Privacy Policy

At Alpha CRC, we are committed to protecting the privacy and security of the personal information you share with us. This Privacy Policy outlines how we collect, use, and safeguard the contact details of our prospects and clients.

1. Information We Collect

We collect personal information that you provide directly to us, or by you visiting our website or that we obtain through our professional interactions. This typically includes:

Contact Information: Name, job title, company name, email address, phone number, and physical business address.
Communication Records: Information regarding your interactions with us, such as email correspondence, meeting notes, and feedback.
Business Details: Information necessary to provide our services, such as billing details, project requirements, or contract information.

When we collect and store data on potential customers (prospects), we use legitimate interest for activities that are necessary for our business development. We ensure this is handled responsibly by following these principles:

Transparency: Even when relying on legitimate interest, we ensure that prospects are informed. Our privacy notice clearly explains that we collect and process contact information (such as name, job title, and professional email) for the purpose of business-to-business (B2B) communications.
Data Minimization: We only collect data that is strictly relevant to our professional outreach. This typically includes business contact details obtained through public sources (like LinkedIn or company websites) or legitimate third-party lead generation providers. We do not process sensitive personal data under this basis.
The “Reasonable Expectation” Standard: We consider whether a professional in a specific industry would reasonably expect to be contacted by us regarding products or services relevant to their job role. If the outreach is relevant to their professional responsibilities, the risk to their privacy is generally considered low.
The Right to Object (Opt-Out): One of the most critical aspects of relying on legitimate interest is the absolute right for the prospect to object. We ensure that:
- Every communication contains a clear, easy-to-use opt-out mechanism (e.g., an unsubscribe link).
- When a prospect objects, we immediately stop processing their data for marketing purposes and place them on a suppression list to ensure they are not contacted again.

Why We Use This Basis

We use legitimate interest rather than consent for initial B2B prospecting because:

Consent is impractical for initial outreach: Asking for consent to send an introductory email is generally not feasible before you have established a relationship.
It reflects B2B norms: In many jurisdictions, B2B marketing is permitted under legitimate interest provided the communication is relevant and an opt-out is provided.

To remain compliant, we maintain an internal record of our Legitimate Interests Assessment for each prospecting activity. This document serves as our “evidence” for regulators that we have thoughtfully considered the impact of our processing on the individuals involved.

2. How We Use Your Information

We use the information we collect for the following business purposes:

Communication: To respond to your inquiries, provide requested information, and maintain our professional relationship.
Service Delivery: To provide the services or products you have engaged us to perform.
Marketing and Business Development: To send you updates, newsletters, or information about services that may be relevant to your business (where permitted by law).
Compliance and Operations: To manage billing, fulfill contractual obligations, and comply with legal requirements.

3. How We Protect Your Information

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. These measures include:

Restricting access to your information to authorized personnel who need it to perform their jobs.
Using secure servers and encryption technologies to protect data transmission and storage.
Regularly reviewing our data collection, storage, and processing practices.

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: We may engage trusted third-party service providers (e.g., CRM software providers, email marketing platforms, cloud storage services) to assist us in our business operations. These providers are contractually obligated to protect your data.
Legal Obligations: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court order).
Business Transfers: If we undergo a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Your Rights

Depending on your location, you may have certain rights regarding your personal information, such as:

The right to access the personal information we hold about you.
The right to request the correction of inaccurate or incomplete information.
The right to request the deletion of your information (subject to legal obligations).
The right to opt-out of marketing communications at any time.

To exercise these rights, please contact our Data Protection Officer at dio@alphacrc.com

6. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website or by contacting you directly.

7. Contact Us

If you have questions or concerns about this privacy policy or our data practices, please contact us at:

Alpha CRC
Address: Radio House, St Andrews Road, Cambridge CB4 1DL
Email: dio@alphacrc.com