Effective 19 July 2026
Who we are
BetterAlta Ltd ("BetterAlta", "we", "us") is the data controller responsible for your personal data. We are a company registered in England & Wales under company number 16885615, with our registered office at 15a Electric Lane, London, SW9 8LA.
For any privacy question, or to exercise your rights, contact us at hello@betteralta.com (marked "Data Protection").
The data we collect
We only collect what we need to respond to you and deliver our advisory services. Depending on how you interact with us, this may include:
- Identity & contact data: name, job title, company, email address, phone number.
- Enquiry data: the information you provide in our contact form, Supplier Register enquiries, or by email, including details of what you are looking to source.
- Engagement data: information exchanged during an advisory engagement, such as requirements, specifications and correspondence.
- Technical data: IP address, browser type, device information, and pages visited, collected through cookies and similar technologies (see our Cookie Policy).
We do not handle payment or banking data. Consistent with our advisory-only model, BetterAlta does not collect, request, process or store client or supplier bank details. All payments are made directly between our clients and their chosen suppliers.
How we use your data
We use personal data to:
- respond to enquiries and provide the information you ask for;
- scope, deliver and administer sourcing-led advisory engagements;
- manage our relationship with you and keep records of our work, including audit packs;
- improve our website and services; and
- meet our legal, regulatory and quality-management obligations.
Our lawful bases
Under the UK GDPR we rely on the following lawful bases:
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and pre-engagement discussions | Legitimate interests / steps prior to entering a contract |
| Delivering an agreed advisory engagement | Performance of a contract |
| Analytics cookies | Consent |
| Record-keeping, security and legal compliance | Legal obligation / legitimate interests |
Where we rely on legitimate interests, that interest is running and growing our advisory business while respecting your rights and expectations.
Who we share your data with
We do not sell your personal data. We may share it with:
- Service providers who support our operations, for example secure cloud hosting, Microsoft 365 and website infrastructure, under contracts that require them to protect your data.
- Suppliers and partners, only where relevant to an engagement and only to the extent needed to progress your requirement. Supplier identities are protected in our Supplier Register and disclosed to you at the appropriate stage of the engagement.
- Professional advisers and authorities where we are required to do so by law.
International transfers
Some of our providers may process data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as an adequacy decision, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum, so your data receives an equivalent level of protection.
How long we keep it
We keep personal data only for as long as we need it for the purposes above, then delete or anonymise it. In general we retain enquiry data for up to 24 months and engagement records for up to 6 years to meet our legal, accounting and quality-management obligations.
How we protect your data
We apply appropriate technical and organisational measures to keep personal data secure, including access controls, encryption in transit, secured cloud environments and staff confidentiality obligations. Our contact and Supplier Register forms use anti-spam protection and rate limiting.
Your rights
Under UK data protection law you have the right to:
- Be informed Know how your data is used. This policy sets that out.
- Access Request a copy of the personal data we hold about you.
- Rectification Have inaccurate or incomplete data corrected.
- Erasure Ask us to delete your data in certain circumstances.
- Restriction Ask us to limit how we use your data.
- Portability Receive your data in a portable format.
- Object Object to processing based on legitimate interests or to direct marketing.
- Withdraw consent Withdraw consent at any time, without affecting prior processing.
To exercise any right, email hello@betteralta.com. We will respond within one month. If you are unhappy with how we have handled your data, you can complain to the ICO at ico.org.uk or on 0303 123 1113, though we would welcome the chance to resolve it with you first.
Cookies
This website uses cookies. Essential cookies keep the site working; analytics cookies are only set with your consent. Full details are in our Cookie Policy.
Changes to this policy
We may update this policy from time to time. The version and effective date at the top show when it last changed. Material changes will be highlighted on this page.
This document forms part of BetterAlta's governance framework and is reviewed under BetterAlta's document control process.