Last updated: September 2026
1. Who We Are
CyberLiver Limited is the data controller responsible for the personal data collected through this website (alcochange.com). Our registered office is at Devonshire House, 582 Honeypot Lane, Stanmore, HA7 1JS, United Kingdom. Our company registration number is [Company Number] and we are registered with the Information Commissioner's Office under registration number [ICO Registration Number].
AlcoChange is a UKCA-marked Class IIa medical device and is available on prescription only.
2. Scope of This Policy
This privacy policy applies to visitors of the AlcoChange website (alcochange.com). It explains what personal data we collect when you browse the website, how we use it, and your rights in relation to that data.
Please note: if you are a patient enrolled in the AlcoChange programme, the processing of your clinical and health-related data is covered separately in the clinical data privacy notice provided to you at the point of enrolment. This website privacy policy does not cover that processing.
3. What Data We Collect
Website visitors
When you visit our website, we may collect the following categories of personal data:
- Technical data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of access, and time spent on pages.
- Cookie data: information collected through essential and (where you consent) optional analytics cookies. See our Cookies Policy for full details.
- Contact form data: if you submit an enquiry through our contact form, we collect your name, email address, organisation (if provided), and the content of your message.
What we do not collect through this website
We do not collect health data, clinical data, or any special category data through this website. Patient data is processed only within the AlcoChange application and clinician dashboard, under separate lawful bases and privacy notices.
4. Lawful Basis for Processing
We process your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 on the following lawful bases:
- Legitimate interests (Article 6(1)(f)): to operate and improve the website, to understand how visitors use the site, and to ensure website security. We have conducted a legitimate interests assessment and are satisfied that this processing does not override your rights and freedoms.
- Consent (Article 6(1)(a)): for the use of optional analytics cookies. You can withdraw your consent at any time through the cookie settings on this website.
- Contract (Article 6(1)(b)): to respond to your enquiries submitted through the contact form, where this is necessary to take steps at your request prior to entering into a contract.
5. How We Use Your Data
We use the personal data we collect for the following purposes:
- To provide and maintain the website
- To respond to enquiries you submit through the contact form
- To analyse website usage and improve our content and user experience (where you have consented to analytics cookies)
- To detect and prevent security incidents
- To comply with our legal obligations
6. Data Sharing
We do not sell your personal data. We may share your data with the following categories of recipients, only to the extent necessary for the purposes described in this policy:
- Website hosting providers: who host and maintain the website on our behalf
- Analytics providers: who help us understand website usage (only where you have consented to analytics cookies)
- Professional advisers: including legal, accounting, and IT security advisers, where necessary
- Law enforcement or regulators: where we are required to do so by law or to protect our legal rights
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Website analytics data: retained for a maximum of 26 months from the date of collection
- Contact form enquiries: retained for 24 months from the date of your last communication with us, unless a longer retention period is required by law or a continuing business relationship
- Server logs: retained for 12 months for security purposes
8. International Transfers
We store and process your personal data within the United Kingdom. Where any third-party service provider processes data outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR, such as standard contractual clauses approved by the Information Commissioner's Office or an adequacy decision.
9. Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access: to obtain a copy of the personal data we hold about you
- Right to rectification: to request correction of inaccurate or incomplete data
- Right to erasure: to request deletion of your personal data in certain circumstances
- Right to restrict processing: to request that we limit how we use your data
- Right to data portability: to receive your data in a structured, commonly used, and machine-readable format
- Right to object: to object to processing based on legitimate interests
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal
To exercise any of these rights, please see our Data Subject Access Requests page or contact us using the details below.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed. The ICO can be contacted at ico.org.uk.
10. Contact for Privacy Queries
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
- Email: privacy@alcochange.com
- Post: Data Protection, CyberLiver Limited, Devonshire House, 582 Honeypot Lane, Stanmore, HA7 1JS, United Kingdom
11. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
