Privacy Policy

1. Who we are

Lowha Limited (“Albatross”, “we”, “us”) is the data controller for the personal data described in this policy. We are registered in England and Wales under company number 17228580, with a registered office at 59 Swanswell Road, Solihull, England, B92 7ET.

For any privacy question, or to exercise any right described below, contact us at hello@albatrosss.ai.

2. The most important thing in this policy

The Albatross appliance runs artificial intelligence models locally, on hardware you own, on your own network. It serves an interface on your local network only and is not exposed to the public internet.

We do not receive, store, process or have access to the prompts, documents, images, files or outputs that your business puts into your appliance. There is no pipeline carrying that content back to us. Where your business processes personal data using the appliance, your business is the data controller for that processing and we are not a processor of it.

Two exceptions, both of which are in your control:

• Optional hosted routing. The client application can optionally send an individual request to a third-party hosted AI provider instead of your local appliance. This only happens when a user actively chooses it for that request. When they do, that request is subject to the third-party provider's own terms and privacy policy, not this one.
• Support. If you ask us to diagnose a problem, we may ask you to send us logs or a sample file. We only ever receive what you deliberately send us, and we delete it once the issue is resolved.

3. Personal data we do collect

3.1 When you contact us

Your name, business name, email address, telephone number and whatever you choose to tell us about your business and your requirements.

3.2 When you book a consultancy visit

Your name, business name, email address, telephone number, the address we are visiting, the time slot chosen and anything you tell us in the booking form. Booking and payment are handled on our behalf by Calendly and Stripe — we receive the booking details and a record of payment, but never your card details.

3.3 When you order

Billing and delivery details, order reference, configuration chosen, installation address and site contact, and a record of payment. Card details are handled by our payment provider and are never stored by us.

3.4 When we support you

Correspondence with us, your appliance serial number, warranty and service history, and any diagnostic information you send us.

3.5 When you visit this website

Standard server and analytics information: IP address, browser type, pages viewed, referring page and approximate location derived from IP. See section 8 on cookies.

4. Why we use it, and our lawful basis

• To respond to your enquiry — legitimate interests (responding to a request you made of us).
• To supply, deliver and install what you ordered — performance of a contract with you.
• To provide warranty and support — performance of a contract, and our legitimate interest in supporting our products.
• To meet accounting, tax and product compliance duties — legal obligation (including our obligations as manufacturer of record under UK product safety and WEEE regulations).
• To send you occasional updates about our products — legitimate interests where you are an existing business customer, or consent where you have opted in. You can opt out at any time.
• To keep this website working and improve it — legitimate interests, and consent for any non-essential cookies.

5. Who we share it with

We do not sell personal data. We share it only where necessary, with:

• Our manufacturing partner — your delivery name, address, contact and the configuration ordered, so your unit can be built and shipped to you directly.
• Couriers — delivery details and a contact number.
• Our payment provider (Stripe) — to take and reconcile payment. Card details go directly to them and are never held by us.
• Our scheduling provider (Calendly) — to offer appointment slots, take the booking and send your confirmation.
• Our accountants and professional advisers — where required.
• Public authorities — where we are legally required to disclose.

Each of these acts under contract and may only use the data for the purpose we gave it to them for.

6. Where it is stored

We store personal data within the UK and European Economic Area wherever possible. Where a supplier processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

7. How long we keep it

• Enquiries that do not become orders — up to 24 months from last contact.
• Order and transaction records — 7 years, to meet HMRC requirements.
• Warranty and support records — the warranty term plus 2 years.
• Product compliance records — 10 years from the last unit placed on the market, as required of a manufacturer.
• Marketing consent records — until you withdraw consent, plus 2 years as evidence of the withdrawal.

8. Cookies

We keep this site as light as possible. We use strictly necessary cookies required for the site to function, which do not need your consent. We do not run advertising or profiling cookies.

The booking calendar is an exception worth naming. The scheduling page embeds a Calendly widget, and Calendly sets its own cookies in your browser when that page loads so it can operate the booking. Those cookies are governed by Calendly's own cookie and privacy policies rather than ours. Only the booking page loads it — the rest of the site does not.

If we later introduce analytics or advertising cookies we will ask for your consent first through a cookie banner, and you will be able to refuse without losing access to the site. You can also block or delete cookies through your browser settings.

9. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have data erased, where there is no overriding reason to keep it;
• restrict or object to how we use it;
• receive it in a portable, machine-readable format;
• withdraw consent at any time, where consent is our lawful basis.

Email hello@albatrosss.ai and we will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.

10. Security

We apply appropriate technical and organisational measures to protect personal data, including access control, encryption in transit, and limiting access to those who need it. No system is perfectly secure, but the architecture of our product deliberately minimises what we hold in the first place — the most reliable protection for your business data is that it never leaves your building.

11. Changes to this policy

We will update this page when our practices change and revise the date below. Material changes affecting existing customers will be notified by email.

Last updated 17 August 2026 · Lowha Limited · 59 Swanswell Road, Solihull, England, B92 7ET