Privacy policy - Aldemis

Last updated: 19 June 2026

This policy is written to reflect the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018) as amended by the Data (Use and Access) Act 2025 (DUAA), and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

Aldemis (“we”, “us”, “our”) is the data controller responsible for your personal data.

Legal entity: Aldemis Partners Ltd, company number 17130393
Registered / contact address: 86–90 Paul Street, London, EC2A 4NE, United Kingdom
ICO registration number: C1963166
Contact for data protection matters: contact@aldemis.com

If you have any question about this policy or how we handle your personal data, please contact us using the details above.

2. Information we collect

We collect only the personal data we need. Depending on how you interact with us, this may include:

Contact and identity data you provide directly (full name, email address, phone number, company name and job title), for example when you complete our contact form, request information, or correspond with us.
Engagement data relating to advisory work, where you are a client or a client contact.
Technical and usage data collected automatically when you visit our website, such as IP address, browser type, device information, and pages visited (see Cookies, below).

We do not seek to collect special category data, and we ask that you do not send it to us unsolicited.

3. How we use your information and our lawful bases

We use personal data for the following purposes, relying on the lawful bases shown:

To respond to enquiries and provide information about our services, on the basis of our legitimate interests in answering and developing potential client relationships, or to take steps at your request prior to entering a contract.
To deliver advisory and consulting services, on the basis of performance of a contract.
To send service updates, insights and event information, on the basis of consent, or legitimate interests where permitted for existing clients, and always with an option to opt out.
To operate, secure and improve our website, on the basis of our legitimate interests and, where required, your consent to non-essential cookies.
To comply with legal and regulatory obligations.

We will not sell your personal data. We will not share it with third parties except as set out in this policy or where required or permitted by law.

4. Cookies and tracking

Our website uses cookies and similar technologies to make the site work, understand how it is used, and (where you consent) to support analytics and advertising. We use Google Analytics 4, the Meta (Facebook) Pixel and the LinkedIn Insight Tag. None of them set cookies or collect identifiers until you accept. Non-essential cookies are set only with your consent. You can manage or withdraw consent at any time through our cookie controls or your browser settings. Disabling some cookies may affect how the site functions.

5. Sharing your information and processors

We use trusted third-party service providers (for example website hosting, email, and analytics or advertising platforms) who process personal data on our behalf as our processors. They act only on our instructions and under contractual obligations to keep your data secure and confidential. We may also disclose personal data where required to do so by law, regulation or legal process.

6. International transfers

Where personal data is transferred outside the UK (for example by a service provider hosting data abroad), we ensure an appropriate safeguard is in place, such as an adequacy decision or the UK International Data Transfer Agreement / Addendum.

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out above, after which it is securely deleted or anonymised. Our retention periods are: enquiry data retained for 12 months; client records retained for 10 years to meet contractual and legal obligations.

8. Information security

We use appropriate technical and organisational measures, including industry-standard security software and access controls, to protect personal data against unauthorised access, alteration, disclosure or loss.

9. Your rights

Under UK data protection law you have the right to:

be informed about how your data is used;
request access to the personal data we hold about you;
request correction of inaccurate or incomplete data;
request erasure of your data in certain circumstances;
request restriction of processing in certain circumstances;
object to processing based on legitimate interests, and to direct marketing at any time;
request the transfer of your data (data portability) where applicable; and
withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at contact@aldemis.com. We will respond within the statutory time limits and will not charge a fee except in limited circumstances permitted by law.

10. Your right to complain

If you are unhappy with how we have handled your personal data, you have the right to complain.

Complain to us first. You can make a data protection complaint directly to Aldemis, and we encourage you to do so first so that we have the opportunity to put things right. You can submit a complaint:

by email to contact@aldemis.com, marking it “Data Protection Complaint”; or
by post to the address in section 1.

When we receive a complaint, we will:

acknowledge it within 30 days of receipt;
take appropriate steps to investigate it without undue delay, including making any necessary enquiries;
keep you informed of progress; and
inform you of the outcome, and of your right to escalate to the Information Commissioner's Office.

Complain to the regulator. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can do so at any time, although we would welcome the chance to address your concerns first.

Website: ico.org.uk
Helpline: 0303 123 1113

11. Links to other websites

Our website contains links to third-party sites. We are not responsible for the privacy practices of those sites, and we encourage you to review their privacy policies.

12. Children's privacy

Our services are not directed at children. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will delete it promptly.

13. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the “last updated” date shown above.

14. Contact us

For any question about this policy or your personal data, contact us at contact@aldemis.com.