Privacy policy.

1. Who is responsible for your information?

Alteracore Ltd is the controller of personal information collected through its website and related enquiries. We are a company registered in Scotland, company number SC836436.

Our registered office is 88 Shakespeare Street, Dumfries, United Kingdom, DG1 2JJ.

For privacy questions, to exercise your rights or to raise a concern, contact:

• Company: Alteracore Ltd
• Privacy contact: James Carnochan, owner and director
• Email: arrive@alteracore.net, with “Privacy enquiry” in the subject if convenient
• Post: James Carnochan, Alteracore Ltd, at the registered office above

This notice explains how we handle personal information when you visit alteracore.net or contact us about website development, IT projects, IT support or IT security. It addresses the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended.

It does not describe every activity carried out during a client engagement. If you become a client, we will provide any additional privacy information needed for that work. Where we process personal information on a client's instructions, the client's privacy information and our agreed data-processing terms apply to that processing.

2. Information we collect and where it comes from

Visiting the website

Delivering a webpage involves processing technical information such as your IP address, the requested page or file, and connection details. Hosting and security systems may record access or error logs containing the date and time, browser or device information, referring page where supplied, and request or error details.

Our website is hosted on an OVHcloud (OVH) VPS located in the United Kingdom and uses Cloudflare as a content delivery network (CDN). Cloudflare receives website requests before passing them to the hosting service and processes technical request information to deliver content, maintain performance and protect the service.

Emailing us

If you send an enquiry, we receive the information in your email. This may include your name, email address, business name, telephone number if supplied, requirements, correspondence and any attachments. We receive it directly from you, or from someone contacting us on your behalf. Your email provider and our email provider also process delivery and security information.

The website uses email links rather than a contact form. Clicking an email link opens your email application; the website does not submit an enquiry. We receive your message only when you send it through your email service.

Please share only what is needed to discuss your request. Do not email passwords, payment-card details or sensitive personal information. If a project needs confidential material, contact us first to agree an appropriate way to share it.

You can browse without providing your name or contact details. If you want a reply or a quotation, we need sufficient information to understand your request and contact you.

3. Why we use information and our lawful bases

Where we rely on legitimate interests, we consider whether our use is necessary and proportionate and balance our interests against your rights and reasonable expectations. You can object to processing based on legitimate interests, as explained below.

Sending us an enquiry is not consent to unrelated marketing. The current website has no newsletter sign-up, advertising platform or marketing subscription form.

4. Cookies and similar technologies

The website's own code does not set cookies, use browser local storage for visitor tracking, or include advertising pixels, analytics scripts, embedded social-media feeds or third-party web fonts. Its animation and navigation scripts run in your browser and do not send usage reports to an analytics service.

Your browser may cache website files to load them efficiently. This is different from adding a visitor-tracking system to the website.

Cloudflare may use security cookies when the corresponding protection features are active. Examples include __cf_bm to distinguish automated traffic from people, and cf_clearance to remember a completed security check. These examples describe conditional security features; they are not a claim that every visitor receives these cookies. They are used for access and protection rather than advertising. Their availability and expiry depend on the enabled feature and its settings. See Cloudflare's cookie documentation for the purposes and lifetimes of its cookies.

You can manage cookies through your browser. Blocking security cookies may prevent a security check from working or cause it to be repeated. If we introduce additional storage, analytics or marketing technologies, we will update this notice and obtain consent before use where required. The current website source does not include an optional analytics or advertising integration.

5. Who receives information?

We use service providers to host the website and deliver and store email. They process the information needed to provide those services. Access by other professional advisers or authorities is limited to what is necessary for advice, meeting a legal obligation or protecting legal rights.

Our main infrastructure providers are:

• OVHcloud (OVH): website hosting and email services, including the delivery and storage of enquiries and relevant service logs.
• Cloudflare: CDN and related website delivery and security services, processing technical requests and relevant security information. Cloudflare does not receive your enquiry email merely because you click an email link on this website.

Providers may use authorised subprocessors to deliver their services. Their privacy information describes processing they undertake in their own capacity: OVHcloud privacy information and Cloudflare privacy information.

We do not sell personal information collected through this website or related enquiries.

6. International transfers

The location of a website visitor does not determine where hosting logs or email records are processed. A provider may also use support personnel or subprocessors in other countries.

Cloudflare operates an international network, so technical website information may be processed outside the UK, including in the United States and other countries where it or its subprocessors operate. The website VPS is located in the United Kingdom. Email, backups and provider support or subprocessor access may have separate processing locations, depending on the service arrangements. We do not represent that all website or email information remains in the UK.

For restricted transfers, UK data protection law requires an applicable adequacy arrangement or appropriate safeguards. Cloudflare's Data Processing Addendum provides its contractual transfer framework, including standard contractual clauses and the UK Addendum where applicable. The applicable OVHcloud service and data-processing terms govern its processing arrangements. You can contact arrive@alteracore.net for information about the locations and transfer safeguards relevant to your information and how to obtain a copy of the applicable safeguards.

7. How long we keep information

We keep information only for as long as it is needed for its purpose. The relevant criteria are:

• Enquiries that do not become client work: the time needed to answer the enquiry, complete any follow-up you request and resolve outstanding questions.
• Enquiries that lead to client work: the relevant information becomes part of the client record. Retention then depends on the engagement, applicable record-keeping duties and the need to deal with disputes or legal claims.
• Website access and error logs: the period necessary to operate the service, diagnose faults and investigate security issues, taking account of provider settings.
• Privacy requests and complaints: the time needed to respond and retain a proportionate record of how the request was handled.
• A specific incident or legal matter: relevant records may need to be retained longer while that matter remains unresolved.

We assess continued retention against these criteria and remove information when it is no longer needed, unless a legal requirement or unresolved matter justifies retaining it. Provider-held logs and backup copies follow the retention and deletion arrangements of the relevant service; deletion from an active mailbox does not necessarily immediately remove backup copies. Contact us if you need information about the retention applicable to a particular record.

8. Security

We aim to limit personal information to what is needed, restrict access to those who need it and use appropriate technical and organisational measures for the information and risks involved. No website, email service or transmission method can be guaranteed completely secure.

9. Your data protection rights

Depending on the circumstances and the lawful basis used, you may have the right to:

• Ask for access to your personal information and a copy of it.
• Ask us to correct inaccurate information or complete incomplete information.
• Ask us to erase information where the legal conditions are met.
• Ask us to restrict how information is used.
• Object to processing based on legitimate interests, for reasons relating to your situation.
• Receive information you supplied in a portable format where processing is automated and based on consent or a contract, and the right applies.
• Withdraw consent if we rely on it for a particular activity. Withdrawal does not affect processing carried out lawfully before withdrawal.

These rights are subject to legal conditions and exemptions; they do not all apply to every record or activity. We do not use website or enquiry information to make decisions based solely on automated processing that produce legal or similarly significant effects, and we do not use it for such profiling.

Contact arrive@alteracore.net or write to our registered office to make a request. You do not need special wording. We may ask for information reasonably needed to confirm your identity or understand the request.

We normally respond without undue delay and within one month. If the law allows a different deadline or an extension, we will explain the reason and timing. Requests are normally free of charge.

10. Concerns and complaints

Please contact James Carnochan at arrive@alteracore.net if you have a concern about our handling of personal information. We will consider your concern and respond.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator. You do not need our permission to contact it:

• Website: ICO complaints service

11. External links and changes

If you follow a link to another organisation's website or use your email application, that service's own privacy information applies to its processing.

We will update this notice when the website or our relevant processing changes. The published version will show its last-updated date.