Privacy Notice

Who we are

A-Davis Solutions Ltd ("we", "us", "our") is the data controller responsible for the personal data processed through AliraProject. We are committed to protecting your privacy and handling your data responsibly.

Data you upload: you are the Data Controller

You retain exclusive ownership of all information you upload to, or create within, AliraProject ("Customer Data"). Where that data includes personal data about other people — your colleagues, contractors, stakeholders, clients or their customers — you are the Data Controller for it, and A-Davis Solutions Ltd acts only as your Data Processor. We process it on your instructions and solely to provide the Service.

You are entirely responsible for ensuring your data content complies with applicable law before hosting it with us. That includes having a lawful basis for the processing, informing the individuals concerned, responding to their data subject rights requests, and deciding whether data should be uploaded in identifiable or anonymised form.

Sensitive and special category data. AliraProject is a project and portfolio management tool — it is not a clinical, patient records, or health information system. Please do not upload special category data (for example patient or health details, biometric data, or criminal offence data) unless you have confirmed it is lawful for you to do so and have completed any required Data Protection Impact Assessment. Where possible, anonymise or pseudonymise such data before uploading it, and use our role, project and tab-level permissions to limit who can see it. If you need a written Data Processing Agreement, contact us at Contact@adavissolutions.com.

We never sell Customer Data, and we do not use it to train AI models. The rest of this notice describes the personal data we process as a controller in our own right — that is, data about you as our customer and account holder.

What personal data we collect

We may collect and process the following categories of data:

• Identity and contact data — name, email address, company name, job role, and phone number.
• Account data — login credentials, account settings, and user preferences.
• Usage data — activity logs, feature usage, project data you create, and interactions with the Service.
• Technical data — IP address, browser type and version, device information, and cookies or similar technologies.
• Communications — support messages, feedback, and correspondence.

How we use your data

We use your personal data for the following purposes:

• to create and manage your account and provide the Service;
• to process payments, subscriptions, and billing;
• to provide customer support and respond to enquiries;
• to maintain security, prevent fraud, and protect the Service;
• to understand how the Service is used and improve our product; and
• to send service-related notifications and, where permitted, marketing updates.

Legal basis for processing

We process personal data on the basis of: (a) performance of our contract with you; (b) our legitimate interests in operating and improving the Service; (c) compliance with legal obligations; and (d) consent, where you have provided it (for example, for marketing communications or non-essential cookies).

Who we share data with

We only share personal data where necessary and in accordance with this Privacy Notice. Categories of recipients include:

• Service providers — hosting, cloud infrastructure, analytics, email delivery, and customer support tooling.
• Paddle — our Merchant of Record, who processes payments, subscription management, tax compliance, and invoicing on our behalf.
• Professional advisers — legal, accounting, and insurance providers where required.
• Authorities — regulators or law enforcement where required by law or to protect our rights.

International transfers

Your data is primarily stored and processed within the United Kingdom and European Economic Area. Where we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data.

Data retention

We keep personal data for as long as necessary to fulfil the purposes described in this notice, including for legal, accounting, and reporting obligations. When data is no longer needed, we will delete or anonymise it securely.

Your rights

Under UK and EEA data protection law, you have the right to access, correct, erase, restrict, or port your personal data, and to object to or withdraw consent for certain processing. You also have the right to complain to your supervisory authority. We will respond to requests within one month.

To exercise your rights, contact us at Contact@adavissolutions.com.

Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. No online service can be completely secure, and we cannot guarantee absolute security.

Cookies

We use essential cookies to make the Service work, and analytics or preference cookies where permitted. You can manage cookie preferences through your browser settings.

Changes to this notice

We may update this Privacy Notice from time to time. We will notify you of material changes through the Service or by email.

Contact

If you have any questions about this Privacy Notice or how we handle your data, please contact us at Contact@adavissolutions.com.