The short version
Aclet needs a limited amount of information to provide the service, protect accounts, process orders, show appliance health and answer support requests. We do not sell personal information or use Aclet to build advertising profiles.
Most connection inspection and detailed diagnostic logging happens locally on the Aclet box. The controller plane receives selected health, status, policy and security-event information needed to operate the service. See examples of controller-plane collections.
Who is responsible?
Aclet Technologies Ltd, registered in England and Wales under company number 17429427, is the controller responsible for deciding why and how personal information is used.
Registered office: 43 Southwold Crescent, Broughton, Milton Keynes, England, MK10 7BW. Privacy enquiries: support@aclet.co.uk.
Information handled locally by the Aclet box
To protect the connection, Aclet may process internet addresses and service names, connection timing and direction, traffic amounts, local network addresses, router and software details, selected settings and protection events.
Detailed local logs may contain technical device identifiers or local addresses. Aclet does not currently use those logs to present a named household device or person to staff in the controller plane. Local diagnostic data remains on the customer's Aclet unless the customer generates a download, deliberately shares it with Support or approves a remote-support session.
A destination or event can still relate to a household and may be personal information even where Aclet cannot identify which person or friendly-named device caused it. We therefore do not describe potentially linkable identifiers as anonymous.
Information sent to the controller plane
Aclet sends the information needed to identify and maintain the box, report protection status and operate the customer portal. This can include a random appliance identifier, registered account association, software version, last check-in, uptime, service state, resource readings, update status, aggregate counters and selected blocked-event metadata such as category, destination and time.
Health telemetry does not include message bodies, passwords, page text, photographs or files. It is used for fault tracking, service status, security, remote remediation requested by the customer and proportionate service improvement. A random appliance identifier is pseudonymous rather than anonymous where Aclet can link it to an account.
A field-by-field explanation is available at Controller-plane collections.
What Aclet is not designed to collect
Aclet is not designed to read or store the contents of emails, messages, calls, passwords, photographs, documents, files, the full text of pages or words typed into websites.
Modern websites and apps normally encrypt that content between the device and service. Aclet does not routinely break that encryption. If a service sends content without working encryption, network equipment on the path may technically be able to see plain text; that would indicate absent or failed protection for that connection, not a reason for Aclet to collect the content.
Aclet may still process connection-level information available outside the encrypted content, such as a service name, destination address, timing and data volume.
Information you give us
If you create an account, use My Aclet, buy or trial a product, or contact Support, we may collect:
- Name, email address, account identifiers, delivery and billing address, telephone number, order, payment-status and subscription information.
- Information about the Aclet box, router, internet provider and home setup needed to supply or support the service.
- Support messages, screenshots, files and diagnostic logs you choose to provide.
- Sign-in, error, browser, fraud-prevention and security records generated by the website and account services.
Other people using the connection
Network protection can process connection information relating to household members and visitors even when they are not the account holder. The account holder must tell regular users that Aclet is installed, explain any family controls and make this statement available to them.
Who may receive personal information?
We use the minimum information needed with contracted suppliers that provide cloud hosting and identity services, payment processing, email and workspace services. Where they process information for Aclet, appropriate data-processing arrangements apply.
We do not require explicit consent for processing that is necessary to perform the customer contract, comply with law or pursue a properly assessed legitimate interest. Consent is used where it is the correct legal basis, such as certain optional marketing or non-essential storage. We do not disclose personal information to unrelated third parties for their advertising.
We may disclose information to professional advisers, regulators, courts, law-enforcement bodies or other competent authorities where required or permitted by a valid legal power or binding request.
Some suppliers may process information outside the UK. Where required, Aclet relies on UK adequacy regulations or approved contractual safeguards and carries out the required transfer assessment.
Your choices and control
- You choose whether optional advert blocking, data-gathering protection, family categories and schedules are enabled.
- You choose whether to send screenshots, support messages or logs.
- When you select "Download detailed logs", the appliance creates a short-lived encrypted transfer so your browser can download the bundle. The management service removes its temporary copy after 15 minutes. The downloaded copy is then retained by you, not Aclet, unless you deliberately send it to Support.
- Sending a diagnostic bundle to Support is an affirmative request to use that bundle for the support case. We use it only for that purpose and related security requirements.
- Remote support requires your specific approval and is limited to the Aclet box and agreed purpose. It does not provide remote access to household phones, computers or files. You can refuse or end the session.
- You can unsubscribe from non-essential marketing. Necessary account, order, service and security messages may still be sent.
Why we use information
- Contract: supplying protection, managing an account, taking an order and answering a requested support case.
- Legitimate interests: keeping systems secure, preventing fraud and abuse, diagnosing faults and improving reliability in a targeted and proportionate way.
- Legal obligation: accounting, tax, consumer protection, company administration and responding to valid legal requirements.
- Consent: optional communications, non-essential cookies or another optional activity where consent is required. Consent can be withdrawn as easily as it was given.
Blocking a connection is an automated network-security action. Aclet does not use it to make a solely automated decision with legal or similarly significant effects on a person.
Security and retention
We use access controls, encryption where appropriate, audit logging and supplier safeguards designed to prevent unauthorised access, loss or alteration.
Account and appliance associations are kept while the service is active. Order and payment records are retained for the period required for tax, accounting, consumer claims and fraud prevention. Support material is retained until the case and any related dispute or security need are resolved. Controller-plane telemetry is held for the shortest rolling period that supports customer-visible history, fault diagnosis, security and service reliability. Information is deleted or anonymised when those purposes and applicable legal periods end.
Your data-protection rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or object to particular uses. Where processing relies on consent, you can withdraw it.
Email legal@aclet.co.uk. We may verify identity before responding and normally respond within one month, subject to lawful extensions. Please raise a data-protection complaint with Aclet first and give us the opportunity to respond. If you are dissatisfied with our final response, or we do not respond appropriately, you may complain to the Information Commissioner's Office.
Cookies and similar technology
The public information website does not currently use non-essential advertising or analytics cookies. Aclet uses strictly necessary cookies or local storage for sign-in, security, session operation, fraud prevention and checkout when you choose to use those services.
If Aclet introduces optional analytics, advertising or another non-essential technology, we will identify it and request consent before it operates where required.
Changes to this statement
We will update this page when services, suppliers or uses of information change and bring significant new uses to people's attention before they begin where required.
Last reviewed: 1 September 2026
