1. Scope, controller and service roles
This Notice applies to personal information processed by Downton Group Ltd. in connection with the alpha-max website, public product pages, resource downloads, contact forms, demo requests, business development conversations, marketing communications, recruitment or supplier enquiries, and other online materials that link to this Notice.
For those activities, Downton Group Ltd. usually acts as the controller, meaning we decide why and how the information is used. When a customer uses the alpha-max platform to process order, product, inventory, warehouse, shipping, label, printing, automation or integration data, Downton Group Ltd. may act as a processor or service provider for that customer. In that case, processing is governed by the applicable customer agreement, data processing addendum and customer instructions rather than this website notice alone.
This Notice does not replace any privacy notice provided by an ecommerce platform, logistics partner, carrier, warehouse provider, payment provider, accounting tool, support provider or other third-party service that your organisation connects to alpha-max.
2. Information we collect
The information we collect depends on how you interact with alpha-max. It may include business contact details such as name, company name, job title, work email address, phone number, region, preferred language, organisation size, role, department and communication preferences.
If you request a demo, submit a contact form, ask for support or discuss implementation, we may collect information about your current operations, ecommerce platforms, warehouse processes, logistics partners, printing needs, automation goals, integration priorities, expected order volume, user roles, technical constraints and procurement timeline.
When you use the website, we may collect technical and usage information such as IP address, approximate location derived from IP address, device type, browser type, operating system, referring page, pages viewed, links clicked, session timing, cookie identifiers, form events, download activity, error logs and security signals.
If access to a customer portal, demo environment, support workspace or account area is provided, we may collect login identifiers, authentication events, user permissions, audit logs, configuration history, support correspondence and activity needed to operate, secure and improve that environment.
We do not intentionally ask for sensitive personal data through general website forms. Please do not submit payment card details, passwords, private keys, government identifiers, health data, biometric data, special-category information, customer secrets or regulated information unless alpha-max has specifically requested it through an approved secure process.
3. Sources of information
We collect information directly from you when you complete a form, request a demo, email us, speak with our team, join a meeting, subscribe to updates, use a portal, provide feedback or otherwise communicate with alpha-max.
We may receive information from your colleagues, employer, authorised representatives, implementation partners, resellers, consultants, technology partners or service providers when they introduce you, involve you in an evaluation, configure access or share information needed for a legitimate business conversation.
We may collect information automatically through cookies, analytics tools, security logs, server logs and similar technologies. We may also receive limited business information from trusted third-party sources where permitted, such as company websites, professional databases, event attendee lists, partner referrals or publicly available business profiles.
4. How we use information
We use personal information to operate the website, respond to enquiries, schedule demos, provide requested materials, assess whether alpha-max may fit your organisation, prepare product discussions, answer questions, maintain business records and follow up on legitimate commercial conversations.
We may use information to administer accounts, manage portal access, authenticate users, provide support, troubleshoot issues, investigate incidents, configure demos, document requirements, improve onboarding workflows and support customer success activities under the relevant customer relationship.
We may also use information to improve alpha-max, understand website performance, measure marketing effectiveness, develop new features, test product messaging, maintain security, prevent fraud or misuse, comply with legal obligations, establish or defend legal claims, and conduct internal reporting.
Where permitted, we may use business contact information to send product updates, event invitations, educational content, release information, integration news or other communications that may be relevant to ecommerce operations teams. You can opt out of non-essential marketing communications at any time.
5. Legal bases for processing
Where UK, EEA or similar data protection laws apply, we rely on one or more legal bases depending on the context. These may include legitimate interests, contract performance, steps taken before entering into a contract, legal obligations and consent.
Our legitimate interests include operating a B2B website, responding to business enquiries, protecting the website, improving alpha-max, communicating with product evaluators, maintaining customer and partner relationships, preventing misuse, and understanding how our services are used. We balance those interests against individual rights and expectations.
We rely on contract-related bases where processing is necessary to provide requested services, administer customer access, support customer teams or perform obligations under a signed agreement. We rely on legal obligations where processing is needed for tax, accounting, corporate, security, regulatory or dispute-related requirements.
Where consent is required for a specific activity, such as certain cookies, direct marketing or optional communications in particular jurisdictions, we will request consent and provide a way to withdraw it.
8. Integrations, partners and connected services
When your organisation connects alpha-max to ecommerce platforms, logistics partners, warehouse systems, label services, carrier networks, finance tools, support systems or other services, information may be exchanged between alpha-max and those connected services to provide the requested workflow.
Connected services may receive order, product, inventory, shipment, label, address, tracking, user, configuration or event information depending on the integration and your settings. Each connected service may have its own privacy notice, security practices, API limits, account requirements, retention rules and support process.
Your organisation controls which services it connects and which permissions it grants. You should review third-party policies and permissions before enabling integrations, and remove credentials or access tokens when an integration is no longer needed.
9. Cookies and similar technologies
We may use cookies, pixels, local storage, session storage, analytics tags and similar technologies to operate the website, remember preferences, understand traffic patterns, improve page performance, detect abuse, measure campaigns and support user experience.
Cookies may be grouped into categories such as strictly necessary cookies, preference cookies, performance or analytics cookies, and marketing or targeting cookies. Strictly necessary cookies help the website load, maintain security and support basic functionality. Optional cookies may be used only where permitted by law and by your preferences.
You can control cookies through your browser settings and, where available, our cookie banner or preference centre. Blocking certain cookies may affect website performance, saved preferences, analytics accuracy or some interactive features.
