Privacy Policy

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), this document provides information on how we collect and process personal data – including details on how we store, use, transfer, and delete such data. It also explains how our website uses cookies.

1. Data Controller and Contact Details

The Controller of your personal data is Alokai Sp. z o.o., a Polish limited liability company with its registered office in Warsaw (00-032), ul. Przeskok 2. The company is entered in the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw, XIII Commercial Division of the National Court Register, under KRS number 0000870326, NIP (tax ID) 5272942049, with a share capital of PLN 4,011,480.00 (hereinafter the “Controller”). For any questions regarding personal data, please contact us via email at privacy@alokai.com.

We have appointed a Data Protection Officer (DPO) – Ms. Marzena Tyl. You may contact the DPO by sending an email to privacy@alokai.com.

2. Personal Data

2.1. Usage of the Website

The Controller processes personal data of users of the website for the following purposes:

Providing and operating the Website – the legal basis is the Controller’s legitimate interest (Article 6(1)(f) GDPR) in making information about the Controller’s services and products available;
Analytical, statistical, and marketing purposes – the legal basis is your consent (Article 6(1)(a) GDPR);
Establishment, exercise or defense of legal claims – the legal basis is the Controller’s legitimate interest (Article 6(1)(f) GDPR) in protecting its rights.

Recipients of your personal data may include: server hosting providers, the Controller’s employees and associates, and legal service providers.
Your personal data will be processed:

for the duration of the Controller’s legitimate interest, but no longer than until you effectively object; or
until you withdraw your consent (withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal).

Providing your personal data is voluntary, but necessary for you to use the Website. You have the right to object to the processing of your data based on Article 6(1)(f) GDPR (legitimate interest) or to withdraw your consent at any time – simply send a message to privacy@alokai.com. After we receive an objection or a withdrawal of consent, your data will be promptly deleted from our database.

2.2. Contact Form

Our contact form allows you to send inquiries about our services.
To respond to your inquiry, we collect the following data through the form: (i) first name, (ii) last name, (iii) business email address, (iv) company name, (v) eCommerce platform, (vi) annual revenue (selected from a dropdown menu). You may also optionally provide your shop website URL, job title, and an additional message.
We use this data to respond to your inquiry and provide you with information about our services. With your consent, we may also use it for marketing purposes – for example, sending you personalized offers or updates about new products via email.
The legal basis for processing this data is the Controller’s legitimate interest in promoting its own services (Article 6(1)(f) GDPR), in conjunction with your consent as required by the Polish Act of 18 July 2002 on the Provision of Electronic Services and the Polish Act of 16 July 2004 – Telecommunications Law. This means we will send you marketing communications (such as emails) only if you have given us appropriate consent.
In addition, your data may be processed for the purpose of potentially establishing, exercising, or defending legal claims – based on the Controller’s legitimate interest (Article 6(1)(f) GDPR) in protecting its rights.
Recipients of your data may include: email and server hosting providers, providers of mailing tools, and legal service providers.
If, as a result of your inquiry, you decide to enter into a service agreement with us, your data may be transferred to Alokai Inc. located in the USA (a company within the Alokai group, responsible for servicing international clients). Details on such transfers are provided in the Transfer of Data Outside the EEA section below.
Personal data collected via the contact form will be processed for the time needed to handle your inquiry and correspondence. Subsequently, for marketing purposes, data will be processed until you withdraw your consent or object to further processing (but no longer than the period of the Controller’s legitimate marketing interests). The processing period may be extended by the statute of limitations for potential claims if your data needs to be retained to establish or defend against legal claims.
Providing the requested data is voluntary, but necessary to communicate with us and receive a response. If you do not provide the required contact information (such as name, email address), we will not be able to respond to your inquiry.

