Legal
Privacy Policy
Last updated: 20 August 2026
This notice explains how Alacrix handles personal information collected through alacrix.ai and through business enquiries and correspondence with us. It covers the website and our pre-contract discussions. It does not replace the privacy terms agreed within a client engagement.
01
Who we are
Alacrix operates alacrix.ai and provides AI governance and implementation consultancy services to law firms and accountancy practices.
For personal information collected through this website and through direct enquiries, Alacrix acts as the controller. If you have a question about this notice or about how we handle your information, contact tracy.gabriels@alacrix.ai.
02
Information we collect
Information you give us. When you submit the enquiry form on this website, or contact us by email, we collect:
- your name
- your work email address
- your firm or organisation
- your role
- your sector
- an optional timeframe
- the content of your enquiry or message
- any correspondence that follows your enquiry
Technical information processed by our infrastructure. When you access the website, standard technical information may be processed by our hosting, delivery and security infrastructure. This can include IP address, browser and device information, and request or security logs. This processing happens because it is necessary to deliver the website and keep it secure. We do not use it to build marketing profiles of visitors.
03
How we use information and our lawful bases
We use personal information for the purposes set out below. In each case we rely on the lawful basis described.
| Purpose | Lawful basis | Information used |
|---|---|---|
| Responding to enquiries and discussing potential services | Steps taken at your request before entering into a contract, and our legitimate interests in responding to business enquiries | Name, work email, firm, role, sector, timeframe, enquiry content |
| Preparing scopes and proposals, and managing pre-contract discussions | Steps taken at your request before entering into a contract, and our legitimate interests in developing the consultancy | Contact details and correspondence |
| Delivering services where a relationship is established | Performance of a contract, or our legitimate interests where the contract is with your organisation rather than you personally | Contact details and engagement correspondence |
| Keeping appropriate business and correspondence records | Our legitimate interests in maintaining accurate records, and legal obligations where they apply | Correspondence and engagement records |
| Maintaining website security and preventing misuse | Our legitimate interests in protecting the website and the business | Technical and security log information |
| Complying with legal obligations, and establishing, exercising or defending legal claims | Legal obligation where applicable, and our legitimate interests in protecting our legal position | Any of the above where necessary |
Consent is not the default lawful basis for handling an ordinary business enquiry. Where we do rely on consent for a specific purpose, we will make that clear at the point we ask for it.
Where we rely on legitimate interests, those interests include operating and developing the consultancy, responding to business enquiries, maintaining appropriate records, and protecting the website and the business. We balance those interests against the rights, freedoms and reasonable expectations of the people concerned.
04
Marketing
Submitting an enquiry does not automatically subscribe you to a marketing list. We do not currently operate a newsletter.
If we later send direct marketing, we will do so only where permitted under applicable law and we will provide a clear way to opt out in every message.
06
International transfers
Some of the technology suppliers we use may process personal information outside the United Kingdom. Where UK data protection law requires safeguards for a transfer, we will rely on an applicable lawful transfer mechanism or safeguard for that transfer. If you would like more detail about the arrangements that apply to your information, contact tracy.gabriels@alacrix.ai.
07
Retention
We keep personal information only for as long as is reasonably necessary for the purpose for which it was collected. That includes responding to your enquiry, maintaining business and correspondence records, meeting legal and accounting obligations, and handling or defending claims.
How long that is depends on the nature of the information, the relationship between us and any legal requirements that apply. When information is no longer needed, we delete it or put it beyond ordinary use.
08
Your rights
Depending on the circumstances, you may have rights in relation to your personal information, including the right to:
- ask for access to the personal information we hold about you
- ask us to correct information that is inaccurate or incomplete
- ask us to delete information where there is no continuing reason to keep it
- ask us to restrict how we use your information
- object to processing based on our legitimate interests
- ask for portability of information you provided to us
- withdraw consent where a specific processing activity actually relies on consent
Your right to object
Where we rely on legitimate interests, you can object to that processing. We will stop unless we have compelling legitimate grounds to continue or the processing is needed for legal claims.
To make a request, email tracy.gabriels@alacrix.ai. We may need to confirm your identity before we act on a request.
09
Complaints
If you are concerned about how we have handled your personal information, please raise it with us first at tracy.gabriels@alacrix.ai so we can look into it. You also have the right to complain to the UK Information Commissioner’s Office. You can find out how at ico.org.uk/make-a-complaint.
11
Third-party links
This website links to third-party sites, including the regulators, professional bodies and authoritative sources cited on our Insights page. Those sites are operated by third parties and their privacy practices are outside our control. We recommend reading the privacy notice of any site you visit.
12
Changes to this policy
We may update this notice as our services, our website technology or the legal requirements that apply to us change. When we do, we will revise the Last updated date at the top of this page.
13
Contact
For any question about this notice, or to exercise a right, contact tracy.gabriels@alacrix.ai.
For the terms that govern use of this website, see our Terms of Use.