Privacy Notice

Information received

Alphaveta Ltd is responsible for the personal information it receives through correspondence about this website and suspected impersonation.

This website has no enquiry forms, account registration or document-upload facility, and does not use analytics or tracking cookies. You can browse without submitting a report or providing contact details through a form.

If you email us, your message may contain personal information, including your name, email address and details about you or other people in the correspondence you provide. Sending a report is voluntary. Please send only what is relevant and redact unnecessary personal details.

Do not send passports, passwords, banking credentials or sensitive identification documents.

Email services process messages to deliver and store them. Hosting services may also process technical connection information, such as IP addresses and request logs, when you visit a website.

How correspondence is used

We use fraud-related correspondence to assess reports of impersonation, respond where appropriate, protect the company and affected individuals, and support reporting to the appropriate authorities.

Our lawful basis

We process ordinary fraud-report correspondence on the basis of our legitimate interests under Article 6(1)(f) of the UK GDPR: preventing and investigating impersonation of Alphaveta Ltd, protecting the company and affected individuals, responding to reports and providing relevant information to the appropriate authorities.

Within Alphaveta Ltd, correspondence is accessed by Alphaveta staff from the United Kingdom. We do not use reports for marketing or unrelated purposes. Reports are not intended for public disclosure.

Sharing information

We use external email and website-hosting service providers to operate these services. They process information needed to deliver, store and support communications and the website.

Depending on what you report, we may share relevant correspondence with the appropriate authorities, such as law-enforcement or regulatory bodies, in connection with suspected fraud or impersonation.

Authorities that receive a report are responsible for their own processing and retention of that information. Our six-month deletion period does not determine how long they keep their records.

Keeping your information

We keep fraud-report emails and their attachments for six months from receipt, then delete the copies held by Alphaveta Ltd. This period applies to our copies, not to records held independently by authorities to whom a report has been referred.

You can request deletion by emailing fraud@alphaveta.net. We will consider your request under applicable data-protection law. You may request deletion before the end of the six-month period. The right to deletion is subject to applicable legal exceptions; we will explain if an exception applies to your request.

Your data-protection rights

Depending on the circumstances and applicable law, you may have rights to access your personal information, correct inaccurate information, request deletion, restrict its use or receive a portable copy.

Your right to object

You have the right to object, on grounds relating to your particular situation, to processing based on legitimate interests. We will consider your objection and stop that processing unless there are compelling legitimate grounds that override your interests, rights and freedoms, or it is needed for legal claims. To object, contact us using the details below.

Contact and complaints

For privacy enquiries or requests about your personal information, email fraud@alphaveta.net.

You can also write to Alphaveta Ltd, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

You have the right to raise a data-protection complaint with the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.