01Who we are
ALGOCO LTD, trading as algoacquisition ("algoacquisition", "we", "us", "our") is a company registered in England and Wales under company number 16592736, with its registered office at 124-128 City Road, London, EC1V 2NX, United Kingdom. We run a done-for-you booked-meeting engine for business-to-business companies: we find buyers, run LinkedIn and email outreach, handle replies, call warm leads and book meetings onto our clients' calendars.
For the purposes of the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, the EU General Data Protection Regulation ("EU GDPR") and, where it applies, US state privacy law including the California Consumer Privacy Act as amended ("CCPA"), we are the controller of the personal data described in this policy, except where section 5 says we act as a processor for a client.
This policy covers algoacquisition.ai and its subdomains (including proof.algoacquisition.ai), our booking and checkout flows, our outreach activity, and any other place we link to it. Questions go to dave@algoacquisition.com.
02What we collect, and from whom
We handle personal data about four groups of people. The data is business-focused in every case. We do not seek out special category data (such as health, religion or political opinions) and ask you not to send it to us.
Website visitors
- Usage data: pages viewed, time on page, scroll depth, sections opened, clicks on calls to action, the calculator values you try, referring site, approximate location derived from IP address, device and browser type, and a pseudonymous visitor identifier.
- Technical data: IP address, user agent, screen size, language, and the parameters in the link you arrived from (for example, which campaign or team member sent you the link).
People who book a call, enquire or buy
- Contact and identity data: name, work email address, company, job title, telephone or mobile number, LinkedIn profile URL, time zone, and anything you type into a booking form, enquiry or onboarding form.
- Call data: notes and, where we tell you at the start, recordings and transcripts of strategy, onboarding and review calls.
- Transaction data: what you bought, when, the amount and currency, invoice and billing details. Card numbers are collected and stored by our payment processors, never by us.
- Messaging data: emails, LinkedIn messages, SMS and chat messages exchanged with us, and your preferences about how we contact you.
Prospects we contact on behalf of clients, or for ourselves
- Professional data: name, job title, employer, industry, work location, work email address, public LinkedIn profile details, company size and sector, and publicly available signals about the company (such as hiring, funding, expansion or job postings).
- Engagement data: whether a connection request was accepted, whether and how you replied, the content of the conversation, the outcome, and any calls made or meetings booked.
Clients and their teams
- Account data: names, roles, work contact details and login identifiers for the people we work with at a client, access credentials you choose to give us for platforms we operate for you, calendar links, Slack or Discord identities and the content of our shared channels.
Where it comes from
- Directly from you, through our website, forms, calls, email, SMS, LinkedIn and chat.
- Automatically, through cookies and similar technologies described in section 7.
- From public sources, chiefly LinkedIn and company websites, press releases, job boards and public registries.
- From business data providers and enrichment tools that supply professional contact and company data.
- From our clients, when they give us a list of accounts or people to contact, or a list to exclude.
- From our service providers, such as payment processors, booking and CRM tools.
03Why we use it and our legal basis
UK and EU law require a lawful basis for each use of personal data. The table sets out ours.
| Purpose | Data used | Legal basis |
|---|---|---|
| Running, securing and improving the website, measuring which pages and sections work | Usage and technical data | Legitimate interests (operating and improving our site). Consent where local law requires it for non-essential cookies. |
| Responding to enquiries, holding strategy calls and sending what you asked for | Contact, call and messaging data | Steps at your request before entering a contract; legitimate interests (responding to business enquiries). |
| Delivering our services to clients, including outreach, reply handling, calling and booking | Account, professional, engagement and messaging data | Performance of a contract with the client; legitimate interests (delivering what we were engaged to do). |
| Contacting business prospects about services relevant to their role, for ourselves or for a client | Professional and engagement data | Legitimate interests (business-to-business marketing to people in a professional capacity, with an easy way to opt out). See section 5. |
| Taking payment, invoicing, accounting and tax | Transaction and contact data | Performance of a contract; legal obligation (accounting and tax records). |
| Sending SMS about your call and our services, where you opted in | Mobile number, messaging data | Consent. See section 8. |
| Preventing fraud, abuse and misuse of our platforms and accounts | Technical, account and transaction data | Legitimate interests (protecting our business, clients and platforms); legal obligation. |
| Producing anonymised and aggregated statistics, benchmarks and case studies | Engagement and usage data, aggregated | Legitimate interests (understanding and demonstrating performance). Named case studies and testimonials are published only with the client's agreement. |
| Establishing, exercising or defending legal claims and complying with the law | Any of the above, as relevant | Legal obligation; legitimate interests (protecting our legal position). |
Where we rely on legitimate interests we have balanced them against your rights and interests. You can object at any time (section 12) and we will stop unless we have compelling grounds to continue.
