Privacy Notice

Atyourtime Technology Limited (“Atyourtime Technology”, “we”, “us”, “our”) is a company registered in England and Wales under company number 12159231. Our registered office is 1 Warner House, Harrovian Business Village, Bessborough Road, Harrow, Middlesex, England, HA1 3EX.

This Notice explains how we handle personal data when you visit our website, request a demo or pilot, contact us, subscribe to communications, use or administer our B2B technology services, interact with us as a customer, prospect, supplier, partner or business contact, or apply for a role with us. Separate or supplementary notices may apply to specific products, recruitment, client deployments or services where the processing materially differs.

Atyourtime Technology is registered with the Information Commissioner’s Office.

We process personal data in accordance with applicable UK data protection and privacy law, including the UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended or replaced from time to time.

• Directly from you, including forms, demos, pilots, subscriptions, contracts, support, events and recruitment.
• From the organisation you work for or represent.
• From authorised partners, agents or referral sources where lawful and appropriately disclosed.
• From our website, services, APIs and security/operational logs.
• From Atyourtime Group companies where sharing is necessary and lawful for group administration, service delivery, commercial coordination or security.
• From public professional/business sources where appropriate for B2B due diligence or business development.

We do not use consent where another lawful basis is more appropriate. Where we rely on consent, you can withdraw it at any time without affecting processing already carried out lawfully.

AGE is Atyourtime’s internal commercial and growth-intelligence environment. Relevant enquiry, source, campaign, account, opportunity and customer-lifecycle information may be recorded in AGE so that authorised Atyourtime teams can manage business relationships, attribution, pipeline, service handover, renewal and growth. AGE is not intended to be a public CRM operated by website visitors.

Atyourtime Studio is used for marketing/content activation and related campaign intelligence. Where a Studio campaign directs you to Atyourtime Technology, campaign and content identifiers may be associated with permitted website engagement and subsequent business enquiries so we can understand campaign effectiveness. Non-essential storage/access technologies are subject to the Cookie Notice and your choices.

We may share personal data only where reasonably necessary with: Atyourtime Group companies; cloud, hosting, identity, communications, analytics, support and security providers; payment and billing providers; professional advisers and auditors; implementation/integration partners where required for the service; regulators, law enforcement or courts where legally required; and a purchaser or successor in connection with a genuine corporate transaction. Providers acting for us are expected to process data under appropriate contractual and security controls.

We do not sell personal data.

Some suppliers or support operations may process personal data outside the UK. Where UK data protection law restricts the transfer, we use an applicable lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another permitted safeguard, together with supplementary measures where appropriate.

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security, contractual and dispute requirements. Retention periods are set by data category and business purpose. As a baseline: unsuccessful general enquiries should be reviewed for deletion or minimisation after 24 months; marketing preference/suppression records may be retained as needed to respect opt-outs; customer/contract/finance records may be retained for up to 6 years after the relevant relationship or longer where law or a dispute requires; security logs are retained for a proportionate period based on risk; recruitment records should follow the dedicated recruitment retention schedule. Final periods must be reflected in Atyourtime’s approved retention schedule.

We use organisational and technical measures designed to protect personal data, including access controls, role-based permissions, encryption in transit and at rest where appropriate, secrets management, logging, monitoring, secure development practices, supplier controls and incident-management procedures. No internet service can be guaranteed completely secure, but we apply controls proportionate to the nature and risk of the processing.

Subject to the law and any applicable exemptions, you may have rights to access your personal data; correct inaccurate data; request erasure; restrict processing; object to processing, including direct marketing; receive certain data in a portable format; withdraw consent where processing relies on consent; and complain to the ICO. Rights are not absolute and we may need information to verify identity and understand the request.

We do not currently intend the public Atyourtime Technology website to make solely automated decisions about individuals that produce legal or similarly significant effects. If this changes, or if Phase 2 talent matching introduces significant automated decision support, we will assess the processing and provide appropriate transparency and safeguards before deployment.

We use cookies and similar storage/access technologies as described in our Cookie Notice. Strictly necessary technologies may operate without consent where the law permits. Non-essential analytics, functionality or advertising/marketing technologies will be controlled in accordance with applicable PECR and UK GDPR requirements.

You can opt out of marketing at any time using the unsubscribe method in a message or by contacting us. Opting out of marketing does not stop service, security, contractual or administrative communications that we need to send for another lawful purpose.

Our B2B website and services are not directed at children. We do not knowingly seek to collect children’s personal data through the general Atyourtime Technology website. Any future Academy offering involving younger learners must have a separate age-appropriate privacy design and notice before launch.

Privacy enquiries and rights requests: privacy@atyourtimetechnology.com. Legal correspondence: legal@atyourtimetechnology.com. Postal address: Atyourtime Technology Limited, 1 Warner House, Harrovian Business Village, Bessborough Road, Harrow, Middlesex, England, HA1 3EX.

You also have the right to complain to the Information Commissioner’s Office. We would welcome the opportunity to address your concern first, but this does not affect your right to contact the ICO.

We may update this Notice when our services, processing or legal requirements change. We will publish the updated version and effective date and, where appropriate, provide additional notice of material changes. Continued website use is not treated as consent to processing where consent is legally required.