Our Privacy Policy
ARB Innovators Ltd recognises how important your privacy is to you and how you care about how your personal information is used and shared online.
1. About us
In this Privacy Policy, references to ‘we’, 'our' or ‘us’ are to ARB Innovators Ltd a limited company registered in England under company number 13803949, whose registered address is The Coach House, Birmingham Road, Coughton, Warwickshire,B49 5HU, and whose main trading address is 14 Chartwell Road, Kirkby in Ashfield, Nottingham, NG17 7HZ.
​
We will be the controller of any relevant personal data regarding members of staff, customers, subcontractors, landowners, trustees, volunteers, students, interns, work experience children and their parents/guardians processed or described in this Privacy Policy as part of our operations. This website is not intended for children and we do not knowingly collect data relating to children.
​
Callum Throw is our appointed Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below.
​
We will not pass on your details to any third-party unless you give us permission to do so or we are required to do so by law.
We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last reviewed on 19/01/2023.
​
This privacy policy aims to give you information on how ARB Innovators Ltd collects and processes your personal data through your use of this website, including any data you may provide through this website when you sign up to our “Innovators” (newsletter), request a quote, send an email or take part in any competition.
It is important that you read this privacy policy together with any other privacy policy or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements the other policies and is not intended to override them. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Contact Details
ARB Innovators Ltd.
Registered address: 3.15 Hollinwood Business Centre Albert Street, Oldham, England, OL8 3QL.
Main trading address: 14 Chartwell Road, Kirkby in Ashfield, Nottingham, NG17 7HZ.
Email: support@arbinnovators.co.uk
Tel: 07837 794373
Please direct all enquiries to the Director or DPO.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Definitions
In this Policy, the following terms shall have the following meanings:
​
“Account” means an account required to access and/or use certain areas and features of Our Site;
​
“Cookie” means a small text file placed on your computer or device by Our Site when you visit certain parts of Our Site and/or when you use certain features of Our Site. Details of the Cookies used by Our Site are set out in section 5, below;
​
“Cookie Law” means the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003; and
​
“personal data” means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to Us via Our Site. This definition shall, where applicable, incorporate the definitions provided in the EU Regulation 2016/679 – the General Data Protection Regulation (“GDPR”).
2. Exemptions
Certain data is exempted from the provisions of the GDPR including the following:
​
-
National security and the prevention or detection of crime.
-
The assessment of any tax or duty.
-
Where the processing is necessary to exercise a right or obligation conferred or imposed by law upon the business, including safeguarding and prevention of terrorism and radicalisation.
​
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
3. Your Rights
As a data subject, you have the following rights under the GDPR in relation to your personal data, which this Policy and Our use of personal data have been designed to uphold:
-
The right to be informed about Our collection and use of personal data
-
The right to request access to your personal data
-
The right of access to the personal data we hold about you
-
Request erasure of your personal data
-
Object to processing of your personal data
-
Request restriction of processing your personal data
-
The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);
-
The right to withdraw consent.
If you wish to exercise any of the rights set out above, please put a request in writing to the Data Protection Team, ARB Innovators Ltd, main trading address 14 Chartwell Road, Kirkby in Ashfield, Nottingham, NG17 7HZ.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may refuse to comply if a request is manifestly unfounded or excessive or we may charge a reasonable fee for the administration costs in these circumstances. Alternatively, we may refuse to comply with your request in these circumstances.
​
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.
4. Your Personal Data
“Personal data” is any information relating to a (living) person which allows them to be directly or indirectly identified from that data. The processing of personal data is governed by legislation relating to personal data which applies in the United Kingdom including the General Data Protection Regulation (the “GDPR”) and other legislation relating to personal data and rights such as the Human Rights Act.
​
1We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:
​
-
Identity Data includes first name, maiden name, last name, username or similar identifier, title.
-
Contact Data includes billing address, delivery address, email address and telephone numbers.
-
Financial Data includes bank account and payment card details.
-
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
-
Technical Data includes Internet Protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
-
Profile Data includes your username and password, purchases or orders made by you, your preferences, feedback and survey responses.
