How we handle your details when we contact you about your work

Who we are

SLJ Labs Limited, trading as Acelro. Registered in England and Wales, company number 16752473. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We are the controller of your details. Contact: privacy@acelro.com.

Why you are reading this

We contacted you by email about your work, from an @acelro.co.uk address. You did not give us your details, so the law requires us to tell you where they came from and what we do with them.

What we hold about you

Your name and job title, and the organisation you work for.
Your work email address.
The web page where we found your name and role.
The emails we send you, any reply you send, and their dates.
Notes of any call you agree to have with us.
If you ask us to stop, a record of that.
Details about your role that our CRM provider adds, described below.

We do not hold anything about your private life, and we do not buy contact lists or email addresses.

Where we got it

Your organisation's public website.
For universities and colleges, the Office for Students public register.
Companies House, to check the organisation's legal status.
Our CRM provider, Attio, which automatically adds details to our records using data it obtains from other providers, such as the organisation's size and sector and, for people, their job title and links to public professional profiles. We do not use it to find email addresses.
Sometimes your public LinkedIn profile, looked at by a person to check you still hold the role. We do not copy data from LinkedIn in bulk and we do not take email addresses from it.
If your email address was not published, we may have worked it out from the format your organisation uses for staff addresses. If so, the first email says so.
A colleague of yours, if they replied to one of our emails and suggested we contact you instead. If so, the first email says so.

Why we are contacting you

We are building software that gives each learner a hands-on project towards a job they want, reviewed step by step, so an employer or institution can open and inspect the finished work. Before launch we are offering a small number of organisations an unpaid pilot. We contacted you because your role looks like the one that would decide whether that is useful. If it is, we may later ask whether you would put your organisation's interest in writing, in a letter that does not commit anyone to anything.

Our lawful basis

Legitimate interests, under Article 6(1)(f) of the UK GDPR: our interest in telling organisations about our product and finding out whether it would help them. Before contacting anyone we wrote a legitimate interests assessment, weighing your interests against ours. You can ask for a copy.

We also keep a dated copy of the emails we send, as evidence of genuine interest in our product for organisations assessing our business. The lawful basis for that is also legitimate interests.

Who else sees your details

Attio, the customer-records system where we keep them. Attio Limited is a UK company (number 10719702). It holds the data on our behalf under contract. Attio runs on Google Cloud, contracted through Google Cloud EMEA Limited in Ireland, and uses other providers, several of them in the United States, for data enrichment and for AI features. Attio's data processing terms set the safeguard for each of those transfers, mainly the EU standard contractual clauses with the UK International Data Transfer Addendum. You can ask us for details of the safeguards that cover any transfer of your details outside the UK.
Google, which runs our email (Google Workspace). Your emails to and from us are stored there. Google does not promise to keep our email in the UK. Under its data processing terms, it may store and process our email in any country where Google or its providers have data centres, including the United States. For transfers to the United States, Google relies on its certification to the UK Extension to the EU-US Data Privacy Framework, which UK law treats as adequate. For any other country, the safeguards in Google's data processing terms apply, and you can ask us for details.
Organisations assessing our business, such as an endorsing body or a government department, only if they ask us for evidence that we contacted organisations. Where they accept it, we remove your name and address first.
Professional advisers such as our solicitor or accountant, if needed, and anyone we are required by law to share it with.

We never sell your details or pass them to anyone to market to you.

No automated decisions

Software does not make any decision about you. A person reads, writes and sends every message.

We do not track you

No tracking pixels, no altered links, no read receipts. We do not know whether you opened our email. We only know you read it if you reply.

How long we keep your details

If you never reply: your record is deleted 12 months after our last email. After that we keep only a copy of the email we sent you, with your name and email address removed, for the evidence purpose below.
If we are in touch: kept while we are talking or running a pilot, then deleted 24 months after our last contact, unless your organisation becomes a customer.
Copies of our emails kept as evidence of interest in our product: kept until the assessment they support is finished, and never more than 24 months after the email was sent. After 12 months, any evidence copy we keep has your name and email address removed.
If you ask us to stop: we keep your name, email address, organisation, the date you asked and how you asked, for as long as we do outreach. That is how we make sure nobody here contacts you again.

Your rights

To object. You can tell us to stop contacting you at any time. For marketing this right is absolute: we stop straight away, and at the latest by the end of the next working day, with no questions and no conditions. Reply to any of our emails with "stop", or email privacy@acelro.com. One word is enough.
To see what we hold about you, and have a copy.
To have it corrected if it is wrong.
To have it deleted. (If you also want us never to contact you again, we will keep only the short suppression record described above, and tell you so.)
To ask us to restrict what we do with it.

We reply to requests within one month. We act on a request to stop immediately, not within the month.

If you are unhappy with how we have handled your details, you can complain to us at complaints@acelro.com or through acelro.com/privacy/complaint, and we will acknowledge it promptly and normally give you a full answer within 30 days. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

If we change how we use your details, we will update this page and the date below.

Last updated: 2 October 2026