Version 1.3 · 21 October 2026
Alvediom Limited is the controller of personal information used to operate the medicine intelligence dashboard. Contact info@alvediom.com for privacy questions or requests.
Alvediom Limited · Company number 17323385 · Registered in England and Wales
Account and access: your email address, verification records, account identifier, sessions, chosen plan and product presentation identifiers used against your allowance. We use these to provide sign-in, searches, reports and paid access. Our lawful basis is performance of our contract with you, or steps you request before entering it. You need to provide an email address for verified account access; without it we cannot provide that access.
Payments: payment status, transaction references, amount, currency, purchase/access records, and a dated record of the terms and immediate-access agreement accepted before checkout. Stripe processes card and billing details through its checkout; we do not receive or store your full card number or security code. Our bases are contract performance and legal obligations for accounting and tax records. Stripe also processes some information for its own fraud prevention and regulatory responsibilities under its privacy notice.
Security and service operation: technical logs, request identifiers, errors, rate-limit records and operational timings. Hosting providers may also record IP addresses, browser/device details and connection logs. Our legitimate interests are protecting accounts, preventing misuse and keeping the service reliable. Report/PDF timing events are designed to omit email addresses, medicine names and payment identifiers; other necessary account and provider records remain separate.
Support: information you send us, used to answer your request, resolve a problem or handle a complaint. The basis is contract performance where relevant, otherwise our legitimate interest in assisting customers. We retain relevant records where needed to meet legal duties or establish or defend legal claims.
We do not ask for patient details or health records. Search for medicine products only; do not enter patient information or confidential clinical information. A medicine search is used as product research, not to infer your health. We do not sell customer personal information or use sign-in details for unsolicited marketing. Any future optional marketing will have its own lawful arrangements and a way to opt out.
The dashboard uses a session cookie to keep you signed in and limited browser storage to restore a selected medicine when returning from payment. Payment-return information can include your email and selection; it is accepted for up to two hours and cleared on a completed return or when the browser tab closes. Secure email links can carry your selected product so you can resume your search. Keep sign-in links private. These functions support the service you request. Non-essential tracking must not be activated without the information and choices required by applicable law. The main Alvediom website and payment provider may have their own cookie notices.
Authorised Alvediom personnel can access account emails, access plans, allowance/purchase records and support messages where needed. This is not a live record of every action or proof of who is physically using an account.
We use service providers for hosting (Render), managed database hosting, business email (Google Workspace), and payments (Stripe). They receive information needed for their role. We may also share relevant information with professional advisers, competent authorities where legally required, or a successor to the business subject to appropriate protections. We do not put customer databases or credentials in public code repositories.
Some providers and their subprocessors may process information outside the UK, including in the EEA and United States. Where UK transfer rules apply, transfers must be covered by an applicable UK adequacy regulation or appropriate safeguards, such as approved contractual clauses with the UK addendum or the UK International Data Transfer Agreement, together with any required assessment. Contact info@alvediom.com for details of the arrangements relevant to your information and how to obtain a copy of applicable safeguards, subject to necessary redactions.
Sign-in links expire after 15 minutes and are single-use; sign-in sessions normally expire after seven days unless ended sooner. Expiry of access does not automatically erase all account or payment records. We keep account and allowance records while needed to operate access and prevent repeated free allowances, then review whether deletion or anonymisation is appropriate. Support records and security logs are kept only while needed for their purpose, resolving disputes or meeting legal requirements. We assess necessity using account activity, outstanding purchases or complaints, security incidents and applicable limitation periods. Relevant financial records are normally retained for six years after the end of the financial year concerned, or longer where law requires. Provider backups may retain deleted records until their normal rotation; access remains restricted and restored data must remain subject to deletion controls. You can ask us about the period applying to your records or request deletion.
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your information. You can object to processing based on our legitimate interests, including security or service-operation processing; we will assess your circumstances and any overriding grounds. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. There is no solely automated decision-making producing legal or similarly significant effects about you; automated access limits implement the plan you select.
Email info@alvediom.com. We may ask for proportionate identity verification. We normally respond within one month; any lawful clarification or extension will be explained. You may complain to the Information Commissioner's Office at ico.org.uk, whether or not you first contact us. If you are elsewhere, you may also have rights through your local supervisory authority. We use proportionate security measures, but no online service can promise absolute security. We will update this notice when necessary and communicate material changes appropriately.