Privacy Policy

Alion provides software and infrastructure for affiliate and performance marketing. We are a company registered in Saint Lucia. In this policy, "we", "us" and "our" mean Alion. "You" means the person whose personal data we handle.

For the personal data described in this policy, we are the data controller. This means we decide why and how the data is used, and we are responsible for it.

You can contact us about privacy at any time at [email protected].

We follow the Data Protection Act of Saint Lucia (Cap. 6.07).

Where they apply to you, we also follow the EU General Data Protection Regulation (the "EU GDPR") and its United Kingdom version (the "UK GDPR"). These usually apply if you are in the European Union or the United Kingdom.

Our customers use Alion to receive, route and manage leads. A lead is a record about a person, such as their name and contact details. We call these people End Users.

For lead data, our customer is the controller and we are the processor. A processor handles data only on the instructions of the controller. Our Data Processing Agreement covers this data, and this Privacy Policy does not.

This table shows the personal data we collect, with examples and where it comes from.

The law requires a legal basis for each use of personal data. A legal basis is the reason the law accepts for using it. The bases we rely on are:

• Contract: we need the data to provide the service you signed up for.
• Legal obligation: a law requires us to use or keep the data.
• Legitimate interest: we have a fair business reason, and it does not override your rights and interests.
• Consent: you have said yes, and you can withdraw that at any time.

Every marketing email we send has an unsubscribe link.

You can opt out at any time. Use the link in the email, or write to us at [email protected]. Opting out does not affect messages we must send you about your account or billing.

We share personal data only with:

• Service providers who act on our instructions, such as hosting, email, payment and support chat providers. These are our subprocessors.
• Professional advisers, such as lawyers and accountants.
• Authorities, where the law requires it.
• A buyer, if we are part of a merger or acquisition. The buyer must protect the data in the same way.

We host the platform with established cloud infrastructure providers.

Our website also uses a third party chat service for our assistant Alo, and loads web fonts from a third party font service. These providers receive technical data such as your IP address when the page loads or when you chat.

A current list of our subprocessors is available on request at [email protected].

We and our service providers may process your data outside your country.

Some countries have an adequacy decision. This is an official decision by the EU or the UK that a country protects personal data well enough. When we transfer EU or UK data to a country without one, we use safeguards such as the European Commission's standard contractual clauses. These are approved contract terms that protect the data after the transfer.

We keep personal data only as long as needed for the purposes in this policy, or as required by law, and then delete or anonymise it.

We protect personal data with measures that include:

• Encryption in transit, and at rest where supported
• Access limited to staff who need it for their work
• Isolation, so each account's data stays separate from other accounts
• Logging and monitoring of our systems

No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

You have the right to:

• Access the personal data we hold about you
• Correct data that is wrong or incomplete
• Delete your data
• Restrict how we use your data
• Object to how we use your data, including to direct marketing at any time
• Data portability: receive your data in a common, machine readable format, or have it sent to someone else
• Withdraw consent where we rely on it

Some rights have limits under the law. Requests are free of charge. We reply within one month. Where the law allows, we may extend this period, and we will tell you if we do.

Send your request to [email protected]. We may ask you to confirm your identity first.

If you are unhappy with how we handle your data, please contact us first at [email protected]. We will try to fix it.

You can also complain to the Data Protection Commissioner of Saint Lucia. If you are in the EU or the UK, you can complain to the data protection authority where you live or work.

We do not make decisions about website visitors or account users using only automated means when those decisions have legal or similarly significant effects on them.

Our services are for businesses. They are not directed at anyone under 18.

Our website may link to other websites. Their own privacy policies apply to them, not this one.

We may update this policy. When we do, we post the new version here with a new "Last updated" date. We tell customers about significant changes.

For any question about this policy or your personal data, write to [email protected].

Our website is alion.app.