Privacy Policy

Last updated: May 2026

1. Data Controller

The data controller responsible for your personal data is:

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Alpaka Core Technologies LTD is the controller of the personal data collected through this website.

2. Types of Data Collected

We collect minimal personal data through our website. Specifically, we collect data through:

2.1 Website Analytics (Google Analytics)

We use Google Analytics to understand how visitors interact with our website. This service may collect the following data:

• IP address (anonymised where possible)
• Browser type and version
• Operating system
• Referring URLs and exit pages
• Pages viewed and time spent on each page
• Date and time of visits
• Approximate geographic location (city-level, derived from IP)
• Device type and screen resolution

Google Analytics uses cookies to collect this information. For more details, see Section 8 (Cookie Policy) below.

2.2 Server Logs

Our web hosting infrastructure may automatically log standard connection information, including IP addresses, timestamps, and requested resources. These logs are used solely for security monitoring and technical diagnostics.

3. Legal Basis for Processing

We process personal data under the following lawful bases as defined by Article 6 of the UK GDPR:

Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

4. How We Use Your Data

We use the data we collect for the following purposes:

• To analyse website traffic and usage patterns to improve our website and services
• To monitor and maintain the security of our website
• To diagnose and resolve technical issues
• To comply with legal obligations

We do not sell, rent, or trade your personal data to third parties. We do not use your personal data for automated decision-making or profiling.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Google Analytics data: Retained for 14 months from the date of collection, in accordance with our Google Analytics configuration.
• Server logs: Retained for up to 90 days for security and diagnostic purposes.
• Cookie consent records: Retained for 12 months from the date of consent, after which renewed consent will be sought.

After the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with you.

6. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of Access — You may request a copy of the personal data we hold about you (a Subject Access Request).
• Right to Rectification — You may request that we correct any inaccurate or incomplete personal data.
• Right to Erasure — You may request that we delete your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing — You may request that we limit the way we use your data in certain circumstances.
• Right to Data Portability — Where technically feasible, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object — You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by law. In exceptional circumstances, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for the delay.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

7. International Transfers

Your data may be transferred to, and processed in, countries outside the United Kingdom. In particular, Google Analytics data may be processed by Google LLC in the United States or other jurisdictions where Google operates data centres.

Where data is transferred outside the UK, we ensure that appropriate safeguards are in place, including:

• Transfers to countries recognised by the UK Secretary of State as providing an adequate level of data protection
• Standard Contractual Clauses (SCCs) approved by the ICO, or the International Data Transfer Agreement (IDTA)
• The EU-US Data Privacy Framework and its UK Extension, where applicable

You may contact us to obtain further details about the specific safeguards applied to international transfers of your data.

8. Cookie Policy

Cookies are small text files placed on your device when you visit our website. We use the following types of cookies:

8.1 Strictly Necessary Cookies

These cookies are essential for the website to function correctly. They do not require your consent.

8.2 Analytics Cookies

These cookies are set only with your consent and are used to collect information about how visitors use our website.

8.3 Managing Cookies

You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to:

• View and delete existing cookies
• Block all or specific cookies
• Set preferences for certain websites

Please note that disabling cookies may affect the functionality of certain parts of our website. For further guidance, visit aboutcookies.org.

9. Third-Party Services

We use the following third-party services that may process personal data on our behalf:

• Google Analytics (Google LLC) — web analytics. See Google's Privacy Policy.

These third parties act as data processors and process data only in accordance with our instructions and applicable data protection laws.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

• HTTPS encryption for all data in transit
• Regular review of data collection and processing practices
• Access restrictions to personal data on a need-to-know basis

11. Children's Privacy

Our website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete such data.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us: