ALTERED CARBON PRIVACY POLICY
This policy explains what personal data Altered Carbon Limited collects, why, and what rights you have over it — both as a visitor to this website and as a customer or end user of our AIRaware and LEAKaware sensor platforms.
Last updated: 11 August 2026
Who we are
This website is operated by Altered Carbon Limited (“Altered Carbon”, “we”, “us”, “our”), a company registered in England with company number 11362774, whose registered office is at Henleaze Business Centre, Harbury Road, Bristol, Avon, England, BS9 4PN. Altered Carbon is the data controller for the personal data described in this policy unless stated otherwise.
Altered Carbon builds and operates IoT sensor platforms, including AIRaware (mould and air-quality risk monitoring) and LEAKaware (water-leak detection), which we supply to commercial and residential customers under a separate services agreement (our Terms & Conditions). This policy explains how we handle personal data both for visitors to this website and for customers and end users of our sensor platforms.
What data we collect
Website visitors: if you browse this website, we may collect standard technical data (IP address, browser type, device type, pages visited, referring site) via cookies and analytics tools, as described in the Cookies section below. If you submit an enquiry through a contact form, we collect the name, email address, and any other details you choose to provide, so that we can respond to you.
Customers and account contacts: where an organisation becomes an Altered Carbon customer, we collect the names, job titles, email addresses, phone numbers, and billing details of the individuals who administer the account, order hardware, or receive alerts and reports on the organisation’s behalf. As set out in our Terms & Conditions, each party (Altered Carbon and the customer) acts as an independent data controller of this administrative contact data and processes it in accordance with its own privacy policy.
Sensor data (Raw Data and Processed Data): our AIRaware and LEAKaware hardware, once installed at a customer’s premises, collects environmental sensor readings (“Raw Data”) such as temperature, humidity, mould risk indicators, water-leak events, and device/gateway health telemetry (e.g. signal strength, firmware version, battery level). We process this Raw Data to produce risk scores, alerts, trends, and reports (“Processed Data”) made available to the customer through our dashboards and mobile app.
Sensor readings are tied to a device and a location, not to an individual, and are not designed to identify a specific person. Where a customer configures the platform so that readings can reasonably be linked to an identifiable individual (for example, a named tenant associated with a monitored property), that data is personal data for the purposes of data protection law, and the customer — as the party who determines who is monitored and why — is the data controller for that data. Altered Carbon acts as a data processor in that context, processing the data only on the customer’s instructions and in line with our services agreement.
As set out in our Terms & Conditions, all intellectual property rights in Raw Data and Processed Data vest in Altered Carbon, subject to the licence we grant the customer to use that data in connection with the Solution. We may also use anonymised, aggregated sensor data (Public Datasets) across our customer base for research, product improvement, and marketing purposes; we do not sell or share identifiable Raw Data or Processed Data with third parties for their own marketing purposes.
Media
If you upload images to this website (for example, through a job application or support request), you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website could otherwise download and extract location data from images shared on the site.
Why we process your data
We rely on the following legal bases under UK GDPR:
Performance of a contract — to supply the Solution to our customers, respond to enquiries, and manage accounts and billing.
Legitimate interests — to operate, secure, and improve our website and sensor platforms, including detecting device faults and preventing misuse; and to send relevant service updates.
Consent — for non-essential cookies and, where applicable, marketing communications, which you can withdraw at any time.
Legal obligation — where we are required to retain or disclose data by law, for example for tax or regulatory purposes.
Who we share your data with
We share personal data only where necessary, with:
Infrastructure and hosting providers who store and process data on our behalf under contract (including our cloud and server hosting providers);
Email, push-notification, and SMS providers used to deliver alerts and account communications;
Payment processors, where a purchase is made through our website or store; and
Professional advisers, auditors, and regulators, where required by law.
We do not sell personal data. Any sharing of sensor-derived Public Datasets with other Altered Carbon clients is done on an anonymised, aggregated basis only, as described above.
International transfers
Where a service provider we use is located outside the UK or European Economic Area, we ensure an appropriate safeguard is in place, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, before any personal data is transferred.
How long we keep your data
We retain website enquiry data for as long as needed to handle your enquiry and for a reasonable period afterwards in case of follow-up. Customer account and billing data is retained for the duration of the services agreement and for a period afterwards to meet our legal and accounting obligations. Sensor Raw Data and Processed Data are retained in line with our services agreement; on termination of that agreement, the customer is required to delete Processed Data from their own systems, and Altered Carbon may retain non-personal data indefinitely as permitted by the agreement.
Your rights
Subject to legal exemptions, you have the right to: request access to the personal data we hold about you; request that we correct inaccurate data; request erasure of your data; request that we restrict or object to processing; and request a portable copy of data you provided to us. Where processing is based on consent, you can withdraw that consent at any time.
To exercise any of these rights, contact us using the details below. If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
Cookies
If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies for your convenience. These cookies last for one year. If you visit our login page, we set a temporary cookie to check whether your browser accepts cookies; it contains no personal data and is discarded when you close your browser.
When you log in, we also set cookies to save your login information and screen display choices. Login cookies last for two days, and screen option cookies for a year; selecting “Remember Me” extends this to two weeks. If you edit or publish content, an additional cookie is set that contains no personal data and expires after one day.
We may also use analytics cookies to understand how visitors use this website. Where these are non-essential, we will ask for your consent via a cookie banner before setting them.
Embedded content and comments
Pages on this site may include embedded content (for example, videos or social posts) from other websites, which behaves as if you had visited that other website directly — it may collect data about you, use its own cookies, and monitor your interaction with the embedded content.
When visitors leave comments on the site, we collect the data shown in the comment form, plus the visitor’s IP address and browser user-agent string, to help detect spam. An anonymised string created from your email address may be checked against the Gravatar service to see if you use it; the Gravatar privacy policy is available at automattic.com/privacy. If your comment is approved, your profile picture is visible publicly alongside your comment.
Where your data is sent
Visitor comments and form submissions may be checked through an automated spam-detection service before being processed.
Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including encryption in transit, access controls, and regular review of our systems.
Children
Our website and services are intended for business and residential customers and are not directed at children. We do not knowingly collect personal data from children.
Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The “last updated” date at the top of this page shows when it was last revised. We encourage you to review this page periodically.
Contact us
If you have any questions about this policy or how we handle your data, or would like to exercise any of your rights, please contact us at enquiries@altered-carbon.com or write to us at: Altered Carbon Limited, Henleaze Business Centre, Harbury Road, Bristol, Avon, England, BS9 4PN.