04Outreach: when we contact you on behalf of a client
If you received a LinkedIn message, email, call or SMS from one of our campaigns, it is because your public professional profile indicated you hold a role our client (or we) sells to. We only ever use work-related details, we tell you who we are acting for, and one reply or click is enough to stop it.
When we run outreach for a client, the client decides who to target and why, and we act on their instructions. In that situation the client is the controller and we are their processor under a written data processing agreement. The client's own privacy notice applies to how they use the data once a conversation or meeting is handed over. If you want to exercise your rights over that data, contact us and we will forward your request to the client and help them respond, or deal with it ourselves where we can.
When we run outreach for our own business, we are the controller and this policy applies in full.
In both cases we:
- contact people only in their professional capacity, about matters relevant to their role;
- use professional contact details, never personal addresses or numbers we were not given;
- say who the message is from and on whose behalf it is sent;
- honour every opt-out immediately, across all channels we run, and keep a suppression record so you are not contacted again;
- honour client exclusion lists and do-not-contact lists;
- send within platform limits and the rules of the networks we use;
- operate within the laws that apply to electronic marketing, including the UK Privacy and Electronic Communications Regulations, the EU ePrivacy rules, the US CAN-SPAM Act and the Telephone Consumer Protection Act.
To opt out, reply to any message with "stop" or "unsubscribe", or email dave@algoacquisition.com. We may keep your name and contact detail on a suppression list so the opt-out sticks.
05AI and automated tools
Parts of our service use artificial intelligence: drafting and personalising outreach, classifying replies by sentiment, suggesting responses, transcribing and summarising calls, and prioritising which leads to call first. Humans supervise these tools, review campaigns before they run, and make the decisions that matter, including whether a lead is interested and whether a meeting is qualified.
We do not make decisions about you that have legal or similarly significant effects solely by automated means. AI providers we use process data under contract, do not use it to train models for others, and are listed under the categories in section 9.
06Cookies and analytics
We use a small number of cookies and similar technologies. None of them are advertising networks and none follow you around other websites to show you adverts.
| Tool | What it does | Type |
|---|---|---|
| PostHog (EU-hosted) | Product analytics: which pages, sections and calls to action are used, scroll depth, calculator use, and, where enabled, anonymised session replay with text inputs masked. Stores a pseudonymous ID. | Analytics |
| Whop | Checkout and attribution for our Solo plan, so a purchase can be matched to the page and link that led to it. | Functional / attribution |
| Cal.com | Embedded booking calendar. Sets what it needs to show your time zone and hold your booking. | Functional |
| Loom | Embedded video on some pages. Sets what it needs to play the video and remember playback. | Functional |
| Session and local storage | Remembers which link brought you here within a visit, and page preferences. | Strictly necessary |
You can block or delete cookies in your browser settings, and most browsers let you refuse third-party cookies entirely. Analytics respects browser Do Not Track and Global Privacy Control signals where our tools support them. Blocking functional cookies may stop the booking calendar or checkout working.
07SMS / text messaging
If you agree to receive text messages from algoacquisition, we use your mobile number only to contact you about your call and our services. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP, or reply HELP for help.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties.
How you opt in. By providing your mobile number and ticking the consent box on a booking or enquiry form, by replying to a text we send you, or by telling us verbally on a call that we may text you. We record the date, time and source of your consent.
What we send. Reminders and confirmations for calls you booked, replies to questions you asked us, follow-ups about our services, and account or onboarding messages if you become a client. We do not send texts unrelated to your relationship with us.
How to stop. Reply STOP to any message and you will receive one confirmation text and nothing further. Reply HELP for assistance, or email dave@algoacquisition.com. Standard carrier rates apply. Carriers are not liable for delayed or undelivered messages.
Who sees it. Messages are sent and received through our customer relationship system, which acts as our processor under contract. Your number and consent record are used for no other purpose and are not sold, rented, shared or disclosed to any third party or affiliate for their marketing.
08Who we share data with
We do not sell personal data, and we do not share it with third parties for their own marketing. We share it only as follows.
- Our clients, when you reply to or book a meeting through a campaign we run for them. The conversation and your professional details are passed to the client so they can hold the meeting.
- Service providers acting on our instructions, under contracts that restrict them to our purposes and require appropriate security. By category: cloud hosting and storage; analytics (PostHog); payments and checkout (Whop, Stripe); scheduling (Cal.com); customer relationship management, email, calling and SMS (including Close); LinkedIn and email sending tools; business data and enrichment providers; AI and transcription providers; team communication (Slack, Discord, Google Workspace); video hosting (Loom); accounting and e-signature tools.
