Policy

Privacy Policy

Last updated: 31 March 2026 · Controller: Alvero Ltd

This policy explains how Alvero Ltd collects and uses personal data when you browse our website, purchase digital products, or contact us.

What we collect

Order data: name, email, billing details, items purchased, payment references from our processor, and data needed to deliver digital downloads or template links. A postal delivery address is collected only if you buy a product that requires shipping (we currently sell digital goods only).
Contact data: information you send by form, email, or WhatsApp to receive support.
Technical data: basic server logs or analytics if you enable them (see Cookies).

How we use data

To process payments and deliver digital products,
To send transactional emails (order confirmation, download links),
To answer support questions about access or billing,
To meet accounting, tax, and legal obligations,
To detect fraud or misuse of payment systems.

We do not sell your personal data. Marketing messages require a separate lawful basis and opt-in if you add a newsletter or promotions.

Legal bases (summary)

We rely on contract (to sell and deliver downloads), legitimate interests (fraud prevention, security, proportionate analytics), and legal obligation (tax and company records) as appropriate. Non-essential cookies require consent where UK rules apply.

Payment processing

Payments are processed by our authorised payment partner. We do not store full card numbers on our own servers. Card data is handled under PCI DSS by the processor.

Retention

Order and invoice records are kept for as long as UK tax and company law requires (often at least six years for financial records — confirm with your adviser). Download access logs, if kept, should have a documented retention period proportionate to fraud prevention and support.

Cookies and analytics

We may use essential cookies for checkout or session stability. If you add analytics, name the provider, purposes, and retention, and use a consent tool where required.

International transfers

If you use tools that process data outside the UK/EEA, document safeguards (e.g. UK IDTA / EU SCCs) in an internal register and summarise here if material to customers.

Your rights

You may have rights to access, correction, erasure (where applicable), restriction, portability, and objection under UK data protection law. You may complain to the ICO (ico.org.uk).

Contact

Privacy enquiries: support@alveroltd.com
71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