Privacy Policy

1. Introduction

ArborMark Business Services Limited ("ArborMark", "we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting arbormark-business.co.uk (our "website") and/or submitting information through any form on this website, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is governed by UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

2. Who We Are (Data Controller)

The data controller responsible for this website and for the personal data collected through it is:

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us using the details above.

3. Personal Data We Collect

We may collect and process the following categories of personal data about you:

3.1 Data You Provide Directly

When you complete a contact form, consultancy enquiry form, or any other form on this website, we may collect:

• Your full name
• Your email address
• Your telephone number (where provided)
• Your company name and job title (where provided)
• The nature of your enquiry or consultancy request
• Information about your business, its operations, challenges, and priorities (as provided in enquiry forms)
• Any other information you choose to include in your enquiry message
• Your approximate business size, sector, and location (where provided)
• Your marketing communication preferences (where applicable)

3.2 Data Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

• Your IP address
• Browser type and version
• Operating system
• Pages visited and navigation behaviour on our website
• Time and date of visits
• Referring website URL

This data is collected through cookies and similar technologies. Please see our Cookie Policy for more information.

3.3 Special Categories of Personal Data

We do not intentionally collect or process special categories of personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) through this website. Please do not submit such information through our forms.

4. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• To respond to your enquiry: Processing and responding to business consultancy enquiries and general contact requests submitted through our website.
• To assess advisory relevance: Reviewing the information you have provided to assess whether and how ArborMark's management consultancy services may be relevant to your situation.
• To confirm and manage engagements: Where you proceed with a management consultancy engagement, managing the advisory relationship, scope confirmation, and communication throughout the engagement.
• To comply with legal obligations: Maintaining records as required by applicable law, including company and financial record-keeping requirements.
• To improve our website and services: Analysing website usage patterns (where analytics are active and consented to) to improve the quality and relevance of the information we provide.
• To communicate with you: Sending follow-up communications related to your enquiry, including scope proposals and engagement correspondence, where you have initiated contact with us.

We do not use your personal data for automated decision-making or profiling.

5. Legal Basis for Processing

We process your personal data on the following legal bases under the UK GDPR:

• Legitimate interests (Article 6(1)(f)): Processing your enquiry data to review and respond to management consultancy enquiries, and to manage our business relationships with prospective and existing clients, where our legitimate interests in doing so are not overridden by your interests or fundamental rights.
• Contract performance (Article 6(1)(b)): Where a management consultancy engagement is agreed and in progress, processing your personal data as necessary to perform the advisory services under that engagement agreement.
• Consent (Article 6(1)(a)): For optional analytics cookies and any marketing communications (where applicable), we rely on your explicit consent. You may withdraw your consent at any time.
• Legal obligation (Article 6(1)(c)): Where processing is required to comply with applicable laws and regulations.

6. Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with applicable legal and regulatory requirements.

• Enquiry data (no engagement proceeded): Where an enquiry does not result in a management consultancy engagement, we retain contact and enquiry data for a reasonable period to respond to your enquiry and for legitimate follow-up, after which it is deleted or anonymised.
• Engagement data: Where a management consultancy engagement has taken place, we retain relevant records for the period required by applicable law and for our legitimate business record-keeping purposes.
• Website analytics data: Retained in accordance with our analytics provider's retention settings and our cookie consent configuration.

We review our data retention practices periodically and delete or anonymise personal data that is no longer needed.

7. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request that we correct inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request that we delete your personal data in certain circumstances.
• Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract performance, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing of your personal data based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one calendar month of receipt. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113.

8. Cookies

Our website uses cookies to enhance your browsing experience, to understand how the site is used, and to support the operation of contact and enquiry forms. For detailed information about the cookies we use, their purposes, and how to control them, please see our Cookie Policy.

9. Sharing Your Personal Data

We do not sell, rent, or trade your personal data to third parties.

We may share your personal data with third parties in the following limited circumstances:

• Service providers: We may share data with trusted third-party service providers who assist in operating our website and managing communications (such as web hosting providers and email service providers). These parties process data only in accordance with our instructions and applicable data protection law.
• Legal requirements: We may disclose your personal data where required by law, by a court order, or by a regulatory or governmental authority with jurisdiction.
• Business transfer: In the event of a merger, acquisition, or sale of assets involving ArborMark, personal data may be transferred as part of that transaction, subject to appropriate data protection protections.

10. Third-Party Services & Links

Our website may contain links to third-party websites. These websites have their own privacy policies and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party websites you visit via links from our site.

Where we use third-party tools or services (such as analytics providers), we take reasonable steps to ensure these providers meet appropriate data protection standards. For details of specific third-party services, please see our Cookie Policy.

11. International Data Transfers

Where personal data is transferred outside of the United Kingdom, we will ensure that appropriate safeguards are in place to protect your data in accordance with UK data protection law — such as adequacy regulations, standard contractual clauses, or other appropriate transfer mechanisms.

12. How to Contact Us

If you have any questions about this Privacy Policy, about how we process your personal data, or wish to exercise any of your data protection rights, please contact us:

13. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Continued use of this website after any changes to this policy constitutes your acknowledgement of the updated terms.