Legal
Privacy notice
What we collect, why, how long we keep it, and how to make us delete it.
- Who we are
- ATHLAZ Limited, a company registered in England and Wales, company number 16357048, registered office 63 Lymbridge Drive, Blackrod, Bolton, England, BL6 5TH, VAT number GB502638903. We are the controller of the personal data described here. Write to info@athlaz.com about anything on this page.
- When you visit
- Our server records each request: the page asked for, the technical details a browser sends, the IP address and the approximate location it implies. Cloudflare, Inc., which hosts the site, keeps these records for 3 days, for security and to keep the site running. Cloudflare also counts visits for us through Cloudflare Web Analytics, which sets no cookies and stores nothing on your device. Separately, our own count of visits to some pages, such as the industry, security, licensing and headroom pages, records the country and the organisation that owns the network, for statistics only, without cookies and without storing your IP address. To object to this counting, write to info@athlaz.com. For our own count, tell us the organisation whose network you use and we will stop counting visits from it. The site's fonts load from Google Fonts, so your browser shares your IP address with Google when a page opens. We do not sell data and we do not run advertising.
- When you write to us
- Your name, your email address, your organisation if you give it, the topic you choose and the message you write, together with the page you sent it from. The enquiry also notes how you arrived: the site that sent you to us, any campaign tag in the link you followed, and the page you first opened. The site holds that only while the page is open, never in a cookie or in browser storage. If a form fails to send, the page tells our server which form failed and why, and nothing you typed. We use what you send to reply to you and to keep a record of the conversation in our customer relationship system, HubSpot, hosted in the European Union. We do not add you to a mailing list and we do not sell your details. We pass them to nobody else, with one exception, which is the headroom instrument on a partner's own website, set out below. Our lawful basis is our legitimate interest in answering an enquiry you have made.
- The headroom instrument
- Figures you set on the headroom instrument are computed in your browser. Unless you have accepted analytics cookies, they go nowhere while you use it. If you have, the session recording shows the page as you see it, with form fields masked. If you ask us for the assessment, we keep your email address, the figures you had set at that moment, and a record that we sent it, so that the person preparing the assessment can see what you saw. A link that reopens those figures is yours to share or not; it is not listed anywhere. When such a link is opened, our server counts that a reading was reopened and never reads the figures in it, and the page takes the figures out of the address bar before any analytics or marketing tool starts, so no such tool receives them from the address. The instrument's Copy link button still gives you the whole link. Where you use the instrument on a partner's own website, the line above the send button names that partner when your reading goes to them as well as to us: your name, work email, organisation, role and that reading. Where it names nobody, ATHLAZ alone receives it. Our lawful basis is our legitimate interest, and theirs, in answering an enquiry made through their own page. Write to info@athlaz.comand we will tell you who received it, ask them to delete it, or keep the next one to ATHLAZ.
- Where it is held and who sees it
- Enquiries are held in HubSpot's European Union data centres. If you accept analytics cookies, Amplitude, Inc. holds what it collects on our behalf in its United States data centre, including your IP address and the approximate location (country and city) it estimates from that address. The transfer to the United States relies on the UK Extension to the EU-US Data Privacy Framework, under which Amplitude, Inc. is certified. Amplitude's data processing terms include the UK Addendum to the standard contractual clauses as the fallback. The people who read and answer enquiries work for ATHLAZ Limited in the United Kingdom and South Africa. Where one of them reads your details from outside the United Kingdom, we do so under the safeguards UK data protection law requires for an international transfer. A reading sent from a partner's page also reaches us as an email, sent through Cloudflare from our own domain to our Google Workspace mailbox, and to that partner where the line above the send button named one. That mailbox copy is deleted on the same schedule as the enquiry itself. If you accept Marketing, the pages you visit on this site also go, on your consent, to HubSpot, Inc., through its tracking code.
- Proof of concept and licence customers
- When we work with your organisation we hold the business contact details of the people we deal with, the correspondence, and the technical telemetry the engagement produces. Telemetry describes machines, not people. The engagement agreement sets out what is collected and for how long.
- How long we keep it
- Contact records for two years after the last exchange, then deleted, unless the conversation has become a contract, in which case commercial records are kept for the period the law requires. Enquiries that go nowhere are deleted after two years.
- Your rights
- You can ask what we hold about you, ask us to correct it, ask us to delete it, object to our using it, and ask for a copy of it. Write to info@athlaz.com and we will answer your request as UK data protection law requires. You can also complain to the Information Commissioner's Office at ico.org.uk.
- Changes
- We date this page when it changes.
Last updated: 22 September 2026