Effective 30 October 2026
This notice explains how Alexandrite Software Ltd (“we”, “us”) handles personal data when you visit alexandritesoftware.com, email us or work with us. It is written to meet the UK General Data Protection Regulation and Data Protection Act 2018, the EU General Data Protection Regulation, and US state privacy laws including the California Consumer Privacy Act and the California Online Privacy Protection Act.
Our apps have their own privacy policies, linked from each app's store listing and from within the app. Those policies apply to data the apps process.
Who we are
Alexandrite Software Ltd is the data controller. We are registered in England and Wales, company number 14272751, with our registered office at 22 Tudor Close, Cheam, Sutton, England, SM3 8QT. For anything about your personal data, email contact@alexandritesoftware.com.
No cookies, no tracking
This website sets no cookies and uses no analytics, advertising, tracking pixels, social media plugins or third-party scripts. Fonts and all other files are served from our own domain. Because nothing is stored on or read from your device, no cookie consent is required under the Privacy and Electronic Communications Regulations or the EU ePrivacy Directive.
What we collect and why
| When | Data | Purpose and legal basis | How long we keep it |
|---|---|---|---|
| You visit this website | IP address, date and time, page requested, browser user agent, referring page | Delivering the site and keeping it secure. Legitimate interests (UK/EU GDPR Art. 6(1)(f)). | Kept only in our hosting provider's short-term technical logs; we do not build profiles from it. |
| You email us | Name, email address, anything you choose to include | Replying to you and any follow-up. Legitimate interests, or steps before entering a contract (Art. 6(1)(b)). | Up to 2 years after our last contact, unless you become a client. |
| You or your organisation become a client or supplier | Contact details, contract and project correspondence, invoicing and payment details | Performing the contract (Art. 6(1)(b)) and keeping accounting and tax records (legal obligation, Art. 6(1)(c)). | 6 years after the end of the financial year the record relates to, as required by UK company and tax law. |
We do not use personal data for automated decision-making or profiling, and we do not collect special category or sensitive personal data.
Who we share it with
We use these service providers, each under a data processing agreement:
- Microsoft (Azure) to host this website, from the West Europe region.
- Google (Google Workspace) for email.
- Xero for accounting and invoicing.
We also share data with professional advisers, such as our accountant, and with authorities where the law requires it. We never sell personal data, and we never share it for cross-context behavioural advertising.
International transfers
Some of our providers process data outside the UK and the European Economic Area, including in the United States. Where they do, the transfer is protected by an adequacy decision (including the EU–US Data Privacy Framework and its UK Extension, where the provider is certified), or by the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses.
Your rights in the UK and the EU
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing, including processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
Email contact@alexandritesoftware.com to use any of these rights. We will reply within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority in the EU country where you live or work. We would appreciate the chance to resolve your concern first.
Your rights in the United States
Depending on your state, including California, Colorado, Connecticut, Virginia and others with consumer privacy laws, you may have the right to know what personal information we collect and how we use it, to access and delete it, to correct it, and to opt out of its sale, sharing or use for targeted advertising. We do not sell or share personal information, and we do not use it for targeted advertising. In the past 12 months we have collected only the categories described above: identifiers (such as name, email and IP address), commercial information (for clients) and internet activity (website request logs).
To make a request, email contact@alexandritesoftware.com. We will verify your request by confirming details with you by email. You may use an authorised agent. We will not discriminate against you for using your rights.
Do Not Track and Global Privacy Control. This website does not track visitors over time or across other websites, so it treats every visit as if Do Not Track and Global Privacy Control signals were on.
Children
This website is for businesses and is not directed at children. We do not knowingly collect personal data from children under 13, or under 16 in the EU. If you believe a child has sent us personal data, contact us and we will delete it.
Security
The site is served only over encrypted HTTPS connections, and we limit access to personal data to the people who need it. To report a security issue, see our security.txt.
Changes to this notice
We will post any change on this page and update the effective date above. If a change is significant, we will say so on the home page.