Privacy Policy
Last updated: March 2026
1. About Us & Data Controller
Alltoogether is the trading name of All Toogether Ltd, a UK company regulated by the Financial Conduct Authority (FCA). We are an appointed representative of Sante Partners Ltd under FCA numbers 946194 and 914023 respectively.
Registered Address:
Jactin House, 24 Hood Street, Manchester, M4 6WX, United Kingdom
Contact Email:
hello@alltoogether.com
We are a data controller under UK data protection law (Data Protection Act 2018 and UK GDPR). We are not currently registered with the Information Commissioner's Office (ICO), but we comply fully with all requirements of UK data protection law.
2. What Data We Collect
We collect personal data in the following ways:
Contact Form Data
- Name, email address, company name, and job title
- Phone number (optional)
- Any message content you provide
- Enquiry type and subject matter
Platform Account Data
- Login credentials (email and password hash)
- Account profile information
- Company/firm information
- User role and permissions
Intelligent Wellbeing Engine (IWE) Data
- Employee survey responses relating to health and wellbeing
- Aggregated and anonymised wellbeing metrics
- Data is collected only with explicit employee consent
- Individual responses are not visible to employers (only team-level aggregated data is shared)
Newsletter & Marketing
- Email address for newsletter signups
- Source page (page you signed up from)
- Timestamp of signup
- Communication preferences
Cookies & Analytics
- Session cookies for website functionality
- Analytics data via third-party services
- Browser type, IP address, pages visited
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract: Processing necessary to provide the Alltoogether platform and services you've engaged us to deliver
- Legitimate Interest: Understanding user needs, improving our services, and preventing fraud or misuse
- Consent: For newsletter signups (opt-in via consent checkbox) and marketing emails (you can withdraw consent at any time via the unsubscribe link in each email)
- Vital Interests: For IWE health and wellbeing data, where the data relates to supporting employee wellbeing
- Legal Obligation: Compliance with FCA requirements and other regulatory obligations
4. How We Use Your Data
- Providing and maintaining the Alltoogether platform
- Communicating with you about our services
- Sending marketing communications (with consent)
- Processing IWE wellbeing surveys and generating anonymised insights
- Analyzing usage patterns to improve our services
- Complying with legal and regulatory obligations
- Preventing fraud, abuse, or other unlawful activity
- Responding to enquiries and support requests
5. Data Sharing & Processors
We may share your personal data with the following third parties (data processors):
Essential Service Providers
- PostgreSQL Database: Database hosting and storage (data stored in EU regions)
- Resend: Transactional email delivery
- Netlify: Website hosting and deployment
Principal FCA Regulated Entity
- Sante Partners Ltd: We share relevant firm and client data as required, since we are their appointed representative under FCA regulations
All processors are contractually bound to process data only as instructed and to maintain appropriate security measures.
Data Storage: All data is stored on PostgreSQL databases hosted in EU regions.
6. Data Retention
- Contact Form Enquiries: Retained for 2 years for business records
- Platform Account Data: Retained while your account is active, deleted within 30 days of account closure
- IWE Survey Data: Retained for the duration of your organisation's engagement, then deleted or anonymised
- Marketing/Newsletter Data: Retained until you unsubscribe, then deleted within 30 days
- System/Server Logs: Retained for up to 90 days for security and troubleshooting
7. Your Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights:
Right of Access
You can request a copy of all personal data we hold about you.
Right of Rectification
You can request that we correct inaccurate or incomplete data.
Right of Erasure
You can request deletion of your personal data (subject to legal obligations).
Right to Restrict Processing
You can request that we limit how we use your data.
Right to Data Portability
You can request your data in a structured, portable format.
Right to Object
You can object to processing for marketing or legitimate interest purposes.
Right to Withdraw Consent
For any processing based on consent (such as marketing emails), you can withdraw consent at any time.
To exercise any of these rights, please contact us at hello@alltoogether.com. We will respond within 30 days.
8. Cookies & Tracking
Our website uses essential cookies only to support basic functionality:
- Essential/Necessary Cookies: Required for website functionality (session management, user preferences, security)
We currently do not use analytics or marketing cookies. Should we implement analytics or marketing tracking in the future, we will obtain your explicit consent first through a cookie consent banner.
You can control cookies through your browser settings. Disabling essential cookies may affect site functionality.
9. Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These include encryption, secure authentication, and limited access controls. However, no system is entirely secure, and we cannot guarantee absolute protection.
10. Complaints & Regulators
If you believe we have mishandled your personal data or breached data protection law, you can:
For FCA-regulated concerns, you can contact the Financial Conduct Authority directly.
11. Children & Vulnerable Adults
Our platform is not intended for individuals under 18 years of age. We do not knowingly collect data from children. If we become aware that a child has provided personal data, we will delete it promptly.
12. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by updating the "Last updated" date at the top of this page and, where appropriate, by email.
13. Contact Us
For any questions about this privacy policy or your personal data, please contact:
All Toogether Ltd t/a Alltoogether
Email: hello@alltoogether.com
Address: Jactin House, 24 Hood Street, Manchester, M4 6WX