Privacy policy

Last updated: 15 October 2026

Who we are

AlphaPath Group ("we", "us") provides data centre ICT design, IT services, managed IT and consulting. We are the data controller for the personal information described in this policy.

Contact: hello@alphapathgroup.com

If you are a client, we also handle personal information inside your IT systems on your behalf, as a data processor. That work is covered by our agreement with you, not by this policy.

What information we collect

• Enquiries: when you use our contact form or email us, we collect your name, organisation, number of users, email address, phone number, the topic you choose and anything you tell us in your message.
• Clients: contact details for the people we work with, and records of support requests and the work we do.
• Website: our hosting provider keeps basic technical logs, such as IP addresses, to keep the website secure. We do not use analytics or advertising cookies.

How we use it, and our lawful basis

• To reply to your enquiry. Our lawful basis is legitimate interests: responding to people who contact us.
• To provide our services and manage our relationship with clients. Our lawful basis is contract.
• To keep accounting and tax records. Our lawful basis is legal obligation.
• To keep our website and systems secure. Our lawful basis is legitimate interests.

We do not sell your information, and we do not use it for automated decision-making.

Who we share it with

• Our email and business software providers, which store our email and documents
• Resend, which delivers messages sent through our contact form to our inbox
• Vercel, which hosts this website
• Our accountant, and authorities such as HMRC where the law requires it

International transfers

Some of our providers may process data outside the UK, and we support clients in other countries. Where personal data leaves the UK, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Extension to the EU-US Data Privacy Framework.

How long we keep it

• Enquiries that do not lead to work: up to two years from our last contact.
• Client records: for the length of our contract and up to six years afterwards, for legal and accounting reasons.

How we protect it

We practise what we preach: multi-factor authentication, encrypted devices, up-to-date systems and access limited to the people who need it.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete your information
• ask us to restrict how we use your information
• object to us using your information based on legitimate interests
• ask for your information in a portable format, where this applies

To use any of these rights, email hello@alphapathgroup.com. We will reply within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies

This website does not set cookies. See our cookie policy for details.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.