Last updated: 8 October 2026
About this policy
This Privacy Policy explains how we collect, use and protect personal information when you visit alioca.com (the "Site"), contact us or work with us. We have written it in plain language. If anything is unclear, email us at hello@alioca.com.
Who we are
Alioca is a product of Hallridge Holdings LLC, a Wyoming limited liability company ("Alioca", "we", "us" or "our"). We are responsible for the personal information described in this policy, and this policy is governed by the laws of the State of Wyoming and applicable United States federal law. Under the EU General Data Protection Regulation (GDPR) we act as the "controller", and under South Africa's Protection of Personal Information Act (POPIA) we act as the "responsible party".
Hallridge Holdings LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA. Email: hello@alioca.com.
When we process personal information on a client's behalf as part of a project (for example, data held in a platform we build or operate for them), the client is usually the controller, and our written agreement with that client governs that processing.
What we collect
- Contact form: When you use the contact form on the Site, we collect your name, email address, a short description of what you are building, an optional budget range and your message. The form software may also record technical details with your submission, such as your IP address, browser type and the page you sent it from, to help prevent spam and abuse.
- Email and project communications: When you email us or work with us, we collect your name, email address, the content of your messages and any information you choose to share, such as your company name, role and project details.
- Client and billing information: If you become a client, we keep the information needed to agree and manage the engagement, such as contract details, invoices and payment records.
- Server logs: Like most websites, our hosting servers automatically record technical information when you visit, such as your IP address, browser type, device information, pages requested, referring page, and date and time of access.
- Cookies and similar technologies: Ordinary visitors are not given any cookies. The Site uses a small amount of browser storage that it needs to work, and WordPress sets login cookies only for site administrators. See our Cookie Policy for details.
We do not knowingly collect sensitive information (such as health data, or information about race, religion or political views), and we ask you not to send it to us.
We do not use analytics, advertising or tracking tools on the Site, such as Google Analytics, Google Tag Manager or tracking pixels. If we decide to add one, we will update this policy and our Cookie Policy first, and ask for your consent where the law requires it.
Why we use it and our legal bases
Data protection laws such as the GDPR and POPIA require us to have a lawful reason to use your information. Our reasons are:
- To reply to your enquiry and discuss a possible engagement. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us.
- To deliver and manage an engagement, including communication, invoicing and record keeping. Legal basis: performing our contract with you or your organisation.
- To run, secure and improve the Site, including preventing spam and abuse and fixing technical problems. Legal basis: our legitimate interest in operating a secure, working website.
- To meet legal obligations, such as tax and accounting rules, and to establish or defend legal claims. Legal basis: legal obligation and legitimate interests.
- Where we ask for your consent, for example for any optional cookies or occasional updates. Legal basis: consent, which you can withdraw at any time.
We do not sell your personal information, and we do not use it for automated decision-making that has legal or similarly significant effects on you.
Who we share it with
We share personal information only where needed, with:
- Our hosting provider, Hetzner Online GmbH, which stores the Site, its database (including contact form submissions) and server logs on servers in Germany.
- Our email provider, also Hetzner Online GmbH, which handles messages sent to and from hello@alioca.com on servers in Germany.
- Google Fonts: The Site loads its fonts from Google's servers (fonts.googleapis.com and fonts.gstatic.com). When your browser requests these fonts, Google receives your IP address and basic browser information. See Google's Privacy Policy.
- WordPress.org: If your browser cannot display emoji itself, WordPress may load emoji images from WordPress.org's servers (s.w.org), which then receive your IP address and basic browser information. Our icons, including Font Awesome, are hosted on our own server and do not involve a third party.
- Specialist team members and contractors who work on a client project under confidentiality obligations, only to the extent needed for that project.
- Professional advisers, such as accountants and lawyers, under confidentiality obligations.
- Authorities, where we are required by law, or need to protect our rights, our users or the public.
- A successor business, if all or part of our business is sold or reorganised, subject to this policy.
Where service providers process data on our behalf, we expect them to protect it and to use it only to provide their services to us.
How long we keep it
- Contact form submissions and enquiry emails that do not lead to an engagement: up to 24 months after our last contact.
- Client records and project communications: for the length of the engagement and up to 7 years afterwards, to meet tax, accounting and legal requirements.
- Server logs: up to 90 days, unless needed longer to investigate a security issue.
- Cookies: as set out in our Cookie Policy.
When we no longer need information, we delete it or make it anonymous.
International transfers
We are based in the United States. Our hosting and email provider stores data in Germany, within the European Union, and other service providers and specialist teams may be located in other countries. This means your information may be transferred to, and processed in, countries outside your own, including the United States, which may not have the same data protection laws as yours.
Where the GDPR or POPIA applies, we take steps to make sure transfers are lawful and your information remains protected, for example by relying on adequacy decisions, our providers' standard contractual clauses, the EU-US Data Privacy Framework where a provider participates in it, or equivalent safeguards where required. Some transfers may also be necessary to respond to your enquiry or perform a contract you asked for.
Your rights
Depending on where you live, you may have some or all of the following rights:
- Access: ask for a copy of the personal information we hold about you.
- Correction: ask us to correct information that is inaccurate or incomplete.
- Deletion: ask us to delete your information, where we have no good reason to keep it.
- Restriction: ask us to limit how we use your information in certain cases.
- Objection: object to our use of your information based on legitimate interests, and to direct marketing at any time.
- Portability: ask for information you gave us in a commonly used electronic format.
- Withdraw consent: where we rely on consent, withdraw it at any time. This does not affect earlier use.
If you are in the EU, these rights come from the GDPR. You also have the right to complain to your local data protection authority. We would appreciate the chance to resolve your concern first.
If you are in South Africa, POPIA gives you the right to know whether we hold your information, to access it, to ask for it to be corrected or deleted, to object to its use, and to complain to the Information Regulator (South Africa).
If you are in the United States, some state privacy laws give residents rights to know about, access, correct and delete their personal information, and to opt out of the sale of personal information or its use for targeted advertising. We do not sell personal information or use it for targeted advertising. Whether a particular state law applies to us depends on its thresholds, but we will consider any request you send us. We will not discriminate against you for exercising your rights.
To make a request, email hello@alioca.com. We may need to verify your identity before responding. We aim to respond within one month, or sooner if the law where you live requires it.
Security
We use reasonable technical and organisational measures to protect personal information, such as access controls and keeping software up to date. The whole Site is served over an encrypted connection (HTTPS), and any request made over plain HTTP is automatically redirected to HTTPS. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach is likely to affect your rights, we will notify you and the relevant authorities where the law requires it.
Children
The Site and our services are intended for businesses and adults. They are not directed at children under 18, and we do not knowingly collect personal information from children. If you believe a child has sent us information, please contact us and we will delete it.
Links to other sites
The Site may link to other websites. We are not responsible for their privacy practices, so please read their policies.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. If we make significant changes, we will take reasonable steps to let you know.
Contact
For any privacy question or request, email hello@alioca.com or write to Hallridge Holdings LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA.