Privacy Policy

1. Who we are

Alvento Ltd ("Alvento", "we", "us", or "our") is registered in England and Wales. We provide AI-powered marketing, operations, and content automation services to businesses.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or services. It applies to all visitors to alvento.ltd and to clients whose data we process as part of delivering our services.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data we collect

Website visitors

When you browse our website, we automatically collect certain technical data via Google Analytics 4 (GA4), including:

• IP address (anonymised)
• Browser type and version
• Pages visited and time spent
• Referral source (how you found us)
• Device type and operating system

SEO Audit enquiries

When you request a free SEO audit via our website, we collect:

• Name
• Email address
• Business website URL
• Business name (where provided)

Client and prospect data

In the course of providing our services, we may collect and process additional business contact information such as telephone numbers, company details, and correspondence records.

3. How we use your data

We do not sell your personal data to third parties.

4. Third-party services and integrations

We use the following third-party services to operate our business. Each operates under its own privacy policy.

Google Analytics 4 (GA4)

We use Google Analytics 4 to understand how visitors use our website. GA4 uses cookies and collects anonymised usage data. Google may process this data in the US under Standard Contractual Clauses. You can opt out via the Google Analytics Opt-out Browser Add-on.

Canva

We use Canva's platform and API to create and publish social media graphics. For clients where we manage social content (such as brand visuals and post graphics), we may upload brand assets, copy, and images to Canva for design and scheduling purposes. No personal data about your customers is transferred to Canva; only brand and content assets are used.

Canva's privacy policy is available at canva.com/privacy.

Email delivery

We use transactional email infrastructure to deliver audit reports and follow-up communications. Email service providers process your email address solely for message delivery.

Stripe

If you purchase a paid service from us, payment is processed by Stripe. We do not store payment card data. Stripe's privacy policy is available at stripe.com/gb/privacy.

5. Data retention

6. Your rights under UK GDPR

You have the following rights in respect of your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — ask us to delete your data where there is no compelling reason to continue processing it
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests (including direct marketing)
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, contact us at privacy@alvento.ltd. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

7. Cookies

We use the following cookies on our website:

We do not use advertising, tracking, or profiling cookies. You can manage cookie preferences through your browser settings or use the Google Analytics opt-out add-on.

8. International data transfers

Some of our third-party service providers (including Google) may transfer and process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO, to protect your data to UK GDPR standards.

9. Data security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include access controls, encrypted transmission (HTTPS), and restricted internal access to personal data.

No method of transmission over the internet is 100% secure. If you have concerns about data security, contact us at security@alvento.ltd.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated where we hold your contact details.

11. Contact us

For general enquiries: hello@alvento.ltd