Privacy Policy & Data Rights

1. Introduction to Data Sovereignty

ALOSTORA SEAFOOD LTD ("we," "us," "our") is committed to the highest standards of data protection. This policy outlines our protocols for the collection, processing, and storage of personal data in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our Data Controller can be reached at our Manchester headquarters.

2. Data Collection Categories

We collect personal information necessary for the execution of high-end logistics and commercial contracts. This includes: Identification Data (Name, Title), Contact Data (Address, Email, Phone), Financial Data (Payment card details processed via encrypted gateways), and Technical Data (IP addresses, browser types). We do not collect "Special Category" data unless voluntarily provided for health and safety reasons (e.g., severe seafood allergies).

3. Legal Basis for Processing

We process data under the following legal foundations: (a) Performance of a Contract—necessary to deliver your seafood; (b) Legal Obligation—compliance with HMRC tax laws and food safety tracking; (c) Legitimate Interests—to enhance our website security and prevent fraudulent transactions; (d) Consent—for our "Insights" newsletter and non-essential cookies.

4. Data Retention & Deletion

Transactional data is retained for a period of 6 years following the end of the financial year, as mandated by UK law. Marketing data is purged after 2 years of inactivity. Technical logs are overwritten every 90 days. Users possess the "Right to be Forgotten," which can be exercised by contacting our privacy officer.

5. Security & International Transfers

Data is stored on secure, UK-based servers with AES-256 encryption. We do not transfer personal data outside the UK or the EEA unless the destination country is deemed to have "Adequacy" status by the UK Information Commissioner's Office (ICO).

... (Extensive legal clauses continue) ...