Last updated: 20 September 2026.

Privacy Notice

Who we are

This notice is issued by Orchid Labs Ltd, company number 17283133, trading as ATHENA AI Risk, website https://athenarisk.co.uk. We are the controller of personal data described here. We sell online services to organisations buying in the course of business. We do not sell to private consumers.

UK GDPR and the Data Protection Act 2018 apply. Contact: policy@athenarisk.co.uk · 020 8040 3032 · Registered office 124 City road, London. EC1V 2NX.

What we collect

  • Account and contact: name, work email, telephone, organisation name, and the fact that you have authority to buy.
  • Order and billing metadata. Card numbers are taken by Stripe, not stored by us.
  • Assessment answers, reports, dashboard views and tickets you raise.
  • Booking details for sessions.
  • Essential technical data needed to run the site (including login cookies). See the Cookie Policy.
  • Feedback you choose to send us, so we can improve the service.

Do not upload special-category data or other people’s personal files unless we have agreed in writing. The assessment is about your organisation’s AI posture, not employee files. If that material arrives anyway, you are responsible for it and we may delete it.

How we collect it

You give us most of it when you register, buy, complete an assessment, open a ticket, book a session or email us. Processors named below send us what they need to confirm payment, hosting, tickets or bookings. We do not buy mailing lists.

How we use it and the lawful basis

  • To deliver the service you bought — contract.
  • To run accounts, security of the service, and records we must keep — legitimate interests and legal obligation.
  • Marketing about our own services only if you have agreed, or where the law allows a B2B contact to be emailed about similar services. You can opt out at any time by emailing policy@athenarisk.co.uk with the subject Unsubscribe. We do not send marketing for other businesses and we do not sell your data.

We do not use the content you enter in an assessment, report or dashboard to train our models or any third-party model.

Who we share it with

We share personal data only with processors who need it to deliver the service:

  • Stripe — payment.
  • Our hosting provider is UK based — site and application hosting.
  • Google (Forms) — collecting your data and storing.
  • Third party licencing through our UK hosting provider — support tickets.
  • Third party licencing through our UK hosting provider — session booking.
  • Email Accounts – our UK hosting provider
  • Security on landing – third party cookie software and security software

They receive only what they need for that job. We do not pass your data to anyone for their marketing. We do not use credit reference agencies.

Where and how long

Data is stored on our systems and those of the processors above. We keep assessment, dashboard and account content while your account is live and for 12 months after it ends, unless a dispute or ticket is still open. We keep invoices and accounting records for six years after the end of the relevant tax year. When a period ends we delete or irreversibly anonymise what we no longer need. Backups lag behind live systems for a short period.

Your rights

You can ask for a copy of your personal data, a correction, deletion, restriction, objection or a portable copy, in the conditions set by UK GDPR. The first copy of your data is free. We may refuse or charge only if a request is manifestly unfounded or excessive. We have one month to reply. Email policy@athenarisk.co.uk.

You can complain to the Information Commissioner’s Office: ico.org.uk, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Cookies and other sites

Cookie detail is on our Cookie Policy page. https://athenarisk.co.uk/cookie-policy (or the Cookie Policy link in the footer).

Links to other websites have their own notices. Ours applies only to athenarisk.co.uk and the services we provide there.

Changes

We will put updates on this page. Last updated 20 September 2026.

Contact

policy@athenarisk.co.uk · 0208040 3032 · Orchid Labs Ltd, 124 City road, London, EC1V 2NX .