2.3. Newsletter

We offer a company newsletter to share knowledge and updates about our products and services. You can subscribe by providing your email address and first name.
The legal basis for processing your newsletter subscription data is the contract for digital content delivery that you conclude with us by submitting the subscription form (Article 6(1)(b) GDPR), in conjunction with the consent required under the Polish Act on Provision of Electronic Services and the Telecommunications Law for sending you marketing communications
Additionally, your personal data may be processed for the purpose of establishing, exercising, or defending legal claims – based on the Controller’s legitimate interest (Article 6(1)(f) GDPR) in protecting its rights.
Recipients of your personal data will include email and server hosting providers, a mailing tool provider, and legal service providers.
Your data may be transferred to Alokai Inc. in the USA (the group company responsible for distributing our marketing materials) – see Transfer of Data Outside the EEA below for details.
Your personal data will be processed for the duration of the newsletter subscription (the contract), and after termination of the subscription, for the period necessary to handle any potential claims (i.e., until the applicable statute of limitations expires).
Providing your data is voluntary but required to receive the newsletter. If you do not provide an email address, we cannot send you the newsletter.

2.4. Resources (E-Books / White Papers)

You can download our educational resources (e.g. e-books, white papers) by filling out a dedicated form. In the form, we ask for your first name, last name, business email address, and an approximate annual revenue (selectable from a menu). You may also choose to provide your job title.
The legal basis for processing this data is the contract for providing digital content, which is concluded when you submit the download form (Article 6(1)(b) GDPR), in conjunction with your consent as required by the Act on Provision of Electronic Services and the Telecommunications Law.
Additionally, your data may be processed to possibly establish, exercise, or defend legal claims – based on the Controller’s legitimate interest (Article 6(1)(f) GDPR) in protecting its rights.
If you tick the checkbox to subscribe to our newsletter when downloading a resource, your data will also be used to deliver our newsletter to you (see the Newsletter section above for details).
Recipients of your data will include: email and server hosting providers, a mailing tool provider, and legal service providers.
Your data may be transferred to Alokai Inc. (USA) – the group company responsible for distributing our materials (see Transfer of Data Outside the EEA below).
Personal data will be processed for the duration of the agreement (i.e. until the e-book or paper is provided), and thereafter for the period necessary to address any claims under that agreement (statute of limitations period).
Providing the requested data is voluntary, but necessary to download the resource. If you do not provide the required information, we will not be able to provide you with the requested e-book or paper.

2.5. Career (recruitment)

Recruitment processes at Alokai are conducted exclusively through the LinkedIn platform. You may apply for our current job openings via LinkedIn, in which case we receive the personal data contained in the application submitted via LinkedIn. This data includes, but is not limited to, your first name, last name, email address and other information you provide to us in your LinkedIn profile or application documents (e.g., resume, cover letter). Depending on the position, candidates may also be required to provide such data as a phone number or a link to their own website/portfolio (if they choose to include such data in their application).
By submitting an application via LinkedIn, you agree that we may obtain additional personal information available on your LinkedIn profile, to the extent provided by the privacy settings of that service. Please note that the LinkedIn platform itself processes your data as a separate administrator - for details, please refer to LinkedIn's privacy policy.
Data provided in connection with recruitment will be processed by the Administrator for the following purposes and on the basis of the following legal grounds:

if the recruitment relates to employment on the basis of an employment contract - the data are processed in order to take actions prior to the conclusion of the contract and to fulfill the Administrator's legal obligations in connection with the recruitment process (Article 6(1)(b) and (c) of the RODO, in particular in connection with Article 221 §1 of the Labor Code of June 26, 1974);
if the recruitment concerns cooperation on the basis of a civil law contract - the data are processed in order to take action at the request of the data subject prior to the conclusion of such a contract (Article 6(1)(b) of the RODO);

The period of processing of data obtained in the recruitment process is limited to the duration of the recruitment process in question. Notwithstanding the above, the period of processing may be extended by the time necessary to establish or assert possible claims or defend against them - but no longer than until the expiration of the limitation period for claims under generally applicable laws
Provision of personal data is voluntary, but necessary to participate in the recruitment process. In the case of recruitment for a position requiring employee employment, the provision of certain data is also a statutory requirement (under labor laws). Failure to provide key information (such as your name, contact details, or other required credentials) will result in your application not being considered. Providing any additional, non-mandatory information is at your discretion.

