1. Introduction
Arqiva is committed to protecting and respecting your privacy. This privacy notice contains general information on the personal data that Arqiva Limited (“Arqiva”, “we” or “us”) collects and uses when users (“you”) visit www.arqiva.com (the “Website”), what we do with that information and the rights you have. If you have any questions, please contact dpo@arqiva.com.
In this privacy notice, “personal data” means any information that relates to an identified or identifiable natural person.
As part of our commitment to protect your personal data and be transparent about its uses, we want to inform you:
- why and how Arqiva collects, uses and stores your personal data;
- the lawful bases on which your personal data is processed; and
- what your rights and our obligations are in relation to such processing.
This privacy notice applies only to data gathered in connection with your use of the Website. The privacy notice does not apply to personal data collected in connection with any access to Arqiva’s site access services, or any other services, products or arrangements, which are subject to separate privacy policies.
2. Types of personal data collected
We will collect and process the following personal data about you:
- information regarding your use of and interactions on the Website, including what information you’ve accessed and when;
- technical information;
- information you have shared with us via the Website that may be considered personal data (for example through web forms); and
- information you have shared with us via social media platforms, and other Arqiva-branded webpages, that may be considered personal data (for example, through web forms);
We use cookies (small text files stored in your browser) to collect data. For more details on this, please see our Cookies Policy (www.arqiva.com/policies/cookie-policy).
3. Our legal basis for processing personal data
Depending on the purpose of the processing activity (see paragraph 4 below), the processing of your personal data will be one of the following:
- necessary for the legitimate interests of Arqiva (without unduly affecting your fundamental rights and freedoms). Examples of our legitimate interests include maintaining and operating our business and the Website, complying with our internal policies and procedures, and improving the Website and our products and services;
- required to comply with our legal and regulatory responsibilities that we are subject to;
- necessary to establish, exercise or defend our rights, for example, if we are involved in or subject to legal proceedings; or
- in limited circumstances, processed with your consent which we may obtain from you from time to time. When you give consent, you will be given details about how to change your mind. You can withdraw your consent at any time.
4. Purposes for which we process personal data
We always process your personal data for a specific purpose, and only such personal data is relevant to achieve that purpose. In particular, we will use your personal data in order to:
- allow you to use and access the Website;
- review and improve the Website;
- communicate with you and provide you with information about our products and services;
- manage our relationship with you, for example, to respond to any queries or concerns you may have about our products or services;
- improve our products and services, and testing and upgrading of our systems and processes;
- meeting our legal and regulatory obligations;
- ensuring the safety of our customers, employees and other parties, for example in case of any cyber-attacks; and
- any other purposes that we notify to you from time to time.
5. Sharing your personal data
We may share your data with:
- other entities within the Arqiva group;
- our suppliers who provide services to us to support the Website, such as dotCMS;
- public and judicial authorities, regulators and governmental bodies, to comply with any legal obligations or to enforce or protect our rights, property or the safety of our customers; or
- any third party business that acquires, or may potentially acquire, Arqiva or as part of any business restructuring or reorganisation.
When we share your data with third parties, we take steps to ensure they meet appropriate data security standards, so that your personal data remains secure.
We will also disclose data where we are required to, in order to protect or exercise the legal rights of ourselves, our employees, other stakeholders, or any other individual (or their representative) that legitimately requests such data.
6. Links to other websites
Our Website may contain links to other websites run by other organisations. This privacy notice applies only to our Website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites, even if you access them using links from our Website.
In addition, if you linked to our Website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.
7. International data transfers
As we are a global business, we may transfer your personal data to recipients located outside of the UK or the European Economic Area (EEA). If we send your information to a country outside the UK and the EEA, we will make sure that your information is properly protected and that the transfer is carried out in compliance with applicable data protection laws.
If you like more information in relation to how your data is protected, please contact dpo@arqiva.com.
8. How long do we store your data?
How long we will hold your data will be determined by the following factors:
- we only hold your data as long as necessary to fulfil the purpose for which it was collected; and
- we will retain your data to comply with any legal, regulatory or internal policy requirements, which may set minimum retention periods.
9. Your rights
You have a right to:
- request a copy of your personal data;
- ask us to correct any incorrect personal data;
- require us to delete your personal data;
- object to, or request that we restrict our use of your personal data to certain purposes;
- receive your personal data in a structured, commonly used and machine-readable format and / or request that we provide the data to another party (if technically feasible);
- where we process personal data on the basis of your consent, withdraw that consent at any time; and
- complain to the data protection authority if you think we have breached your rights.
If you wish to exercise your rights, you can do this by contacting dpo@arqiva.com.
If you are not satisfied with Arqiva’s response, you have a right to make a complaint to the Information Commissioner’s Office. For further information about your rights, or to raise a complaint, you can contact the Information Commissioner’s Office at https://ico.org.uk/global/contact-us/ or telephone on 0303 123 1113.
10. Changes to this privacy notice
This notice was updated on 23/06/2021. It is a notice explaining what Arqiva does, rather than a document that binds Arqiva or any other person contractually. We reserve the right to amend the notice from time to time. If we make important changes to the notice, such as how we use your data, we will inform you of the update through appropriate means, depending on how we normally communicate with you.
11. Our contact information
Arqiva Limited is registered with the Information Commissioner’s Office as a controller (registration Z7533473). Our registered address is Crawley Court, Winchester, Hampshire, SO21 2QA.