1. Data Handling & Privacy
How we collect, process, and protect personal and organisational data.
What we collect. We collect only data that is necessary to deliver our services. This includes: contact details (name, email, phone, job title) provided when booking a demo or pilot; organisational information (name, country, sector) used for scoping; and usage analytics on our public website (first-party only, no cross-site tracking).
Purpose limitation. Data collected for a demo request is used only to follow up on that specific request. We do not use it for unsolicited marketing, do not sell it, and do not share it with third parties except as listed in Section 3.
Enquiry forms. Demo and Pilot enquiry forms on this website store submissions in your browser's localStorage first (ensuring they are never lost) and then attempt a mailto delivery to our inbox. No form data is transmitted to a third-party form service or analytics platform. The mailto is the only transmission method. If the send fails or is not completed, the record remains in localStorage and can be retrieved by the user or re-submitted.
Website analytics. We use a first-party-only analytics approach. We do not embed Google Analytics, Meta Pixel, or any third-party tracking cookie. Visitor interaction events (page views, form opens, CTA clicks) are logged client-side and are not transmitted to external servers. No cross-site or cross-device tracking occurs on this domain.
Legal basis (for organisations in GDPR jurisdictions). We process contact data on the lawful basis of legitimate interest when responding to an enquiry you initiated, and on the basis of consent when sending follow-up materials you have agreed to receive.
2. Hosting & Infrastructure
Where and how our platforms and website are hosted.
| Asset | Hosting | Region | Notes |
|---|---|---|---|
| alglobal.systems (main website) | Static CDN (SciSpace/S3) | Global CDN | All static files; no server-side execution |
| AtineSuite™ platform | Dedicated server / VPS | Africa / EU region | Client-specific environments on request |
| IBMS™ (radio streaming) | Docker self-hosted | Client premises / VPS | Liquidsoap + Icecast2 stack |
| HelpDesk™ | helpdesk.atinelabs.tech | Managed hosting | Support ticket system |
| Platform demos (7 new) | Not yet deployed | TBD | Labeled "Access Needed" — separate project access required |
| Enquiry data | Client browser (localStorage) | User's device | No server-side storage of form submissions on public site |
Hosting arrangements are reviewed at each platform release. Client-hosted deployments use infrastructure specified and controlled by the client organisation.
3. Subprocessors
Third-party services that may process data in connection with our platforms.
| Service | Purpose | Data shared | Your data? |
|---|---|---|---|
| Tailwind CDN (cdn.tailwindcss.com) | CSS framework delivery | IP address (standard HTTP request) | IP only |
| Unsplash / Pexels CDN | Public stock imagery | IP address (standard image request) | IP only |
| Email (mailto) | Enquiry delivery to inbox | Name, email, message (only if you send) | Only on send |
| Atina AI™ (chatbot) | Website visitor Q&A assistant | Conversation text during session | Session only |
| Google Analytics | Not used on this domain | — | Not used |
| Meta Pixel / Facebook | Not used on this domain | — | Not used |
| LinkedIn Insight Tag | Not used on this domain | — | Not used |
For client deployments of AtineSuite™ or other platforms, subprocessors may differ and are documented in the client-specific Data Processing Agreement (DPA). Contact admin@atinelabs.tech to request a DPA.
4. Data Retention
How long we keep different categories of data.
| Data type | Retention period | Deletion method |
|---|---|---|
| Demo / pilot enquiries (localStorage) | Until cleared by user (browser storage) | Browser clear / user action |
| Demo / pilot enquiries (our inbox) | 24 months from last contact | Manual deletion upon request |
| Customer portal data (localStorage) | Until cleared by user (browser storage) | Browser clear / user action |
| Support ticket records | 36 months from closure | Deletion upon request |
| Financial / invoicing records | 7 years (statutory minimum) | Secure archive then deletion |
| Anonymised analytics | Indefinite (no personal identifiers) | N/A — no personal data |
5. Security Practices
Controls in place to protect data and infrastructure.
✅ HTTPS / TLS everywhere
All public domains enforce HTTPS. TLS certificates are managed and auto-renewed.
✅ No server-side form storage
Public enquiry forms store data locally in your browser. No database backend holds your submissions on this domain.
✅ Access control on admin routes
Internal admin pages are client-side password-protected. Production systems use role-based access control.
⚠️ Formal ISO 27001 certification
Not yet certified. We follow ISO 27001-aligned controls. Certification is on our roadmap. We will not claim it before it is achieved.
⚠️ Penetration testing
No third-party pen test has been completed at the time of this update. Planned prior to enterprise-scale pilot launch.
✅ Incident disclosure commitment
We commit to notifying affected clients within 72 hours of a confirmed data breach that affects their data.
6. AI & Algorithmic Governance
How we use AI in our platforms and this website.
Atina AI™ assistant. The Atina AI chatbot embedded on this website is an assistive tool for answering visitor questions about our platforms and services. It does not make decisions that affect users, does not have access to personal data beyond the conversation session, and does not store conversation logs on external servers beyond the session.
AtineTrust™ platform. This upcoming platform is designed specifically to help organisations govern their own AI systems — providing audit trails, policy frameworks, and accountability documentation. The platform itself is labeled "Access Needed" (separate project access required) and is not yet available as a managed service. We will not claim it is live before it is deployed and tested.
AI-assisted content. Some website content and documentation has been drafted with AI writing assistance. All such content is reviewed, edited, and approved by a human at Atine Labs™ before publication. We do not publish unreviewed AI output.
No automated decisions. We do not use automated systems to make decisions that materially affect individuals or organisations — such as credit scoring, eligibility, or contract terms — without human review.
7. Your Rights
What you can ask us to do with your data.
To exercise any right, email admin@atinelabs.tech with the subject line "Data Rights Request". We will respond within 30 days.
8. Contact & Escalation
Who to contact and how to escalate concerns.
9. Change Log
Material changes to this Trust Centre document.
| Date | Change | Author |
|---|---|---|
| October 2026 | Initial publication — Trust Centre created as part of Ecosystem Go-Live Wave 1. Covers data handling, hosting, subprocessors, retention, security, AI governance, rights, and contacts. | Atine Labs™ |
We will notify active pilot and client contacts of any material changes to data handling via email before the change takes effect.