Last updated: 10 February 2026
1. Our Commitment
Alunra Ltd is committed to protecting the privacy and security of personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We process personal data lawfully, fairly, and transparently. We only collect data that is necessary for the purposes outlined in our Privacy Policy.
2. Legal Basis for Processing
We process personal data under the following legal bases:
Contractual necessity
Processing required to fulfil our contract with you — for example, to process transactions and manage your account.
Legitimate interests
Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
Consent
Where you have given clear consent for us to process your data for specific purposes, such as marketing communications.
Legal obligation
Processing required to comply with legal or regulatory obligations, such as tax reporting and fraud prevention.
3. Data Controller
We have appointed a Data Protection Officer (DPO) responsible for overseeing our data protection practices and ensuring compliance.
Data Controller
71–75 Shelton Street, Covent Garden London, WC2H 9JQ
Company Number: 16818206
Email: support@alunra.co.uk
4. Data Security Measures
We implement comprehensive security measures to protect your data:
Encryption — all data is encrypted in transit (TLS 1.3) and at rest (AES-256).
Access controls — role-based access ensures only authorised personnel can access personal data.
Regular audits — we conduct periodic security assessments and penetration testing.
Incident response — we maintain a documented breach response procedure, including notification to the ICO within 72 hours where required.
Staff training — all employees receive regular data protection awareness training.
5. International Data Transfers
We primarily process and store data within the United Kingdom and European Economic Area (EEA).
Where data is transferred outside the UK/EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO), or transfers to countries with an adequacy decision.
6. Data Subject Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access
Obtain a copy of your personal data and information about how it is processed.
Right to rectification
Request correction of inaccurate or incomplete personal data.
Right to erasure
Request deletion of your personal data in certain circumstances.
Right to restrict processing
Request limitation of processing while issues are resolved.
Right to data portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests or for direct marketing.
To exercise any right, email us at dpo@alunra.com. We will respond within 30 days.
7. Data Retention
We retain personal data only for as long as necessary:
Account data — retained while your account is active, plus 30 days after deletion request.
Transaction records — retained for 7 years for financial and tax compliance.
Donation records — retained for 7 years for audit and Gift Aid compliance.
Analytics data — anonymised and aggregated after 26 months.
8. Complaints
If you are unsatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: www.ico.org.uk
Helpline: 0303 123 1113
9. Changes
We review and update our data protection practices regularly. Any material changes will be communicated to you via the platform or email.
Get involved
Alunra Vision