Legal
Privacy Policy
Arcane Technologies ("we", "us", "our") is an IT consultancy based in Cumbria, England. This policy explains what personal data we collect, why we collect it, and how we handle it. We'll keep it plain English; no legalese.
Who we are
Arcane Technologies is the data controller for the personal information described in this policy. If you have any questions, you can reach us at .
What data we collect
We only collect information you actively give us. This includes:
- Your name and email address when you contact us
- The content of any enquiries or messages you send
- Basic details about your organisation if you share them as part of an enquiry
We do not run analytics tools, advertising trackers, or cookies on this website. We do not collect any data passively.
Why we collect it
We use your information solely to respond to your enquiry and, where you become a client, to deliver and manage the services we've agreed to provide. We will never sell your data, share it with third parties for marketing purposes, or use it for anything you wouldn't reasonably expect.
Legal basis
Under UK GDPR, we process your data on the basis of:
- Legitimate interests: to respond to enquiries from people who contact us
- Contract: to deliver services where a working relationship exists
- Legal obligation: where we are required to retain records (e.g. for tax purposes)
How long we keep it
Enquiries that don't lead to a working relationship are retained for up to 12 months and then deleted. Client records are retained for 6 years in line with standard UK business obligations, then securely deleted.
Third-party services
This website is hosted via standard web hosting infrastructure. When you email us, your message passes through standard email service infrastructure. We do not use third-party CRMs, marketing platforms, or data processors beyond these.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data (where no legal obligation requires us to keep it)
- Object to how we process your data
- Withdraw consent at any time (where consent is the basis for processing)
To exercise any of these rights, contact us at . We'll respond within 30 days.
Complaints
If you're unhappy with how we've handled your data, you have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
If we make material changes to this policy, we'll update the date at the top of this page. We won't notify you by email unless the changes directly affect how we handle your existing data.