Avallen Solutions Ltd trading as alkatera (“we”, “us”, “our”) operates the alkatera platform (https://alkatera.com), a sustainability management system for the drinks industry. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

1.1 Personal Information

We collect information that you provide directly to us, including:

Account information: name, email address, phone number, job title
Organisation details: company name, business address, company registration number
Payment information: billing address, payment card details (processed by our payment provider)
Communications: correspondence with our support team

1.2 Business and Environmental Data

To provide our sustainability analytics services, we collect:

Facility information: locations, energy consumption, operational data
Production data: raw ingredients, fermentation data, packaging specifications
Supply chain information: supplier details, transportation data, sourcing origins
Environmental metrics: carbon emissions, water usage, waste diversion rates
Product information: SKU details, lifecycle assessment data
Certification and compliance data: B Corp assessments, sustainability certifications

1.3 Automatically Collected Information

When you access our platform, we automatically collect:

Device information: IP address, browser type, operating system
Usage data: pages visited, features used, time spent on platform
Cookies and similar technologies: see our Cookie Policy for details

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our sustainability platform
Calculate and track environmental impact metrics (carbon footprint, water footprint, circularity scores)
Generate sustainability reports and analytics
Process payments and manage subscriptions
Send service-related communications and updates
Respond to your enquiries and provide customer support
Detect, prevent, and address technical issues and security threats
Comply with legal obligations and regulatory requirements
Develop new features and services

3. Legal Basis for Processing (GDPR)

Under the UK and EU General Data Protection Regulation, we process your data based on:

Contract Performance: Processing necessary to provide our services to you
Legitimate Interests: Improving our services, fraud prevention, security
Legal Obligation: Compliance with applicable laws and regulations
Consent: Where you have given explicit consent for specific processing activities

4. Data Sharing and Disclosure

We share your information with the following categories of recipients:

Sub-processors: Vetted third parties who process data on our behalf to operate the platform (listed below)
Business Partners: With your consent, partners who provide complementary sustainability services
Legal Requirements: When required by law, court order, or governmental authority
Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

Our sub-processors

We use the following sub-processors, each bound by a data-processing agreement and processing data only on our instructions:

Supabase and Netlify: application hosting, database and file storage
Stripe: subscription and payment processing
Resend and Sender: transactional and marketing email
Google Analytics and PostHog: optional product and website analytics (only with your cookie consent)
Google (Gemini) and Anthropic (Claude): the AI models behind Rosa and our report and data-extraction features
SlideSpeak and PDFShift: generating presentation and PDF reports
Google Maps: mapping and geocoding of facility locations

Processing by AI providers

Some features (our sustainability partner Rosa, automated report drafting, and document and website data extraction) send the relevant business and sustainability content you provide, together with limited account context, to the AI providers named above so they can generate a response. These providers act as our processors and return the generated output to us. We do not send special-category personal data to these providers.

5. International Data Transfers

Your information may be transferred to and processed in countries outside the UK and European Economic Area. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequacy decisions.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We retain certain information as necessary to comply with legal obligations, resolve disputes, and enforce agreements. Environmental and sustainability data may be retained longer for historical analysis and reporting purposes.

7. Your Rights

Under applicable data protection laws, you have the right to:

Access: Request a copy of your personal data
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your data (subject to legal retention requirements)
Restriction: Request limitation of processing
Portability: Receive your data in a structured, machine-readable format
Object: Object to processing based on legitimate interests
Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at hello@alkatera.com

8. Data Security

We implement appropriate technical and organisational measures to protect your information, including encryption, access controls, secure hosting infrastructure, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

9. Children's Privacy

Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our platform and updating the ‘Last Updated’ date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Avallen Solutions Ltd trading as alkatera
Email: hello@alkatera.com
Website: https://alkatera.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are concerned about how we handle your data.