How Alkemi Cellar collects, uses and protects your data. The full policy is maintained with iubenda so it’s always current.
Plain-language summary. The full legal text is on iubenda and takes precedence. Highlighted items in [brackets] are still to be confirmed.
- 01
Who we are
Alkemi Cellar is a digital asset library for food, drink and lifestyle brands. It is run by [Company legal name], registered at [Registered address].
This policy explains what personal data we handle when you visit our site or use the library, why we handle it and the choices you have. We aim to follow the GDPR in everything we do.
- 02
Data we collect
We only collect what we need to run the library well:
- Account details, such as your name, work email, company and role.
- Your files and their details: the assets you upload, their metadata and their version history.
- Activity in the library, such as sign-ins, shares and downloads, so you can see who used what.
- Technical data, such as your browser and device, and cookies (see our cookie policy).
- Messages you send us, for example to support.
- 03
How we use your data
We use your data to:
- provide the library and keep it secure;
- show download tracking and sharing activity to your team;
- file your uploads under your own categories using AI services from third-party providers [e.g. OpenAI, Google: confirm the list and their data terms];
- reply to you and send essential service messages;
- understand how the site is used and improve it, where you have agreed to this.
- 04
Legal bases for processing
Under the GDPR we need a lawful reason for each use of your data. Most of the time this is because we need it to provide the service you or your company signed up for.
Other reasons include our legitimate interests (such as keeping the service secure), your consent (for example for non-essential cookies, which you can withdraw at any time) and legal obligations we must meet. The full policy sets out which basis applies to each use.
- 05
Sharing and service providers
We don’t sell your data. Nothing in the library is public by default: you decide who sees each file, from private to anyone with the link. Partners can view links you share with them without an account, and you can set links to expire or revoke access at any time.
We work with a small number of trusted providers, for example for hosting, email and AI processing, under contracts that protect your data. [Sub-processor list: see full policy]
- 06
International transfers
Your data is hosted in the EU.
Some providers, including AI services, may process data outside the EU; we only allow this with safeguards recognised under the GDPR. [Transfer details: see full policy]
- 07
How long we keep data
We keep personal data only for as long as we need it for the reasons above, or as long as the law requires. Your files and their version history stay in your library until you or your company delete them or the account closes.
[Retention periods: see full policy]
- 08
Your rights
Under the GDPR you can:
- see the personal data we hold about you and get a copy;
- ask us to correct it or delete it;
- object to or limit how we use it;
- take your data to another provider;
- withdraw consent at any time, where we rely on it.
To use any of these rights, email support@alkemi.com. You can also complain to your local data protection authority.
- 09
Contact us
Questions about your data or this policy? Email support@alkemi.com and we’ll get back to you.
Postal address: [Company legal name], [Registered address]. [Data protection contact: confirm if one is appointed]