Legal
Privacy notice
What we collect, why, how long we keep it, and how to make us delete it.
- Who we are
- ATHLAZ Limited, a company registered in England and Wales, company number 16357048, registered office 63 Lymbridge Drive, Blackrod, Bolton, England, BL6 5TH, VAT number GB502638903. We are the controller of the personal data described here. Write to info@athlaz.com about anything on this page.
- When you visit
- Our server records the pages requested and the technical information a browser sends, such as the browser type and the time of the request. We use it to keep the site working and to understand which pages are read. Cloudflare, Inc. also counts visits for us through Cloudflare Web Analytics, which sets no cookies and stores nothing on your device. Our server also counts visits to some pages, such as the industry, security, licensing and headroom pages, by country and by the organisation that owns the network the visit came from. It does this for statistics only, without cookies and without keeping your IP address. To object to this counting, write to info@athlaz.com. For our own count, tell us the organisation whose network you use and we will stop counting visits from it. The site's fonts load from Google Fonts, so your browser shares your IP address with Google when a page opens. We do not sell data and we do not run advertising.
- Cookies
- This site sets no cookies unless you allow Amplitude analytics, which is off until you do. If you allow it, Amplitude, Inc. collects page views, clicks and session recordings with form fields masked, to show us how the site is used. Amplitude sets its own cookies and browser storage to do that. Our lawful basis is your consent. Your choice is kept in your browser, so the site does not ask again. The forms send what you type to our customer relationship system without setting a cookie. You can change your choice at any time.
- When you write to us
- Your name, your email address, your organisation if you give it, the topic you choose and the message you write, together with the page you sent it from. The enquiry also notes how you arrived: the site that sent you to us, any campaign tag in the link you followed, and the page you first opened. The site holds that only while the page is open, never in a cookie or in browser storage. If a form fails to send, the page tells our server which form failed and why, and nothing you typed. We use what you send to reply to you and to keep a record of the conversation in our customer relationship system, HubSpot, hosted in the European Union. We do not add you to a mailing list and we do not pass your details to anyone else. Our lawful basis is our legitimate interest in answering an enquiry you have made.
- The headroom instrument
- Figures you set on the headroom instrument are computed in your browser. Unless you have allowed Amplitude analytics, they go nowhere while you use it. If you have, the session recording shows the page as you see it, with form fields masked. If you ask us for the assessment, we keep your email address, the figures you had set at that moment, and a record that we sent it, so that the person preparing the assessment can see what you saw. A link that reopens those figures is yours to share or not; it is not listed anywhere. When such a link is opened, our server counts that a reading was reopened and never reads the figures in it.
- Where it is held and who sees it
- Enquiries are held in HubSpot's European Union data centres. What Amplitude collects, if you allow analytics, is held by Amplitude, Inc. on our behalf. The people who read and answer enquiries work for ATHLAZ Limited in the United Kingdom and South Africa. Where one of them reads your details from outside the United Kingdom, we do so under the safeguards UK data protection law requires for an international transfer.
- Proof of concept and licence customers
- When we work with your organisation we hold the business contact details of the people we deal with, the correspondence, and the technical telemetry the engagement produces. Telemetry describes machines, not people. The engagement agreement sets out what is collected and for how long.
- How long we keep it
- Contact records for two years after the last exchange, then deleted, unless the conversation has become a contract, in which case commercial records are kept for the period the law requires. Enquiries that go nowhere are deleted after two years.
- Your rights
- You can ask what we hold about you, ask us to correct it, ask us to delete it, object to our using it, and ask for a copy of it. Write to info@athlaz.com and we will respond within a month. You can also complain to the Information Commissioner's Office at ico.org.uk.
- Changes
- We date this page when it changes.
Last updated: 14 September 2026