Privacy Policy
Last updated: 7 October 2026
1. Who we are
This website, www.arqovia.co.uk, is operated by ARQOVIA HOLDINGS LTD ("ARQOVIA", "we", "us", "our"), a private limited company registered in England and Wales under company number 17442653. Our registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
ARQOVIA HOLDINGS LTD is the controller of the personal data described in this notice. If you have any questions about this notice, or wish to exercise your rights, please contact us at info@arqovia.co.uk.
2. Scope of this notice
This notice explains how we handle personal data when you visit our website, contact us through the website form or by email, or otherwise correspond with us about a potential acquisition, investment, partnership or other business matter. It does not cover other websites that we link to.
3. The personal data we collect
Information you give us
Contact form: your name, email address, company name (optional), the topic you select (optional) and the content of your message.
Email and other correspondence: your name, contact details, job title and organisation, and anything you choose to share with us about your business or enquiry.
Please do not send us special category data (for example health information) or confidential commercial information through the website form. If we need sensitive information, we will arrange a suitable way to receive it, such as under a non-disclosure agreement.
Information collected automatically
Technical and usage data: such as your IP address, browser and device type, the pages you visit, the time and duration of your visit and the website that referred you. Our website platform collects some of this for security and operational purposes. Squarespace Analytics collects some through analytics cookies, and only if you consent to them (see our Cookie Policy at https://www.arqovia.co.uk/cookie-policy).
Spam protection: our contact form uses Google reCAPTCHA, which collects information about your device and how you interact with the page in order to tell people apart from automated spam.
4. How we use your personal data and our lawful bases
Responding to your enquiry and corresponding with you: Lawful basis under UK GDPR: Our legitimate interests in responding to people who contact us. Or, where you are enquiring on your own behalf about entering into an agreement with us, taking steps at your request before entering into a contract
Assessing and progressing potential acquisition, investment or partnership opportunities: Lawful basis under UK GDPR: Our legitimate interests in running and developing our business
Keeping records of our business communications: Lawful basis under UK GDPR: Our legitimate interests, and compliance with our legal obligations
Operating and securing the website and preventing spam and misuse: Lawful basis under UK GDPR: Our legitimate interests in keeping the website secure and working properly
Understanding how the website is used (Squarespace Analytics): Lawful basis under UK GDPR: Your consent, given through our cookie banner. You can withdraw it at any time
Complying with the law, and establishing, exercising or defending legal claims: Lawful basis under UK GDPR: Legal obligation and our legitimate interests
Where we rely on legitimate interests, we have considered that our interests are not overridden by your rights and freedoms. You can ask us for more information about this balance.
We do not use your personal data for automated decision-making, including profiling, that has legal or similarly significant effects on you. We do not sell your personal data. We will not add you to marketing mailing lists without your permission.
5. Who we share your personal data with
We share personal data only where necessary, with:
Squarespace (Squarespace Ireland Limited and its affiliates), which hosts our website, processes contact-form submissions and provides website analytics.
Google (Google Ireland Limited, Google LLC and affiliates), which provides our business email (Google Workspace) and the reCAPTCHA spam protection on our form.
Professional advisers, such as lawyers, accountants and other advisers, where needed for a matter you have contacted us about, under duties of confidentiality.
Authorities, regulators or courts, where we are required by law to do so.
A buyer or successor, if all or part of our business is sold, merged or reorganised, under equivalent protections.
Our service providers act on our instructions and are bound by contracts that require them to protect your data.
6. International transfers
Some of our service providers, including Squarespace and Google, may process personal data outside the United Kingdom, including in the United States. Where they do, we rely on safeguards recognised under UK data protection law. These include the UK Extension to the EU–US Data Privacy Framework (where the recipient is certified), the UK International Data Transfer Agreement and the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep your personal data
Enquiries that do not lead to further dealings: up to 24 months from our last contact, then deleted.
Correspondence and records about an ongoing or completed business relationship or transaction: for the duration of the relationship and for up to 6 years afterwards, in line with legal limitation periods and record-keeping obligations.
Analytics data: in line with the cookie durations set out in our Cookie Policy and Squarespace's own retention of aggregated analytics.
8. How we protect your personal data
We use appropriate technical and organisational measures to protect personal data. These include encrypted connections (HTTPS) to this website, access controls on our email and website accounts, and limiting access to people who need it. No method of transmission over the internet is completely secure, but we take reasonable steps to protect the information you send us.
9. Your rights
Under UK data protection law, you have the right to:
access the personal data we hold about you;
ask us to correct inaccurate or incomplete data;
ask us to erase your data;
ask us to restrict how we use your data;
object to our use of your data where we rely on legitimate interests;
ask for your data in a portable format (data portability), where applicable; and
withdraw your consent at any time where we rely on consent (for example to analytics cookies, via "Cookie preferences" at the foot of each page). This does not affect processing carried out before you withdraw.
Some of these rights apply only in certain circumstances. To exercise any of them, email info@arqovia.co.uk. We will respond within one month, and may ask you to confirm your identity first. There is normally no charge.
10. Complaints
If you have concerns about how we handle your personal data, please contact us first at info@arqovia.co.uk so that we can try to resolve them.
You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO):
Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
11. Children
This website is intended for business users and is not directed at children. We do not knowingly collect personal data from anyone under 18.
12. Changes to this notice
We may update this notice from time to time. The current version will always be on this page, with the date it was last updated.