Privacy policy

Alaco Analytics Limited (Company Number: 11959894) is a subsidiary of Alaco Limited (04369101), registered at 73 Cornhill, London, United Kingdom, EC3V 3QQ.

This Privacy Policy sets out how Alaco Limited (Company number 04369101), with registered office at 73 Cornhill, London, EC3V 3QQ, its subsidiaries and affiliates (further collectively referred to as “Alaco”, “us”, “our” and “we”) collects, stores, uses and otherwise processes the Personal Data (as defined below) of our online and offline visitors and other individuals (each also referred to as “User”, “you” or “your”). We hold such information as a ‘controller’.
Alaco as ‘processor’

This Privacy Policy also explains what information we may hold as a ‘processor’ on behalf of our clients (each a “Client”). As part of our business we compile due diligence, litigation and other reports (“reports”) for our Clients relating to corporates and individuals who our Clients may interact with in the course of their business (“Services”). Such information may sometimes include Personal Data which we process on the instructions of our Clients.
A ‘controller’ is the person who determines what Personal Data is collected, for which purposes and how, whereas, a ‘data processor’ is a person processing Personal Data on behalf of, and in accordance with the instructions of, the controller. For more information about controllers and processors please visit the website of the Information Commissioner’s Office at

What information is collected?
We may collect information about you in our capacity as ‘controller’ if you use our website, webpage or online features (further collectively referred to as, the “Website”) or contact us by e-mail, telephone or post or visit our offices.
The information may include personal identifying information such as your name, e-mail address, phone number, or information that may identify you indirectly or is capable of singling you out such as your employer details, job title and opinions of you, cookie data and other Personal Data (further collectively referred to as “Personal Data”).
We may also compile internal reports about countries, market sectors, businesses and individuals where we anticipate that such information will be useful when we are engaged to provide our Services. Most of the information will be from the public domain and we have implemented research standards designed to identify any information which may be inaccurate. Our internal reports will generally not include contact details of individuals.

Alaco as ‘processor’
We may hold information about the subject matter of our instructions, such as corporate details, names of decision-makers, corporate ownership, directorships, bankruptcy, litigation and other information available in official public records, information from social media, newspapers and other freely available publications, and images, interviews and opinions of sources about the subject matter of our reports. To the extent such information contains Personal Data, we will process it as a ‘processor’ on behalf of our Clients. Such information will generally not include contact details of any individuals. Our reports may from time to time include information about somebody’s health, ethnicity or criminal convictions from the public domain and sources.

Purposes for which we process Personal Data
As ‘controller’ Alaco will only process your Personal Data, in accordance with applicable law, for the following purposes:
• responding to your queries;
• handling any job application that you may make to us;
• engaging in business to business communications with you in your capacity as a representative of a supplier, Client or another party;
• enabling our suppliers and service providers to carry out certain functions on our behalf, including technical aspects of our Website, telecommunications, IT services and other functions;
• sending you personalised marketing communications with your consent or as otherwise permitted by law, subject to your right to opt-out;
• ensuring the security of our business, preventing or detecting fraud or abuses of our Website;
• developing and improving our products and Services, for example, by reviewing visits to our Website and its various subpages to ascertain demand for specific content;
• to comply with the instructions of our Clients and provide the Services; and
• to comply with applicable law, for example reply to a request from a court or regulatory body, where such request is made in accordance with the law.

Alaco as ‘processor’
Generally, information obtained for our Clients may, in combination with other information, help them make informed decisions about their interactions with corporates and individual decision makers. As the ‘controller’, each Client is responsible for informing individuals of the purposes for which their Personal Data are processed. Generally, our Clients will use Personal Data processed as part of the Services for due diligence and litigation purposes.

As ‘controller’ we rely on various legal grounds to process your Personal Data. Where required by law, we will obtain your consent. However, most of our processing is necessary:
• to fulfil a contract that we may have in place with you;
• for Alaco’s legitimate business interest in providing, monitoring and ensuring the efficiency and security of our Website and Services; or
• for compliance with a legal obligation to which Alaco is subject.

We compile internal reports on the basis of our legitimate interest to provide a service that enables our Clients to fulfil their legal or compliance obligation to detect and prevent fraud, dishonesty or similar acts and to protect the public from such acts. Where we collect information about somebody’s health, ethnicity or criminal convictions, we do so on the basis that such information has been made manifestly public.

Alaco as ‘processor’
Where we act as ‘processor’, our Clients as ‘controllers’ will establish the legal basis for the processing of your Personal Data, such as your consent, a contract, a legal obligation or authorisation by law or another legal basis such as legitimate interest.