Privacy Policy

1. Who We Are

Albion Legacy Holdings Ltd ("Albion Legacy Holdings", "we", "us", "our") is a private limited company registered in England and Wales. Registered address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

For any data protection matter, contact us at: contact@albionlegacy.com

2. Scope of This Policy

This Privacy Policy explains how we collect, use, and protect personal data when you visit www.albionlegacy.com (the "Website"). It applies to all visitors regardless of location and complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR) where applicable.

3. Data We Collect

We collect minimal data. When you visit our Website, our hosting provider (Vercel Inc.) automatically collects standard server log data, which may include your IP address, browser type, referring URL, and pages visited. This data is collected for security and performance purposes only and is not used for tracking or profiling.

If you contact us via email, we will collect your name and email address for the purpose of responding to your enquiry.

4. Legal Basis for Processing

We process personal data on the following legal bases:

• Legitimate interests (Article 6(1)(f) UK/EU GDPR): server logs for website security and performance. • Contract performance or pre-contractual steps (Article 6(1)(b)): responding to direct enquiries. • Legal obligation: where required by applicable law.

5. Cookies

Our Website uses only technically essential cookies necessary for the Website to function. We do not use analytics cookies, advertising cookies, or any third-party tracking technologies.

Essential cookies used: • Session cookies set by Next.js for page rendering. These are deleted when you close your browser.

No consent is required for strictly necessary cookies under UK PECR and EU ePrivacy rules. You may disable cookies in your browser settings; however, this may affect Website functionality.

6. Data Retention

Server log data is retained for a maximum of 30 days by our hosting provider (Vercel). Email correspondence is retained for as long as necessary to respond to your enquiry and for a maximum of 2 years thereafter, unless a longer retention period is required by law.

7. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We share data only with:

• Vercel Inc. (hosting provider) — located in the United States, processing under Standard Contractual Clauses.

No other third-party processors have access to personal data collected through this Website.

8. International Transfers

Our Website is hosted by Vercel Inc., which may process data in the United States. Such transfers are conducted under appropriate safeguards including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) and the European Commission.

9. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you • Rectify inaccurate data • Request erasure of your data ("right to be forgotten") • Restrict or object to processing • Data portability • Lodge a complaint with the ICO (UK): www.ico.org.uk, or your local EU supervisory authority

To exercise any of these rights, contact us at contact@albionlegacy.com. We will respond within 30 days.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Our Website uses HTTPS encryption for all data in transit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.

12. Contact

Albion Legacy Holdings Ltd 71-75 Shelton Street, Covent Garden London WC2H 9JQ, United Kingdom contact@albionlegacy.com