Privacy Policy
This policy explains how Alzando Ltd collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Alzando Ltd ("Alzando", "we", "us", "our") is a property optimisation consultancy registered in England and Wales. We take your privacy seriously and are committed to being transparent about how we handle personal data.
Data Controller: Alzando Ltd
Registered address: [To be added on incorporation]
Company number: [To be added on incorporation]
ICO registration number: [To be added]
Email: hello@alzando.co.uk
We collect and process the following categories of personal data:
- Name and email address (via contact and enquiry forms)
- Listing URL and property information you share with us
- Communication content (emails, messages)
- Service preferences and requirements
- Website usage data via cookies (see our Cookie Policy)
- IP address and browser type (for security and analytics purposes)
- Pages visited and time spent on site
We use your personal data for the following purposes:
- To respond to your enquiries and provide our services
- To deliver audit reports and related service outputs
- To send service-related communications (confirmations, updates)
- To improve our website and services
- To comply with our legal obligations
Our lawful basis for processing is primarily contract performance (where we are delivering a service to you) and legitimate interests (for general enquiries and website analytics). Where required, we rely on consent.
- Enquiry and contact data: 2 years from last contact
- Client service data: 6 years (to meet HMRC requirements)
- Website analytics data: 26 months
After these periods, your data is securely deleted or anonymised.
We do not sell your personal data. We may share data with trusted third-party service providers who help us operate our business:
- Google Workspace — email and document storage
- Stripe — payment processing (PCI DSS compliant)
- Anthropic — AI processing for audit analysis (data not retained by Anthropic for training)
- Xero — accounting and invoicing
All third parties are required to handle your data securely and in accordance with UK data protection law. We do not transfer your data outside the UK/EEA without appropriate safeguards in place.
Under UK GDPR, you have the following rights:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — ask us to delete your data (subject to legal obligations)
- Restriction — ask us to limit how we use your data
- Portability — request your data in a portable format
- Object — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent
To exercise any of these rights, email us at hello@alzando.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Access to client data is restricted to authorised personnel only.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The date of the most recent revision appears at the top of this page.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@alzando.co.uk.