Privacy Policy
1. Who we are
OMD-GITTAL MARKETING LTD, trading as Alvicta ("we", "our", "us"), is the data controller for the personal data described in this notice.
- Registered in England and Wales, company number 17197661
- Registered office: 5 Cornwall Street, Oldham, England, OL9 7SF
- ICO data protection registration: C1996690
- Website: alvicta.ai · Email: info@alvicta.ai
We have no data protection officer. Data protection questions come directly to the founder at info@alvicta.ai.
2. What we collect, why, and on what legal basis
alvicta.ai uses two essential preference cookies, and does not use analytics or advertising trackers — see our Cookie Policy. The personal data we receive is what you choose to give us directly:
| What | Why | Lawful basis |
|---|---|---|
| Name, email, service interest and anything you write in the enquiry form | To reply to your enquiry, send automated follow-up messages relevant to it (for example a welcome message or a check-in), and, if you go ahead, to provide the service | Legitimate interests (responding to an enquiry you sent us), then performance of a contract |
| Name, email and your answers when you book a free audit call | To hold the appointment and prepare for it | Steps prior to entering a contract at your request |
| Your WhatsApp number and message content, if you message us | To hold that conversation | Legitimate interests (responding to you) |
| Whatever you type into the live chat widget | To generate a reply and, if you ask a follow-up, to hold the conversation with context | Legitimate interests (responding to you). Not stored by us once your browser session ends — see section 3. |
| IP address and technical request data in server logs | Security, and keeping the site working | Legitimate interests (running a secure website) |
We do not collect special category data, we do not carry out automated decision-making that produces legal effects, and we do not sell personal data.
3. Who else handles your data
These are the companies that process personal data on our behalf. Each one is bound by a contract and may only act on our instructions.
| Provider | What it handles | Where |
|---|---|---|
| Netlify | Hosts this website; IP addresses appear in server logs | USA / global CDN |
| Airtable | Stores enquiry form submissions in a private, access-restricted base. Airtable's own privacy practices are described at airtable.com/privacy | USA |
| n8n | Receives your enquiry details to send automated follow-up messages relevant to your enquiry (for example a welcome message or a check-in) | [Alvicta: state where your n8n instance runs — self-hosted server location, or n8n Cloud region] |
| Anthropic (Claude API) | Powers the live chat widget on this site. Messages you send are sent to Anthropic to generate a reply; we do not store chat transcripts server-side — they exist only in your browser for the length of your visit | USA |
| Google (Workspace) | Our email and calendar — so anything you send us or any call you book is stored there | EU / USA |
| Google (Calendar booking) | The "book a call" link takes you to a Google Calendar booking page, and the details you enter there are handled by Google directly, under Google's own privacy terms | EU / USA |
| Meta (WhatsApp) | Only if you choose to message us on WhatsApp | Global |
Links to our Instagram, Facebook and TikTok profiles are ordinary links. Nothing is loaded from those platforms unless you click through, at which point their own privacy policies apply.
4. Transfers outside the UK
Netlify, Airtable and Anthropic are US-based; Google Workspace and Google Calendar transfers are also routed through the United States. Where personal data leaves the UK, we rely on the UK Government's adequacy regulations for the UK–US Data Bridge where a provider participates in it, or on the International Data Transfer Addendum to the EU Standard Contractual Clauses incorporated into our agreements with that provider. We review this list whenever we add a new provider.
5. How long we keep it
- Enquiries that don't become clients — 24 months, then deleted
- Client records — for the duration of the engagement, then 6 years to meet UK accounting and limitation requirements
- Booking and calendar entries — 24 months
- Live chat messages — not retained by us; they exist only in your browser tab and are cleared when you close it or refresh the page
- Server logs — as retained by our hosting provider, typically 30 days
6. Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to someone else, and you can object to processing based on legitimate interests.
Email info@alvicta.ai and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. We would rather you came to us first so we can put it right, but you do not have to.
7. When we work on a client's systems
This notice covers data we collect as a controller — our own enquiries, bookings and website visitors.
When we build automations, websites or CRM integrations for a client, we usually act as a processor of that client's data. In that role we act only on the client's written instructions under a separate data processing agreement, the client remains the controller, and their own privacy notice governs how their customers' data is used.
We do not use client data, or any data collected through this website, to train AI models.
8. Children
Our services are intended for business owners and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us at info@alvicta.ai and we will delete it.
9. Security
We use HTTPS across the site, restrict access to enquiry data to the founder and any staff who need it to respond, and rely on our processors' own security certifications (Netlify, Airtable, Anthropic and Google each publish their own security documentation). We review who has access to stored enquiries periodically.
10. If something goes wrong
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it, and will contact you directly without undue delay if the breach is likely to result in a high risk to you.
11. Cookies
We use two essential first-party cookies to remember your cookie choice and to avoid repeating the chat greeting during the same browser session. We do not use analytics or advertising cookies. Details are in our Cookie Policy.
12. Changes to this notice
If we add or change a provider that handles personal data, we update the table in section 3 and the date at the top of this page. Material changes affecting how we use your data will be notified by email where we hold your address.
13. Contact
OMD-GITTAL MARKETING LTD, 5 Cornwall Street, Oldham, England, OL9 7SF · info@alvicta.ai