to your enquiry or request for information
  • Provide advisory or consulting services where a commercial relationship is established
  • Maintain the security and performance of this website

We do not use your data for automated decision-making, profiling, or marketing without your explicit consent. We do not sell, rent, or share your personal data with third parties for their own commercial purposes.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

  • Enquiry data — retained for up to 12 months from the date of last contact, unless a commercial relationship is established.
  • Client data — retained for 6 years from the end of the engagement, in accordance with UK tax and legal requirements.
  • Server logs — retained for up to 90 days for security purposes.

6. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

RightWhat It Means
AccessYou can request a copy of the personal data we hold about you.
RectificationYou can ask us to correct inaccurate or incomplete data.
ErasureYou can ask us to delete your data where there is no compelling reason for us to continue processing it.
RestrictionYou can ask us to restrict processing of your data in certain circumstances.
PortabilityYou can request your data in a structured, machine-readable format.
ObjectionYou can object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS. Contact form submissions are transmitted securely and stored in an access-controlled database.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.

8. Third-Party Services

This website is hosted on infrastructure provided by Manus. No personal data collected through this website is transferred to countries outside the UK without adequate safeguards in place. We do not use third-party analytics services, advertising networks, or social media tracking pixels on this website.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page will always reflect the most recent revision. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Tim Baker

AlchemAI Consulting Ltd

Company No. 17114520

[email protected]