Privacy Policy

Who we are

Alkimio Limited is a company registered in England and Wales (company number 17491072) with its registered office at Unit 14 Freeland Park, Wareham Road, Lytchett Matravers, Poole, England, BH16 6FH. We are the data controller for personal data collected through alkimio.com. Contact us about privacy at [email protected].

What we collect

• Contact details such as name, company, email address, phone number and billing address
• Order details, including the products you bought
• Account details for your Alkimio account
• Microsoft 365 tenant details, such as your tenant domain and admin contact, when we provision subscriptions
• Technical data such as IP address, browser type and pages visited
• Messages you send us

How we use it and our lawful basis

• To process orders and deliver licenses (performance of a contract)
• To provide support and respond to enquiries (performance of a contract or legitimate interests)
• To keep accounting and tax records (legal obligation)
• To keep the website secure and improve it (legitimate interests)
• To send marketing, only where you have agreed (consent)

Who we share it with

• Payment providers, to take payment securely
• Microsoft and our software distributors, to create and manage your licenses and subscriptions
• Hosting, email and IT providers that run our website and systems
• Professional advisers such as accountants, and authorities where the law requires it

We do not sell personal data, and each provider may use it only to provide its service to us.

Access to your Microsoft 365 tenant

If we need administrator access to set up or support your subscriptions, we request it through Microsoft’s granular delegated admin privileges (GDAP). You approve each request, access is limited to the roles needed and is time limited, and you can remove it at any time. We never ask for your passwords.

International transfers

Some providers, including Microsoft, may process data outside the UK. Where they do, we rely on adequacy regulations or standard contractual clauses approved under UK data protection law.

How long we keep it

• Order and payment records: six years after the end of the financial year, to meet tax and accounting rules
• Account details: while your account is open, and up to two years after your last order
• Enquiries and support messages: up to two years
• Website analytics: up to 14 months

Your rights

Under the UK GDPR and, where it applies, the EU GDPR, you have the right to access, correct, erase, restrict or object to processing of your data, and the right to data portability. Where processing is based on consent, you can withdraw it at any time. Contact us at [email protected] to use these rights. We reply within one month.

Complaints

If you are unhappy with how we handle your data, please contact us first. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

See our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.