Acorda

Privacy notice

Last updated 19 October 2026

Registered name: ACORDA INTELLIGENCE LIMITED (company number 17348353, registered in England and Wales)

We are the controller of your personal data. This privacy notice tells you what to expect us to do with your personal information when you visit acorda.io, read our blog, subscribe to blog updates, get in touch through our careers page or email us from the site.

Contact details

Email: privacy@acorda.io

What information we collect, use, and why

You can read the whole site without giving us your name or email address.

We collect or use the following information to run our website and keep it secure, and to understand how it is used:

  • IP addresses
  • Website user journey information: which pages you visit, how you arrived (for example from a search engine or LinkedIn), your device and browser type, your approximate location (country or city, worked out from your IP address) and, on blog posts, how far down the post you read, how long the post is on your screen and what you click

The site is hosted by Google Firebase Hosting and loads its fonts from Google Fonts, so Google receives your IP address when your browser fetches a page. We measure how the site is used with Google Analytics and, on the blog, PostHog. Both use cookies (see Cookies). PostHog keeps the country and city it works out from your IP address but not the address itself. We look at analytics in aggregate. We do not use it to identify you, and we do not use it for advertising.

We collect or use the following information to send you blog updates, if you subscribe:

  • Your email address
  • Your marketing preferences
  • Records of consent: when you subscribed and confirmed your address, and the IP address you used
  • Whether you open our emails and click the links in them

The subscribe form sends your email address straight to our email provider, MailerLite. You are only added to the list after you click the confirmation link in the email we send you.

We collect or use the following information to consider you for a role, if you get in touch through our careers page:

  • Your name and email address
  • Where you are based
  • Any link you give us, such as your LinkedIn profile or your work
  • What you tell us about why you'd be a great fit

The careers form sends your answers to our founders by email and keeps a copy in a spreadsheet only they can open, both in our Google Workspace. It also sends you a short email to confirm we have your message.

We collect or use the following information for dealing with queries, complaints or claims, if you email us:

  • Your name and contact details
  • Correspondence: what you tell us in your emails

We do not collect special category information (such as health information) through the website, and the site is not aimed at children.

Lawful bases and data protection rights

Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO's website.

Which lawful basis we rely on may affect your data protection rights, which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website:

  • Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions, which means you may not receive all the information you ask for.
  • Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
  • Your right to erasure – You have the right to ask us to delete your personal information.
  • Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information.
  • Your right to object to processing – You have the right to object to the processing of your personal data.
  • Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
  • Your right to withdraw consent – When we use consent as our lawful basis, you have the right to withdraw your consent at any time.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful basis for collecting or using personal information to run our website and keep it secure, and to understand how it is used is:

  • Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: delivering our website to you, keeping it secure, and understanding in aggregate how it is used so we can improve it. We keep this to what is needed, we do not use it to identify people or for advertising, and you can turn analytics off at any time (see Cookies).

Our lawful basis for collecting or using personal information to send you blog updates is:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time, by clicking "unsubscribe" in any of our emails or by emailing us.

Our lawful basis for collecting or using personal information to consider you for a role is:

  • Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: reading what you sent us, deciding whether to talk to you about working with us, and getting back to you. You chose to get in touch, and we only use your details for that conversation.

Our lawful basis for collecting or using personal information for dealing with queries, complaints or claims is:

  • Legitimate interests – we're collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: replying to you and dealing with your enquiry, including following up on a business conversation you have started with us. You contacted us and expect a reply, and we only use your details for that conversation.

For more information on our use of legitimate interests as a lawful basis, you can contact us using the contact details above.

Where we get personal information from

  • Directly from you
  • Suppliers and service providers (Google Analytics, PostHog and MailerLite collect information about how you use our website and emails on our behalf)

How long we keep information

  • Analytics data: Google Analytics keeps the detailed data for 14 months, after which only aggregated reports remain. PostHog keeps blog analytics for up to seven years.
  • Blog updates: we keep your email address until you unsubscribe. After that we keep only a record that you unsubscribed, so that we do not email you again.
  • Careers applications: we keep what you send us for up to 12 months after we last spoke, so we can come back to you if a role opens up. If you join us, it becomes part of your employment records. You can ask us to delete it sooner at any time.
  • Emails you send us: we keep these while the conversation is active and for up to two years afterwards, unless the enquiry turns into a business relationship.

Who we share information with

Data processors

Google (Firebase Hosting, Google Fonts, Google Analytics and Google Workspace) This data processor does the following for us: hosts our website and its fonts, provides our website analytics, hosts our email, and receives and stores what you send through our careers form.

PostHog This data processor does the following for us: provides analytics for our blog.

MailerLite This data processor does the following for us: manages our blog mailing list and sends our blog update emails.

Others we share personal information with

  • Professional or legal advisors
  • Organisations we're legally obliged to share personal information with

We do not sell your personal information, and we do not share it with anyone for their own marketing.

Sharing information outside the UK

Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.

Organisation name: MailerLite Category of recipient: Email marketing provider Country the personal information is sent to: Lithuania How the transfer complies with UK data protection law: The country has been assessed as providing adequate protection to data subjects (UK adequacy regulations)

Organisation name: PostHog Category of recipient: Blog analytics provider Country the personal information is sent to: Germany How the transfer complies with UK data protection law: The country has been assessed as providing adequate protection to data subjects (UK adequacy regulations)

Organisation name: Google Category of recipient: Website hosting, analytics and email provider Countries the personal information is sent to: Ireland and the United States How the transfer complies with UK data protection law: The countries have been assessed as providing adequate protection to data subjects (UK adequacy regulations, and the UK Extension to the EU-US Data Privacy Framework, also known as the UK-US data bridge, for the United States)

Where necessary, our data processors may share personal information outside of the UK with their own sub-processors. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place, such as UK adequacy regulations, the International Data Transfer Agreement (IDTA) or the Addendum to the EU Standard Contractual Clauses.

Cookies

Our website sets cookies only for analytics: Google Analytics across the site, and PostHog on the blog.

Cookie What it does How long it lasts
_ga Tells one visitor's visits apart from another's, using a random identifier 2 years
_ga_<ID> Keeps track of the current visit 2 years
ph_<key>_posthog Set on the blog. Tells one visitor's visits apart from another's, using a random identifier, and keeps track of the current visit 1 year

PostHog also keeps a copy of the same random identifier in your browser's local storage.

We use these cookies only to produce statistics that help us improve the site. UK law allows this without asking for consent first, as long as we tell you about it and give you a simple, free way to object.

To turn analytics off, use the cookie button in the bottom-left corner of our pages or the Cookie settings link in the footer, and switch Analytics off. We will stop collecting analytics from your browser straight away, delete the analytics cookies, and remember your choice in your browser. You can also block cookies in your browser settings.

The subscribe form, the careers form and our email links do not set cookies.

How to complain

If you have any concerns about our use of your personal information, you can make a data protection complaint to us:

Email: privacy@acorda.io

We will acknowledge your complaint within 30 days and tell you what we are doing about it.

If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the ICO.

The ICO's address:

Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Helpline number: 0303 123 1113 Website: https://www.ico.org.uk/make-a-complaint

Changes to this notice

We review this notice at least once a year, and update it whenever the website changes how it uses personal information.