- Professional advisers: lawyers, accountants, insurers and auditors, where needed.
- Authorities and others where the law requires, or where necessary to protect our rights, our clients, our users or the public, or to detect and prevent fraud or abuse.
- A buyer or successor if we sell, merge or reorganise our business, in which case this policy continues to apply.
Our team includes staff and contractors in several countries who access data only as needed for their role and under confidentiality obligations.
09International transfers
We are based in the United Kingdom and serve clients and prospects mainly in the United States, the United Kingdom and Europe. Some of our service providers and team are outside the UK and European Economic Area, including in the United States.
Where personal data protected by UK or EU law leaves the UK or EEA, we rely on one or more of: an adequacy decision; the UK International Data Transfer Agreement or Addendum; the EU Standard Contractual Clauses; and the UK Extension to the EU-US Data Privacy Framework where the recipient is certified. We also apply additional safeguards where a transfer risk assessment calls for them. You can ask us for a copy of the relevant mechanism.
10How long we keep it
| Data | Retention |
|---|---|
| Website analytics | Up to 24 months, then deleted or fully aggregated. |
| Enquiries and booking data where no engagement follows | Up to 24 months from last contact. |
| Outreach and engagement data on prospects | For the life of the campaign plus up to 24 months, so that we can honour opt-outs, avoid re-contacting people and report to clients. Suppression records are kept indefinitely so an opt-out holds. |
| Client account and campaign data | For the engagement plus 6 years after it ends, for contract, dispute and audit purposes, or returned or deleted earlier on the client's instruction where the law allows. |
| Call recordings and transcripts | Up to 24 months, unless needed for a dispute. |
| Transaction, invoicing and tax records | 6 years after the end of the financial year they relate to, as UK law requires. |
| SMS consent records | For as long as we hold your number, plus 4 years after the last message, so we can evidence consent. |
When data is no longer needed we delete it or anonymise it so it no longer identifies you.
11Security
We protect personal data with measures appropriate to the risk, including encryption in transit, access controls based on role, two-factor authentication on our core systems, logging, staff and contractor confidentiality obligations, and contracts with every processor. Client platform credentials we are given are stored in a password manager with restricted access and are never written into our tracking or messaging systems.
No method of transmission or storage is completely secure. If we become aware of a breach that is likely to put your rights at risk we will notify you and the relevant regulator as the law requires.
12Your rights
Depending on where you live you may have the right to:
- Access the personal data we hold about you, and receive a copy;
- Correct data that is inaccurate or incomplete;
- Delete your data, in certain circumstances;
- Restrict or object to our processing, including objecting at any time to direct marketing, which we will always honour;
- Port data you gave us to another provider, in a machine-readable form;
- Withdraw consent at any time where consent is our basis, without affecting what was done before;
- Not be discriminated against for exercising any of these rights.
If you are in the UK or EEA
You can complain to the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority. We would appreciate the chance to address your concern first.
If you are in California or another US state with a privacy law
We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of on that front, and we treat Global Privacy Control signals as an opt-out in any event. In the preceding 12 months we have collected the categories of personal information listed in section 2 for the purposes in section 3, and disclosed them to the categories of recipient in section 9 for business purposes only. You can exercise your rights to know, delete, correct and limit by emailing us. You may use an authorised agent; we will ask for proof of authorisation and verify your identity.
How to exercise them
Email dave@algoacquisition.com with "privacy request" in the subject. We will verify your identity using the information we already hold, respond within one month (UK and EU) or 45 days (US), and tell you if we need longer. Requests are free unless they are manifestly unfounded or excessive.
13Children
Our website and services are for businesses and the people who work in them. They are not directed at anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
14Third-party sites and platforms
Our site links to and embeds third-party services, including LinkedIn, Whop, Cal.com and Loom. Their privacy policies govern what they collect when you use them. We do not control those services and are not responsible for their practices.
15Changes to this policy
We may update this policy as our services, suppliers or the law change. The date at the top shows the current version. If a change materially affects how we use data you already gave us, we will tell you by email or a notice on the site before it takes effect. Continued use of our site or services after that is acceptance of the updated policy.
16Contact
- Controller
- ALGOCO LTD, trading as algoacquisition
- Company number
- 16592736 (England and Wales)
- Registered office
- 124-128 City Road, London, EC1V 2NX, United Kingdom
- Privacy enquiries
- dave@algoacquisition.com
- SMS opt-out
- Reply STOP to any message