Privacy Policy

Adchemy Ltd ("Adchemy", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, shall be processed. By using our platform, you acknowledge that you have read, understood, and agree to be bound by this policy in its entirety.

This policy applies to all users of the Adchemy platform, including visitors, registered users, and subscribers. It is your responsibility to review this policy periodically, as continued use of the Service constitutes acceptance of any amendments.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Adchemy Ltd, registered in England and Wales.

We collect and process the following categories of personal data. You are obligated to ensure that all information provided is accurate, complete, and up to date.

We process your personal data on the following lawful bases as defined under the UK GDPR:

• Contractual necessity: Processing required to perform our contract with you, including providing access to the Service and processing payments
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving the platform, preventing fraud, and ensuring security
• Consent: Where you have given explicit consent, such as for marketing communications or non-essential cookies
• Legal obligation: Processing required to comply with applicable laws, regulations, or court orders

We use the information we collect strictly for the following purposes:

• To provide, operate, maintain, and improve the Service
• To personalise your experience and deliver content relevant to your usage patterns
• To process transactions, send invoices, and manage your subscription
• To communicate with you regarding account activity, updates, and support enquiries
• To monitor and analyse usage trends, platform performance, and system integrity
• To detect, investigate, and prevent fraudulent, unauthorised, or illegal activity
• To enforce our Terms of Service and other applicable policies
• To comply with legal obligations and respond to lawful requests from authorities

We may share your information only with the following categories of recipients, and only to the extent strictly necessary:

Your personal data may be transferred to, and processed in, countries outside the United Kingdom. Where such transfers occur, we shall ensure that appropriate safeguards are in place in accordance with the UK GDPR, including but not limited to Standard Contractual Clauses (SCCs) or adequacy decisions.

Under no circumstances shall your data be transferred to a jurisdiction that does not provide an adequate level of data protection without appropriate supplementary measures.

We retain your personal data only for as long as strictly necessary to fulfil the purposes outlined in this policy, or as required by applicable law.

Upon expiry of the applicable retention period, your data shall be securely deleted or irreversibly anonymised.

We implement robust technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Regular penetration testing and vulnerability assessments
• Strict access controls with role-based permissions and multi-factor authentication
• Continuous monitoring and logging of system access
• Incident response procedures with mandatory breach notification within 72 hours

Whilst we take all reasonable precautions, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security of your data.

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you
• Right to rectification: You may request correction of inaccurate or incomplete data
• Right to erasure: You may request deletion of your personal data, subject to legal retention requirements
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances
• Right to data portability: You may request your data in a structured, commonly used, machine-readable format
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time

To exercise any of these rights, please contact us at privacy@adchemy.com. We shall respond to your request within 30 calendar days. We reserve the right to verify your identity before processing any request.

If you are dissatisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we shall take immediate steps to delete such information from our systems.

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer:

We shall endeavour to respond to all enquiries within 5 working days.