-
Usage Data includes information about how you use our website.
​
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
​
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
Processing of Personal Data
We are committed to complying with the General Data Protection Regulation (GDPR) in fulfilling our duty to the rights for individuals and in the collection, processing and transfer of personal information. Our use of your personal data will always have a lawful basis, either because it is necessary for Our performance of a contract with you, because you have consented to Our use of your personal data (e.g. by asking for a quote), or because it is in Our legitimate interests.
We will ensure that personal data is:
​
-
Processed lawfully, fairly and in a transparent manner
-
Collected for specific, explicit and legitimate purposes only
-
Adequate, relevant and limited to what is necessary in relation to the purposes for which it is collected
-
Accurate and, where necessary, kept up to date. We will take every reasonable step to erase or rectify inaccurate personal data
-
Not kept in a form which allows identification of the subject for longer than is necessary for the specified purpose(s)
-
Processed in an appropriately secure manner including protection against unauthorised use, accidental loss, destruction or damage.
​
With your permission and/or where permitted by law, We may also use your data for marketing purposes which may include contacting you by email and/or post with information, news and offers on Our services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that We fully protect your rights and comply with Our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003. You have the right to withdraw your consent to Us using your personal data at any time, and to request that We delete it.
​
We may use your data for the following purposes:
​
-
Providing and managing your Account.
-
Providing and managing your access to Our Site.
-
Personalising and tailoring your experience on Our Site.
-
Supplying Our services to you (please note that We require your personal data in order to enter into a contract with you).
-
Personalising and tailoring Our services for you.
-
Replying to emails from you.
-
Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time by clicking on the unsubscribe link in any emails we send.
-
Market research.
​
We may receive personal data about you from various third parties and public sources and Technical Data from the following parties:
​
a. Google Forms
b. Microsoft Outlook
c. DropBox
d. WeTransfer
e. Monday.com
f. Analytics providers such as Google based outside the EU
g. Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as Xero based (inside OR outside) the EU.
​
OPTING OUT
​
You can request that we or third parties stop sending you marketing material at any time by clicking on the opt-out links in any marketing message we send you or by contacting us directly. If you opt out of receiving these marketing emails, it will not affect personal data submitted to us as a result of a service purchase, service experience, or other transactions.
Change of Purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please Contact us.
​
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Storing Personal Data
ARB Innovators Ltd takes appropriate technical and organisational steps to ensure the security of relevant personal data. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. We have implemented security measures to protect the personal data that we have under our control from:
​
-
Unauthorised access.
-
Improper use or disclosure.
-
Unauthorised modification.
The Company ensures that all staff are aware of their responsibilities under GDPR, and provides them with the necessary advice, guidance and awareness training in handling personal data.
Unfortunately the sending of information via the internet is not totally secure and on occasion such information can be intercepted. We cannot guarantee the security of data that you choose to send us electronically. Sending such information is entirely at your own risk.
​
Data security is very important to Us, and to protect your data We have taken suitable measures to safeguard and secure data collected through Our Site.
Data Retention
We will retain your personal information for as long as necessary to fulfil the reasons for which it was obtained, including to meet any legal, accounting, or reporting requirements.
​
To determine the appropriate retention period for personal data, we take into account the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether those purposes can be met through other means, and the applicable legal requirements.
​
We are required by law to store basic information on our clients (including contact, identity, financial, and transaction data) for [six] years after they cease to be customers for tax purposes.
​
In some circumstances you can ask us to delete your data: see [Request erasure] below for further information.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
5. International Transfers
Many of our external third parties are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.
​
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
​
-
We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.
-
Where we use providers based in the US, we may transfer data to them if they are part of the privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US. For further details, see European Commission: EU-US privacy Shield.
5. Cookies
Our Site may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve Our services. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
6. Changes to Our Privacy Policy
We may change this Privacy Policy from time to time (for example, if the law changes). This version was last updated on 19 January 2024 and historic versions can be obtained by contacting us.
Any changes will be immediately posted on Our Site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of Our Site following the alterations.