Privacy policy

1. Important information and who we are

Akur8 respects your privacy and is committed to protecting your personal data. This privacy policy outlines how we collect, use, and process your personal data when you visit our website or interact with our services. It also explains your privacy rights and how the law protects you.

We regularly review this privacy policy. This version was last updated on June 18, 2025. 

This policy complies with the General Data Protection Regulation (EU GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA).

Data Controller:
Akur8, SAS, registered with the Paris Trade and Companies Registrar under #841204720, is the controller of your personal data.

Contact:
We have appointed a Data Protection Officer (DPO) responsible for overseeing questions about this privacy policy. If you have any questions, please contact our DPO: dpo@akur8.com

Right to Complain to a Regulator: If you have concerns about how we process your personal data, you have the right to lodge a complaint with the relevant supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO), and in the EEA, it’s your local data protection authority.

‍

2. The data we collect about you

We may collect, use, store, and transfer various types of personal data, including:

• Identity data: First and last name.
• Contact data: Email address, phone numbers.
• Marketing and communications data: Preferences in receiving marketing materials and communication preferences.
• Technical data: IP address, browser type, and information collected via cookies (see our Cookie Policy).
• Customer data: Contact details and business information related to providing our services.
• Business contact data: Information relating to representatives of our clients, partners, and other business contacts.

Sensitive Data: We do not collect special categories of sensitive personal data (e.g., race, religion, health data) unless explicitly required for legal reasons or with explicit consent.

CCPA: In compliance with the CCPA, we do not sell personal information. We only collect personal data for business or legal purposes as specified.

‍

3. How we collect your personal data

• ‍Direct interactions: You provide data by filling out forms, corresponding with us, or during our service delivery.‍
• Automated technologies: We automatically collect data about your device and browsing via cookies. See our Cookie Policy for more information.‍
• Business contacts: We collect business data through direct communication with customers and partners in relation to our services.

‍

4. Legal bases for processing your personal data

We only process your personal data when legally permitted to do so. The legal bases for processing include:

• ‍Consent: Where you have provided your explicit consent (e.g., for marketing communications).‍
• Contractual Necessity: Where processing is necessary to fulfill a contract with you or to take steps before entering into a contract (e.g., providing services to customers).‍
• Legitimate Interests: For our legitimate business interests (e.g., analyzing website traffic or maintaining business relationships), unless these interests are overridden by your rights and interests.‍
• Legal Obligation: Where we need to comply with a legal or regulatory obligation (e.g., data retention requirements).

CCPA Notice of Collection: Under CCPA, we only use your data for specific business purposes and retain it for as long as needed to fulfill those purposes.

‍

5. How we use your personal data

We use your data in the following ways:

• ‍‍To provide and maintain our services (customer and business-related data).
• To respond to your inquiries and requests.
• To send you commercial information with your consent.
• To analyze website performance and improve user experience (technical data).
• To comply with legal obligations (e.g., data retention).

Marketing:
We may use your contact details to send you marketing communications (such as newsletters, product updates, or event invitations) related to our products and services.

In accordance with applicable laws:

• For individuals acting in a professional capacity (B2B), we may send such communications without prior consent, provided that they are relevant to your role or business and that you are given a clear opportunity to opt out at any time.
  
• For other individuals, we will obtain your prior consent before sending marketing communications, where such consent is legally required.

You can unsubscribe from marketing communications at any time by clicking the “unsubscribe” link in our emails or by contacting us at dpo@akur8.com.

We do not sell or share your personal data with third parties for their own direct marketing purposes.

‍

6. Recipients of personal data

We may share your personal data with:‍

• Third-party service providers: Who provide IT and system administration services, marketing services, or assist with business operations.
• Affiliates and group companies: We may share data within the Akur8 group for internal administrative purposes.
• Regulators and authorities: Where required by law or to protect our legal rights.

Where we share your data with third parties, we ensure they process it based on our instructions and in compliance with data protection laws.

‍

7. International transfers

For users in the EEA or UK, your data may be transferred outside these areas. We ensure equivalent protection by using approved transfer mechanisms (e.g., standard contractual clauses) when transferring personal data internationally.

For users in California, we follow similar data protection measures and do not transfer your data internationally without adequate safeguards.

‍

8. Data security

We have implemented appropriate security measures to protect your data from unauthorized access, loss, or misuse. Access to your personal data is restricted to employees, agents, and third parties who need the data to fulfill business operations.

In the event of a data breach, we will notify affected individuals and regulatory bodies as required by law.

‍

9. Data retention

We retain your personal data only as long as necessary to fulfill the purposes we collected it for, including legal, accounting, or reporting requirements. Specific retention periods depend on the type of data and the processing purposes.

‍

10. Your legal rights (GDPR and CCPA)

Under GDPR (UK and EU), you have the following rights:

• Right to access: Request access to your personal data.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data in certain circumstances.
• Right to object: Object to processing based on legitimate interests.
• Right to restrict processing: Request restriction of processing under specific conditions.
• Right to data portability: Request transfer of your data to another party.
• Right to withdraw consent: Withdraw your consent for data processing at any time.

For CCPA (California residents), you also have:

• Right to know: Request details about the personal data we collect.
• Right to delete: Request deletion of your personal data.
• Right to opt out of sales: Although we do not sell your data, you have the right to request this.

If you wish to exercise any of these rights, please contact us at dpo@akur8.com.

‍

11. Privacy Notice for Candidates

‍

When you apply for a role at Akur8 through our website or third-party platforms (e.g., Welcome to the Jungle, LinkedIn), we collect and process your personal data in accordance with applicable data protection laws (including the EU GDPR, UK GDPR, and CCPA where applicable). This includes:

• Contact information (e.g. name, email, phone number)
• Resume and career data (e.g. education, experience, skills)
• Interview notes and assessment data
• Technical data (via Ashby, our recruitment platform)
• Any other data you voluntarily provide

Your data is used for recruitment purposes based on our legitimate interest, or to take pre-contractual steps. It may also be retained with your consent for future opportunities. Data is stored securely and retained for up to 2 years, unless deletion is requested earlier.

International transfers may occur, with appropriate safeguards (e.g., SCCs). We limit access to authorized recruitment staff and third-party processors only (e.g., Ashby).

‍

12. Changes to the privacy policy

We may update this policy from time to time. If we make significant changes, we will notify you by posting a notice on our website or contacting you directly.