Arcoveya

Privacy Policy

Privacy Policy

Last updated: 31 October 2026

Who we are

This website is operated by Arcoveya (“we”, “us”). We are the controller of the personal information described in this policy and are responsible for it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You can contact us about privacy matters using the contact form.

Information we collect

When you send an enquiry through our contact form, we collect:

  • Your name
  • Your company
  • Your email address
  • Your country
  • Your website (optional)
  • The nature of your enquiry and the details you provide

Our website host also processes technical information, such as IP addresses and browser details, to deliver the website and keep it secure.

Please do not include sensitive personal information in your enquiry.

How we use your information

  • To respond to your enquiry and discuss your requirements
  • To prepare proposals and take steps at your request before entering into an agreement
  • To keep a record of our correspondence
  • To operate, maintain and secure our website

We do not sell your personal information, and we do not use it to send marketing without your consent.

Our lawful bases

  • Legitimate interests: responding to business enquiries and running and securing our website.
  • Steps prior to a contract: where your enquiry relates to a potential engagement.
  • Legal obligation: where we must keep records by law.

Who we share it with

We use trusted service providers who process information on our behalf:

  • A form delivery service (FormSubmit), which passes contact form submissions to our email inbox
  • Our email provider (Microsoft), which stores our correspondence
  • Our website hosting and infrastructure providers
  • Google Fonts, which supplies the typefaces used on this website and receives your IP address when the page loads

We may also disclose information where required by law or to protect our legal rights.

International transfers

Some of our service providers may process information outside the UK. Where this happens, we rely on appropriate safeguards recognised under UK data protection law, such as adequacy regulations or approved contractual clauses.

How long we keep it

We keep enquiries that do not lead to work for 12 months, then delete them. Where an enquiry leads to an engagement, we keep relevant records for as long as needed for that engagement and to meet our legal, accounting and tax obligations.

Your rights

Under UK data protection law you have the right to:

  • Access the personal information we hold about you
  • Ask us to correct inaccurate information
  • Ask us to delete your information
  • Ask us to restrict how we use your information
  • Object to our use of your information where we rely on legitimate interests
  • Ask us to transfer your information to another organisation, where applicable

To exercise any of these rights, please contact us using the contact form. We will respond within one month.

Complaints

If you have concerns about how we handle your information, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

Cookies

For information about cookies, please see our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page.