2.6. Online Meet-Ups and Workshops

We host periodic online events such as technical meet-ups and workshops. You can register for these events by submitting a sign-up form with details like your first name, last name, company/business email, job title, company name, and the chosen date of the event.
The legal basis for processing this registration data is the contract for digital content/services (participation in the online event) concluded when you submit the registration form (Article 6(1)(b) GDPR), in conjunction with your consent as required under the Act on Provision of Electronic Services and the Telecommunications Law.
Additionally, your data may be processed for the purpose of establishing, exercising, or defending legal claims – based on the Controller’s legitimate interest (Article 6(1)(f) GDPR).
If you select the option to subscribe to our newsletter during registration, your data will also be processed to send you the newsletter (see Newsletter section above).
Recipients of your data will include: email and server hosting providers, providers of tools for hosting online workshops/meet-ups, mailing tool providers, and legal service providers.
Personal data will be processed for the duration of the agreement (organization and attendance of the event) and thereafter until any potential claims under that agreement become time-barred.
Providing your data is voluntary but necessary to register for and attend the meet-up or workshop. If you do not provide the required information, we will be unable to sign you up for the event.

2.7. User Account

You have the option to create a user account on our website by filling out a registration form with at least your first name, last name, and email address.
The legal basis for processing this data is the conclusion and performance of an electronic services contract – specifically, the account registration and maintenance (Article 6(1)(b) GDPR).
In addition, your data may be processed to establish, exercise, or defend against legal claims – on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR).
Recipients of your personal data will be: email and server hosting providers, a mailing tool provider, and legal service providers.
Your personal data will be processed for the duration of the account service agreement, and after its termination, for the period of the statute of limitations for any claims arising from the agreement.
Providing the requested data is voluntary, but necessary to register and use an account. If you do not provide the required data (e.g., email address), account registration will not be possible.

2.8. Online Academy

We operate an online learning platform called the Alokai Academy. You can join by completing a registration form, which requires your first name, last name, and email address.
The legal basis for processing your data is the contract for providing access to the Academy’s digital learning content (Article 6(1)(b) GDPR).
Additionally, your data may be processed for the purpose of establishing, exercising, or defending legal claims – based on the Controller’s legitimate interest (Article 6(1)(f) GDPR).
Recipients of your data will include: email and server hosting providers, a mailing tool provider, a provider of the e-learning platform supporting the Academy, and legal service providers.
Personal data will be processed for the duration of the Academy service (while your account is active), and thereafter until potential claims from the service are time-barred.
Providing your data is voluntary, but necessary to participate in the online Academy. If you do not provide the required information, we cannot register you for the training platform.

2.9. Certification Program

You can join our Certification Program by completing a dedicated form and providing your first name, last name, and email address.
The legal basis for processing this data is the conclusion and performance of an electronic services contract – your participation in the certification program (Article 6(1)(b) GDPR).
Additionally, your data may be processed based on the Controller’s legitimate interest in maintaining a record of entities certified under the program (Article 6(1)(f) GDPR). This means we might, for instance, keep a list of individuals or companies that have been certified for verification and publicity purposes.
Furthermore, your data may be processed for establishing, exercising, or defending legal claims – also under the Controller’s legitimate interest (Article 6(1)(f) GDPR) in protecting its rights
Recipients of your data will include: email and server hosting providers, a mailing tool provider, a provider of tools supporting the certification program, and legal service providers.
Your personal data will be processed for the duration of the agreement (your participation in the Certification Program), and after its completion, for the statute of limitations period of any claims arising from that agreement. Data processed on the basis of legitimate interest (such as inclusion on a certified entities list) will be processed as long as that interest applies or until you object. You can object to processing based on legitimate interests at any time by emailing privacy@alokai.com, after which your data will be deleted from our records
Providing your data is voluntary but necessary to participate in the Certification Program. If you do not provide the required information, we will not be able to register you in the program.

