This policy explains how BetterAlta collects, uses, shares and protects personal data, and the rights you have over your information. We handle personal data in line with the UK GDPR and the Data Protection Act 2018.
On this page
01Who we are
BetterAlta Ltd ("BetterAlta", "we", "us") is the data controller responsible for your personal data. We are a company registered in England & Wales under company number 16885615, with our registered office at 15a Electric Lane, London, SW9 8LA.
For any privacy question, or to exercise your rights, contact us at hello@betteralta.com (marked "Data Protection").
02The data we collect
We only collect what we need to respond to you and deliver our advisory services. Depending on how you interact with us, this may include:
- Identity & contact data — name, job title, company, email address, phone number.
- Enquiry data — the information you provide in our contact form, Supplier Vault enquiries, or by email, including details of what you are looking to source.
- Engagement data — information exchanged during an advisory engagement, such as requirements, specifications and correspondence.
- Technical data — IP address, browser type, device information, and pages visited, collected through cookies and similar technologies (see our Cookie Policy).
We do not handle payment or banking data. Consistent with our advisory-only model, BetterAlta does not collect, request, process or store client or supplier bank details. All payments are made directly between our clients and their chosen suppliers.
03How we use your data
We use personal data to:
- respond to enquiries and provide the information you ask for;
- scope, deliver and administer sourcing-led advisory engagements;
- manage our relationship with you and keep records of our work, including audit packs;
- improve our website and services;
- send relevant updates where you have asked to receive them; and
- meet our legal, regulatory and quality-management obligations.
04Our lawful bases
Under the UK GDPR we rely on the following lawful bases:
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and pre-engagement discussions | Legitimate interests / steps prior to entering a contract |
| Delivering an agreed advisory engagement | Performance of a contract |
| Marketing updates and newsletters | Consent (which you can withdraw at any time) |
| Analytics cookies | Consent |
| Record-keeping, security and legal compliance | Legal obligation / legitimate interests |
Where we rely on legitimate interests, that interest is running and growing our advisory business while respecting your rights and expectations.
05Who we share your data with
We do not sell your personal data. We may share it with:
- Service providers who support our operations — for example secure cloud hosting, Microsoft 365, our CRM, and website infrastructure — under contracts that require them to protect your data.
- Suppliers and partners, only where relevant to an engagement and only to the extent needed to progress your requirement. Supplier identities are protected in our Supplier Vault and disclosed to you at the appropriate stage of the engagement.
- Professional advisers and authorities where we are required to do so by law.
06International transfers
Some of our providers may process data outside the UK. Where they do, we make sure appropriate safeguards are in place — such as an adequacy decision, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum — so your data receives an equivalent level of protection.
07How long we keep it
We keep personal data only for as long as we need it for the purposes above, then delete or anonymise it. In general we retain enquiry data for up to 24 months and engagement records for up to 6 years to meet our legal, accounting and quality-management obligations.
08How we protect your data
We apply appropriate technical and organisational measures to keep personal data secure, including access controls, encryption in transit, secured cloud environments and staff confidentiality obligations. Our processes are managed under an ISO 9001:2015-aligned quality framework. Our contact and Supplier Vault forms use anti-spam protection and rate limiting.
09Your rights
Under UK data protection law you have the right to:
Be informed
Know how your data is used — this policy sets that out.
Access
Request a copy of the personal data we hold about you.
Rectification
Have inaccurate or incomplete data corrected.
Erasure
Ask us to delete your data in certain circumstances.
Restriction
Ask us to limit how we use your data.
Portability
Receive your data in a portable format.
Object
Object to processing based on legitimate interests or to direct marketing.
Withdraw consent
Withdraw consent at any time, without affecting prior processing.
To exercise any right, email hello@betteralta.com. We will respond within one month. If you are unhappy with how we have handled your data, you can complain to the ICO at ico.org.uk or on 0303 123 1113 — though we would welcome the chance to resolve it with you first.
10Cookies
This website uses cookies. Essential cookies keep the site working; analytics cookies are only set with your consent. Full details are in our Cookie Policy.
11Changes to this policy
We may update this policy from time to time. The version and effective date at the top show when it last changed. Material changes will be highlighted on this page.
This document forms part of BetterAlta's governance framework and is reviewed under our ISO 9001:2015-aligned document control process.