We may use aggregated or de-identified analytics to understand how visitors move through the website. We do not attempt to use website analytics to identify individuals unless needed for security, fraud prevention, support or legal compliance.
10. Automation, analytics and AI-assisted processing
We may use automation, analytics or AI-assisted tools to help protect systems, route enquiries, summarise support context, identify unusual activity, improve internal processes, prioritise follow-up and understand product usage patterns.
We do not use website enquiry data to make decisions that produce legal or similarly significant effects about individuals without providing any rights required by applicable law. Where AI-assisted tools are used, we aim to apply reasonable safeguards, access controls and human review appropriate to the context.
We do not permit unrelated third parties to use personal information from alpha-max customer operations to train their own general AI models unless a customer agreement or applicable law allows it with appropriate safeguards.
11. How we share information
We may share personal information with personnel, affiliates, contractors, professional advisers, hosting providers, analytics providers, communication tools, CRM systems, support platforms, security providers, payment or billing providers, implementation partners, integration partners and other service providers who help us operate alpha-max and the website.
We may share information with connected services at your organisation's direction, with business partners where needed to respond to a request, with legal or regulatory authorities where required, and with parties involved in a corporate transaction such as a merger, acquisition, financing, restructuring or sale of assets.
We may disclose information when we believe it is necessary to comply with law, protect rights, enforce agreements, investigate security incidents, prevent fraud, respond to lawful requests, protect users or protect the operation of alpha-max.
We do not sell personal information in the ordinary meaning of exchanging it for money. Some privacy laws define "sale" or "sharing" broadly, especially for targeted advertising or cross-context behavioural advertising. Where those laws apply, we will provide any required notices and opt-out choices.
12. International transfers
alpha-max may be operated with personnel, infrastructure, customers, service providers or partners located in different countries. Personal information may be transferred to, stored in or accessed from countries outside your own.
Where required by applicable data protection law, we use safeguards for international transfers. These may include adequacy decisions, standard contractual clauses, the UK international data transfer addendum, data processing terms, security commitments, access controls and other lawful transfer mechanisms.
Third-party platforms and partners may make their own international transfers under their own policies and agreements. Your organisation should review those terms when enabling connected services.
13. Retention
We keep personal information for as long as needed for the purposes described in this Notice, including to respond to enquiries, manage business relationships, provide services, maintain records, improve systems, comply with legal obligations, resolve disputes and enforce agreements.
Retention periods vary depending on the type of information, sensitivity, account status, contractual requirements, legal obligations, operational needs and whether information is part of customer operational data. For example, website analytics may be kept for a shorter period than customer account records or legal correspondence.
When information is no longer needed, we take reasonable steps to delete, anonymise, aggregate or otherwise limit it, subject to backup cycles, legal holds, security needs and contractual obligations.
14. Security
We use administrative, technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration and disclosure. Measures may include access controls, authentication, encryption in transit where appropriate, monitoring, logging, least-privilege practices, vendor review, employee confidentiality obligations and incident response processes.
No website or online service can be guaranteed to be completely secure. You should use strong credentials, protect access tokens, limit user permissions, keep connected accounts under review, and notify us promptly if you believe an alpha-max account, form submission or communication has been compromised.
If we become aware of a security incident that affects personal information, we will assess it and provide notices where required by applicable law or contract.
15. Your privacy rights
Depending on where you live and how you interact with alpha-max, you may have rights to request access to personal information, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about how your data has been collected, used, disclosed or shared.
Some US state privacy laws may also provide rights to know, delete, correct, opt out of sale or sharing, opt out of targeted advertising, opt out of certain profiling, appeal a decision and receive non-discriminatory treatment for exercising rights. The exact rights and exceptions depend on the jurisdiction.
If your information is processed by alpha-max on behalf of a customer, we may need to refer your request to that customer or follow that customer's instructions. If you are an end customer, employee or recipient of an alpha-max customer, please contact that customer first where appropriate.
We may need to verify your identity or authority before responding. We will respond within the timeframe required by applicable law, subject to lawful extensions and exceptions.
16. Marketing and communication choices
You can opt out of non-essential marketing emails by using the unsubscribe link in the message or by contacting us. Even if you opt out of marketing, we may still send transactional, legal, security, support or service-related communications where appropriate.
If you receive SMS, phone or similar communications from alpha-max, you may ask us to stop non-essential outreach using the instructions provided or by contacting us. Message and data rates may apply depending on your provider and location.
You can also manage some advertising and analytics preferences through cookie controls, browser settings and industry opt-out tools where available.
17. Third-party websites and external links
The alpha-max website may link to third-party websites, partner resources, documentation, portals, payment pages, event platforms, help centres or embedded content. We do not control those third-party services and are not responsible for their privacy notices, security practices, cookies or data handling.
When you leave the alpha-max website or enable a third-party connection, the third party's terms and privacy practices may apply. Review those notices before providing information or enabling access.
18. Children
alpha-max is a B2B platform and website intended for business users. It is not directed to children, and we do not knowingly collect personal information from children through the website.
If you believe a child has provided personal information to us, contact us so we can review the matter and take appropriate action.
19. Changes to this Notice
We may update this Privacy Notice as alpha-max, the website, our services, laws, technologies or business practices change. When we make changes, we will update the date above and post the revised Notice on this page.
If changes are material, we may provide additional notice where appropriate, such as through the website, direct communication or another reasonable method. Continued use of the website after an update means the revised Notice applies from the date shown.
Centralized orders and inventory
Warehouse shipping and label printing
Automation rules that reduce manual work