2.10. Interacting via Social Network Profiles

You can interact with the Controller through our profiles on social media platforms (for example, our official LinkedIn page). When you engage with us on these platforms, we process your personal data that is publicly available on your social media account, such as your name (or username), profile photo, and – if you send us direct messages – any data you voluntarily provide in those messages.
Your personal data will be processed for the purpose of administering our social media profiles, responding to your messages, comments, and reactions, and for statistical and advertising purposes carried out through the social network’s tools. The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR) in communicating with users and marketing our services by providing informational content via social media.
If, during your interaction with us, you provide more information than is necessary (e.g., details in a direct message that are not needed for us to assist you), the additional data will be processed based on your consent (Article 6(1)(a) GDPR) implied by your voluntary provision of those details.
In addition, your data may be processed to establish, exercise, or defend legal claims – based on the Controller’s legitimate interest (Article 6(1)(f) GDPR) in protecting its rights.
Recipients of your data may include authorized employees and associates of the Controller who manage our social media communications.
Personal data will be processed for the duration of our legitimate business interests in using social media for communication, but no longer than until you effectively object. Data processed on the basis of consent will be processed until you withdraw that consent. You can send an objection or withdraw consent at any time by emailing privacy@alokai.com.
Providing your data on social media platforms is always voluntary. Keep in mind that when you use a social network (such as LinkedIn), your interactions with us are also subject to that platform’s own terms and privacy policy.
Our website uses social plug-ins (for example, a LinkedIn icon) which redirect you to our profiles on those platforms. Clicking such a plug-in will take you to the respective third-party site (like LinkedIn.com), where their privacy rules apply.
In connection with our presence on LinkedIn and the use of a LinkedIn plug-in on our site, LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland) acts as a joint controller of certain data about EEA users who visit our LinkedIn page or interact with the plug-in.
As a joint controller, LinkedIn provides us with aggregate analytics (insights) about the visitors to our LinkedIn page and allows us to use advertising tools on their platform. For more information about how LinkedIn processes data and about our joint-controller arrangement with LinkedIn, please refer to LinkedIn’s Privacy Policy.

3. Transfer of Data Outside the European Economic Area (EEA)The level of personal data protection outside the EEA may differ from that guaranteed under European Union law.

3.1. Therefore, the Controller transfers personal data outside the EEA only when it is necessary and with an adequate level of protection ensured – in particular by:- cooperating with entities processing personal data in countries recognized by the European Commission as providing an adequate level of data protection;

using standard contractual clauses adopted by the European Commission;
implementing Binding Corporate Rules approved by a competent supervisory authority;
other safeguards permitted under Chapter V of the GDPR.

3.2. The Controller will inform you at the time of data collection if it intends to transfer your personal data outside the EEA, and will indicate the relevant basis for such transfer.

3.3. In the course of using various external services and tools, your personal data may be transferred to countries outside the EEA. In particular, data may be sent to the following third-party recipients in “third countries” (non-EEA countries):

Alokai Inc., located in the state of California, USA – an entity within the Alokai group (shareholder of Alokai Sp. z o.o.) responsible for delivering certain services (e.g., servicing international customers and distributing marketing materials). Alokai Inc. applies privacy safeguards similar to those outlined in this Privacy Policy.
Google LLC, based in California, USA – a processor of data for web analytics (e.g., Google Analytics) and provider of online meeting tools. Privacy standards information: Privacy Policy – Google Policies & Terms. Google has stated that it implements the new Standard Contractual Clauses, which you can read about here: Google Ads Controller Terms (SCC) and Google Ads Processor Terms (SCC).
LinkedIn Corporation, with its registered office in California, USA – the entity responsible for operating the LinkedIn platform (where our company page is hosted). Information about LinkedIn’s privacy standards can be found here: LinkedIn Privacy Policy FAQ.
CookieYes Limited, 3 Warren Yard, Wolverton Mill, Milton Keynes MK12 5NW, United Kingdom – the service provider of our cookie consent tool. The basis for cooperation is a Data Processing Agreement and Standard Contractual Clauses: Data Processing Agreement – CookieYes.
HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA – the provider of our CRM tool for marketing, sales, customer service, and content management. The basis for cooperation is a Data Processing Agreement and Standard Contractual Clauses: HubSpot Data Processing Agreement.
GetVector, Inc. (d/b/a Vector), located in Boston, MA, USA – the provider of a marketing tool that identifies website visitors and enables hyper-targeted advertising campaigns (contact-based marketing). The basis for cooperation is a data processing agreement and Standard Contractual Clauses. These tools are only able to identify site visitors in the U.S., in Europe they may offer company-level identification rather than personal identification
Retention.com, Inc. (RB2B service), headquartered in Austin, TX, USA – the provider of a B2B marketing platform that offers person-level website visitor identification (an identity resolution tool for lead generation). The basis for cooperation is a data processing agreement and Standard Contractual Clauses. These tools are only able to identify site visitors in the U.S., in Europe they may offer company-level identification rather than personal identification
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA – the provider of the Microsoft Clarity analytics tool, which records user sessions and heatmaps for behavioral analysis. Data collected via Clarity may be stored on Microsoft’s servers in the USA. The basis for cooperation is Microsoft’s Data Protection Addendum (as part of its Online Services Terms) and Standard Contractual Clauses
Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA – the provider of a web development and hosting platform for our website. The basis for data transfer is a Data Processing Agreement including Standard Contractual Clauses: Netlify DPA.
Thinkific Labs Inc., #400 – 369 Terminal Ave, Vancouver, BC V6A 4C4, Canada – the provider of the platform we use to deliver online courses (Alokai Academy). The basis for data transfer is a Data Processing Addendum including Standard Contractual Clauses: Thinkific Data Processing Addendum.
ClickCease Ltd., 10 Karkom St., Pardes Hana-Karkur, 3709605, Israel – the provider of our click fraud prevention and ad verification tool. The basis for cooperation is a Data Processing Agreement and Standard Contractual Clauses. More information about ClickCease's data processing can be found here: https://www.clickcease.com/dpa.html.

