Legal
Privacy & Cookie Policy
1. Who we are
Aldemis Foundry is a service provided by Aldemis Partners Ltd (registered in England and Wales, company number 17130393), Floor 3, 86–90 Paul Street, London, EC2A 4NE, United Kingdom ("Aldemis", "we", "us"). Aldemis is the controller of the personal data described in this policy, and is registered with the Information Commissioner's Office under registration number C1963166.
You can contact us about anything in this policy at contact@aldemis.com.
This policy explains how we handle personal data in connection with this website and with enquiries about the Aldemis Foundry service. It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025 ("DUAA"), and with the Privacy and Electronic Communications Regulations 2003 ("PECR") as amended by the DUAA with effect from 5 February 2026.
2. The personal data we collect
This website is deliberately light on data collection. We collect personal data in the following situations:
- When you book a call. Booking links on this site take you to our scheduling provider, OneCal, where you provide your name, email address and chosen appointment time, and optionally any notes you add.
- When you email us. We receive your email address, name and the contents of your message.
- When you download a guide. If you request one of our guides, we ask for your name, email address and optionally your company, which we use to provide the guide and to follow up on your interest. If you tick the consent box, we will also send you occasional relevant material about Foundry; you can unsubscribe at any time.
- When you use the chat assistant. Our website offers an AI chat assistant. The messages you type are processed in order to answer you, and are sent to Anthropic, the AI provider whose model powers the assistant, for that purpose. Please don't enter sensitive personal information into the chat; if your question involves anything confidential, email or book a call instead.
- When you become a client. We collect business contact details, information about your company and product, and the information needed to deliver the service and administer billing. Client engagements are governed by our engagement terms in addition to this policy.
- Technical data. Our hosting provider records standard server logs (such as IP address, browser type and pages requested) for security and service operation. We do not use this information to identify individuals.
We do not knowingly collect data from anyone under 18, and this website is not directed at children.
3. How and why we use your data
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to enquiries and holding intro calls | Contact details, booking information, correspondence | Legitimate interests (responding to people who contact us), or steps taken at your request prior to entering a contract |
| Operating the website chat assistant | The messages you type into the chat | Legitimate interests (answering questions from visitors who choose to use the assistant) |
| Delivering the Foundry service to clients | Contact details, company and product information, account and billing data | Performance of a contract; legal obligation (accounting and tax records) |
| Keeping the website and our systems secure | Technical and server log data | Legitimate interests (network and information security) |
| Occasional relevant follow-up after an enquiry | Contact details | Legitimate interests (business-to-business communication). You can opt out at any time and every message includes a way to do so |
We do not sell personal data, and we do not use personal data for automated decision-making that produces legal or similarly significant effects about you.
4. Cookies and similar technologies
We keep cookies to a minimum, and we do not use advertising or cross-site tracking cookies. When you first visit the site you are asked whether to allow anything beyond the essentials. Nothing non-essential is loaded until you answer, and you can change your answer at any time using the button below.
| Cookie | Purpose | Consent | Expires |
|---|---|---|---|
aldemis_consent |
Remembers your cookie choice so we do not ask again on every page | Strictly necessary | 6 months |
| Guide download session | Remembers that you completed the guide request form so the download works | Strictly necessary | End of browser session |
_ga, _ga_* |
Google Analytics 4, used to understand how the site is used so we can improve it. Advertising features and Google Signals are not enabled, and we do not use this data to target advertising | Set only if you choose "Accept all" | Up to 2 years |
| Chat assistant storage | Keeps the thread of a conversation with our chat assistant while you use it | Loaded if you choose "Accept all", or when you open the chat yourself | Duration of the conversation |
If you choose "Essential only", analytics is not loaded and any analytics cookies already in your browser for this site are cleared. The chat assistant is not loaded either, but you can still start a chat by clicking the chat button, in which case it loads because you have asked for it.
Two third-party points you should be aware of:
- Fonts. The site loads typefaces from Google Fonts. Your browser requests the font files from Google's servers, which involves Google receiving your IP address. Google states it does not use these requests to set cookies or build profiles.
- Booking. When you follow a booking link you leave this site and use OneCal, which operates under its own privacy and cookie policies.
A note on the law. PECR, as amended by the Data (Use and Access) Act 2025, allows some cookies used solely for statistical purposes to be set without consent where visitors are told clearly and given a simple way to opt out. We have chosen not to rely on that exemption: we ask for consent before setting analytics cookies, which is a higher standard than the exemption requires.
If our cookie use changes. Any new non-essential cookies will be added to the table above and covered by the same consent banner before they are used.
5. Who we share data with
We share personal data only with service providers who help us operate, under contracts that restrict how they may use it:
- Our website hosting provider (server operation and security)
- OneCal (call scheduling)
- Anthropic (the AI provider that powers our website chat assistant and processes chat messages to generate responses)
- Google (font delivery and Google Analytics, as described above)
- Our email, document and business software providers
- Professional advisers (accountants, lawyers, insurers) where necessary
We may also disclose personal data where required by law, or as part of a business reorganisation or transfer, in which case this policy would continue to apply to it.
6. International transfers
Some of our service providers process data outside the UK, including in the United States. Where they do, we rely on safeguards recognised under UK law: the UK's adequacy regulations (including the UK–US Data Bridge for certified US organisations), or the ICO's International Data Transfer Agreement or Addendum, as applicable.
7. How long we keep data
- Enquiries that don't proceed: up to 12 months from our last contact, then deleted.
- Client records: for the duration of the engagement and up to 6 years afterwards, in line with limitation periods and accounting requirements.
- Server logs: retained by our hosting provider for short rolling periods for security purposes.
8. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected and, in certain circumstances, have data erased
- Restrict or object to our processing, including objecting at any time to direct marketing
- Receive data you provided to us in a portable format, where processing is based on contract or consent
- Withdraw consent at any time, where we rely on consent
To exercise any of these rights, email contact@aldemis.com. We will respond within one month, as the law requires, and we will never charge you for a reasonable request.
9. Complaints
If you are unhappy with how we have handled your personal data, you have a statutory right (under section 164A of the Data Protection Act 2018, introduced by the DUAA and in force from 19 June 2026) to complain to us directly. We maintain an internal complaints procedure: we will acknowledge your complaint within 30 days of receiving it, look into it properly, and tell you the outcome without undue delay. Complaints can be made by email to contact@aldemis.com with the subject line "Data protection complaint".
You also have the right to complain to the Information Commissioner's Office (ICO) at any time: ico.org.uk, or by phone on 0303 123 1113. We would, however, welcome the chance to address your concerns first.
10. Security
We apply technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access controls on our systems, and careful selection of service providers. No internet service can be guaranteed absolutely secure, but we take the protection of your data seriously and review our measures regularly.
11. Changes to this policy
We will update this policy when our practices or the law change, and the effective date above will always reflect the current version. Material changes affecting existing clients will be notified directly.