Legal
Privacy Policy
This policy was published on April 9, 2026.
Haiven Ltd operates the XLerate website at haiven.uk. We are the controller of personal data obtained through this website, which means we are responsible for deciding how and why that data is used. This privacy policy applies to the public website only. Authenticated product services, licensed deployments, and customer-specific commercial relationships may be governed by separate terms, notices, and data-protection documentation.
Who we are
Haiven Ltd is a company registered in United Kingdom. Our website presents the XLerate product family and provides information about XLerate DNA, our initial public product offering.
What this policy applies to
This policy covers information collected through the public website, including enquiries submitted through the contact form, operational website analytics where you consent to them, and basic technical logs required to keep the site secure and available. It does not replace customer-facing SaaS terms, licensing materials, or negotiated contractual data-processing terms.
Personal data we collect
Depending on how you use the website, we may collect and use the following categories of personal data:
- business contact data such as your name, email address, organisation, and any contact details you send to us;
- the content of any enquiry, message, or feedback that you submit through the website or by email;
- technical and usage information about how you access and use the public website;
- analytics information derived from your use of the website, but only where you have opted in to analytics.
How we collect your personal data
We collect personal data directly from you when you contact us, submit the contact form, or otherwise correspond with us.
We also collect limited technical information indirectly when you browse the website, including standard server-side operational logging and, where you have consented, privacy-aware analytics through our configured analytics provider.
How and why we use your personal data
Under applicable data-protection law, we only use your personal data where we have a lawful basis for doing so.
- To respond to product or commercial enquiries and take steps at your request before entering into a contract.
- To operate, secure, and maintain the website and associated systems.
- To retain records of communications relevant to legitimate commercial discussions.
- To understand website usage patterns through analytics, but only when you have consented to analytics tracking.
- To comply with legal, regulatory, and information-security obligations.
Cookies and analytics
The website uses essential cookies for security and consent management. Optional analytics is disabled by default and is only activated after you consent. You may change your preference at any time using the cookie settings controls on the website. For further information, please see our Cookies Policy.
Who we share your personal data with
We may share personal data with service providers and advisers where necessary to run the website and our business, including:
- website hosting, infrastructure, and email-delivery providers;
- professional advisers such as lawyers, accountants, or auditors where disclosure is necessary and proportionate;
- prospective buyers, investors, or restructuring counterparties where disclosure is necessary for a significant corporate transaction.
We only allow service providers to handle personal data where we are satisfied they apply appropriate confidentiality and security measures and where they act under suitable contractual restrictions.
International transfers
We prefer self-hosted and UK/EU-friendly operational models, but some supporting providers may process data outside the UK or EEA. Where that happens, we will use an appropriate lawful transfer mechanism, such as adequacy decisions, standard contractual clauses, or another valid basis recognised by applicable law.
How long we keep personal data
We do not keep personal data for longer than necessary for the purpose for which it was collected. Enquiry records, security logs, and consent records are retained for appropriate operational, commercial, and compliance periods, after which they are deleted or anonymised.
Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict, object to, or transfer your personal data.
You may also withdraw consent that you have given for analytics or other optional processing. Withdrawing consent does not affect processing already carried out lawfully before consent was withdrawn.
Complaints
We hope to resolve any privacy concern directly. You also have the right to complain to the Information Commissioner's Office in the UK or to another competent supervisory authority where applicable.
How to contact us
If you have questions about this privacy policy or wish to exercise a data-protection right, contact us at privacy@haiven.uk.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the published date shown above.