4. The Controller transfers personal data to other entities outside the EEA only if explicitly indicated in this Privacy Policy or when it is inherent to the service being provided (for example, communicating via email with a user located outside the EEA necessarily involves transferring data to that user).

5. Your Rights

With regard to the processing of your personal data by the Controller, you have the following rights:

Right of access – to obtain confirmation whether we are processing your personal data, and if so, to access it and receive a copy;
Right to rectification – to have inaccurate personal data corrected or incomplete data completed;
Right to erasure (“right to be forgotten”) – to have your personal data deleted, provided the legal conditions for erasure are met;
Right to restriction of processing – to limit the processing of your data in certain cases (e.g., if you contest the accuracy of the data or the lawfulness of processing);
Right to data portability – to receive your personal data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible.

If the processing of your data is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the legality of processing carried out before its withdrawal.
Right to object to direct marketing – You have the right to object at any time to the processing of your data for direct marketing purposes, including profiling, when the processing is based on the Controller’s legitimate interests. If you object to processing for direct marketing, we will cease processing your data for those purposes.
Apart from marketing, you also have the right to object – on grounds relating to your particular situation – to processing of your data at any time when the processing is based on the Controller’s legitimate interest (Article 21(1) GDPR). Unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless processing is needed for the establishment, exercise, or defense of legal claims, we will cease processing your data upon such objection.
To exercise any of your rights, please email us at privacy@alokai.com. We will handle your request promptly and in accordance with applicable laws. We may need to verify your identity or ask for additional information to process certain requests.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. In Poland, the relevant supervisory authority is the President of the Personal Data Protection Office (PUODO) (uodo.gov.pl).

6. Cookies

Our website uses cookies and similar technologies. These are small text files stored on your device that may collect certain technical information which, in some cases, can be considered personal data (such as IP address, unique cookie ID, device identifier and type, domain, browser type and language, operating system and system settings, country and time zone, previously visited websites, information about your interaction with our site, and timestamps/referring URLs).
We use cookies on our Website for technical purposes and – with your consent – for additional purposes categorized as functional, experience/personalization, analytics/measurement, and marketing (personalized ads).
The website does not automatically collect any information apart from that collected through cookies. Cookies that are necessary for the Website to function properly are always active and cannot be turned off (these are used under Article 6(1)(f) GDPR – the Controller’s legitimate interest in ensuring the proper operation of the site). Other cookies will only be used if you give your consent via the cookie banner when you first visit the site. Such consent is obtained in compliance with applicable law (including Article 173 of the Polish Telecommunications Law and Article 6(1)(a) GDPR).
If you decline consent for cookies beyond those that are necessary, certain features or functionalities of the website may become unavailable (for example, features that enhance user experience or personalization might not work properly without their respective cookies).
You can change your cookie preferences at any time. To do so, use the cookie settings icon (usually displayed at the bottom-right corner of the Website) to reopen the consent management panel, or adjust your web browser settings to delete or block cookies. Please note that disabling or blocking some cookies via your browser may impact the functionality of the site.
We use cookies to track how you use our Website and to understand your preferences, to determine whether our emails have been opened or interacted with, and to present you with advertisements relevant to your interests.
We may also receive aggregated reports from our analytics and advertising partners (who use cookies or similar technologies) – for example, reports from Google Analytics or Microsoft Clarity about website traffic and user interactions. We utilize such reports to gather statistics about usage and to improve our website and your experience.
We do not link the information stored in cookies to any personal data you may submit elsewhere on our site (e.g., via contact forms).
Third parties may also collect information via our website through cookies, third-party plug-ins, and widgets. These third parties (such as analytics providers or social media platforms) collect data directly from your browser, and the processing of that data is subject to their own privacy policies.
Some cookies will only be used if you engage with certain features or make specific choices (for instance, a preference cookie that saves your language choice), whereas essential cookies are used by default and cannot be disabled.
For clarity, the cookies used on our site fall into the following categories:

Necessary Cookies – These cookies are essential for the website’s operation and enable core functionalities (such as navigation and access to secure areas). They are always active and do not require consent. They include both our own cookies and, for example, the cookie that remembers your consent preferences (set by our CookieYes tool). These cookies are generally session-based or stored only for a short duration necessary for the site to function.
Functional Cookies – These cookies allow the site to provide enhanced functionality and personalization, such as remembering your preferences (e.g., language or region selection). They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, some features may not function properly. Functional cookies might persist only for a session or a set period (for example, a few days or weeks).
Experience/Personalization Cookies – These cookies help customize your experience on our site, for instance by remembering layout preferences or showing relevant content based on previous interactions. They may remain on your device for varying lengths (from a single session up to a few months, depending on their purpose).
Analytics (Statistical) Cookies – These cookies collect anonymized or pseudonymized information about how visitors use our site (e.g., which pages are visited most often, or if error messages pop up) to help us understand and improve how the site performs. We use partners like Google (Google Analytics) and Microsoft (Clarity) for analytics. The data obtained does not directly identify you, and is used to compile aggregate statistics. Depending on the provider, these cookies may persist for extended periods (for instance, Google Analytics cookies can persist for up to 14 months unless deleted sooner).
Marketing Cookies – These cookies are used to track browsing habits and activity across our site (and potentially others) in order to build a profile of your interests. This helps us and our partners display relevant advertising to you on our site or elsewhere. Marketing cookies on our site may be set by third-party advertising and analytics partners (for example, LinkedIn via the LinkedIn Insight Tag, or visitor identification tools like Vector and RB2B mentioned above). The information is often collected anonymously (without directly identifying you), but it does identify your browser and device. These cookies may be session-based or persistent. Some persist for a set duration (e.g., days, months, or even years) to recognize you if you return to our site or related sites.

You can find detailed information about each individual cookie we use (including its name, provider, purpose, and duration) in our cookie consent banner and settings, which are displayed on your first visit and accessible at any time via the cookie icon on our website.
We use the HubSpot platform on our website to support analytics and communication activities. HubSpot allows us to track user interactions, including page views, visited subpages, and submitted forms.This data is used to analyze website performance and optimize content and communication, and is processed based on the user’s consent or our legitimate interest.

7. Security of Personal Data

The Controller conducts ongoing risk assessments to ensure that personal data is processed securely and in compliance with applicable laws. We ensure that only authorized persons have access to personal data and only to the extent necessary to perform their duties.
The Controller takes all necessary steps to ensure that any subcontractors or partners who process data on our behalf also implement appropriate technical and organizational measures to safeguard personal data.

8. Changes to the Privacy Policy

8.1. We may update this Privacy Policy from time to time to reflect changes in our services or data processing practices, or due to legal updates. In particular, this document is a dynamic instrument that may be amended to address the introduction of new services or tools (especially marketing or analytics tools) and to remain compliant with current regulations. We will inform you of any material changes to the Privacy Policy (for example, by a notice on our website or via email if you are a newsletter subscriber).

8.2. By using alokai.com, you acknowledge that you have read and understood the latest version of our Privacy Policy as published on our website alokai.com. If you have any questions or concerns regarding the processing of personal data or the use of cookies, please contact us at privacy@alokai.com.

Last updated: June 17, 2025