Privacy policy

This Privacy Policy sets out how Arrival Projects (www.arrivalprojects.com) uses and protects personal data in the course of its activities and what your rights are regarding this data.


Personal data:
Any information about a living individual which allows them to be identified from that information, or from that information along with other available information, is considered personal data. Arrival Projects is here a “data controller”, which means it’s responsible for collecting and storing any personal data you provide. Anyone whose data is collected, processed or stored is known as a “data subject”. Arrival Projects is committed to processing your personal data responsibly, lawfully and securely, following the guidelines of EU Regulation 2016/679: the General Data Protection Regulation or GDPR.


We secure your data by:

  • Ensuring we have appropriate policies and processes in place to safely process
    personal data.

  • Minimising the personal data we collect, process or store.

  • Ensuring any third-party organisations who collect or store personal data on our behalf are GDPR-compliant and committed to data protection.

  • Being responsive to any requests from data subjects who want to exercise their rights to access, rectify, limit, or erase the data Arrival Projects holds on them (or any other relevant requests).


    Categories of personal data:
    The kinds of personal data may include full names and contact details like email addresses. The site may also collect limited browsing details or information on your browsing device (eg. IP address; operating system; browser).


    Categories of data subjects:
    Personal data from clients, potential clients, contractors, employees, market research interviewees and other individuals who either visit the website or engage with Arrival Projects. This data is always collected and processed lawfully, usually on the basis of consent, legitimate interests or contract, depending on the kind of data collected. We ensure that any data we collect on the basis of legitimate interests is necessary and does not overly affect the interests, rights and privacy of
    any data subject.

    Your personal data is collected and processed in the following ways:
    Contact form
    When you ask us to get in touch with you via a contact form, we collect and process
    your name and email address on the basis of consent in order to give you more information on our services, to understand your business and to answer your questions. If you additionally choose, via consent, to receive occasional posts, updates or offers, we may also send you extra information we think you’ll be interested in. If you asked us to send you occasional emails, but no longer want to receive them, you can contact us anytime at hello@arrivalprojects.com and we will take you off our list.

  • Market research and interviews
    If you have consented to being contacted for market research, in order to interview
    you or ask you to provide opinions or survey responses, we may collect and process
    your name and possibly other details including contact details, recordings or video
    content, and information on your market demographic including age and gender
    details. We collect this data on the basis of consent, and use it only for the purpose
    intended and explained to you: to get feedback from you, our client companies’
    potential buyer personas, in order to develop more appealing content and tell our
    clients what their potential buyers want.

  • Contracting workers
    If we engage you to work with Arrival Projects, either as a freelance contractor or
    as an employee, we may collect your personal data including your name, contact details, bank or other payment details and any other necessary personnel files or
    information. We process this information on a contract basis in order to facilitate your work engagement with the organisation and to pay you for your work. We may also hold information of this kind under legal obligation, eg. we may be obliged to store invoices or personnel files for a statutory period mandated by relevant tax or employment laws.

  • Log files
    Like most websites, our webservers temporarily log traffic data from your device,
    including IP address, time, date and duration of your visit, browser or operating
    system details, and details of any website that referred you here. These are collected on a legitimate interests basis and we do not collect or process your name or contact details until you voluntarily sign up for a subscription list or voluntarily share your information with us in another way (eg. by sending us an email or leaving a comment).

  • Cookies
    Like most websites, our website uses cookies. Cookies are small data files which are placed on your device while you browse the internet which remember your device. Data collected via cookies may include pages viewed and browsing details, but it will never include your name or contact details. Our website uses cookies to deliver a smooth user experience, help me to understand who is visiting our site, allow our users to see advertising relevant to them, and to participate in affiliate marketing. Some cookies come directly from our website and others come from trusted, GDPR-compliant third parties, including Google Analytics, who place limited cookies on our site. There are different types of cookies: necessary cookies (required for you to experience the full functionality of the site); preferences cookies (those that optimise or customise your browsing experience); statistics cookies (those that track limited user data in order to understand the site’s visitors and improve the site). We are committed to safe and lawful use of cookies, and we ask site visitors to opt in to these cookies when they first visit our site. You can also configure your browser to stop accepting cookies from our website, or even from all websites you visit, anytime. You can usually do this through the Options or Preferences menu of your web browser.

  • Third parties
    We ensure that any third-party services we use to collect, process or store personal data are secure and GDPR-compliant. Each third-party service provider’s use of your personal information is dictated by their respective privacy policies. We use third-party service providers to provide services like contact forms, subscribing to occasional news from the site, integrating social media platforms and maintaining optimum website functionality. We currently use:

  • Google Analytics
    Google Analytics is Google LLC’s web analysis service and collects standard internet log data and details of visitor behavior patterns via cookies for the purposes
    of understanding demographics and delivering ads tailored to users.

Please note that if you click a link on our site that brings you to another website, the
data that website collects will be processed according to their Privacy Policy and not ours.


Your rights
We will always respect your rights regarding any of your personal data we collect, process
or store. The rights you have depend on the lawful basis on which we process your
data.


Right to access
You have the right to ask for a copy of the information we hold about you (including
why we hold the information, who has access to it, and where we obtained it), which is
called a “subject access request”. You can make a subject access request, exercise any other rights regarding your personal data, or ask us any questions about your personal data by contacting us at hello@arrivalprojects.com. We will process any such request within 30 days, unless we consider the request manifestly unfounded or excessive, in which case we will write to you explaining the situation and the next course of action.

Right to erasure
Unless we hold your data due to legal obligation or on a public interests basis, you
have the right to ask us to delete or stop processing your data.


Right to rectification
You have the right to ask us to change incorrect or incomplete information we hold
about you.


Right to restriction of processing
You have the right to ask us to restrict the way we process your personal data.


Right to object
You have the right to object to our use of your personal data which effectively asks
us to stop processing your information. You can’t object to data held or processed
on the basis of contract, legal obligation or vital interests. While you can’t formally
object to data held or processed on the basis of consent, you can withdraw consent
at any time.


Right to portability
You have the right to ask us to receive a copy of all personal data you have
provided us, and to ask us to send it to you in a structured, easily accessible format; and to ask for this data to be sent directly to another data controller.


We will comply with any of these requests within 30 days, unless there is a reason why
we cannot comply (eg. if you ask us to delete data we hold on the basis of a legal
obligation, we cannot legally delete it). If we cannot comply, we will still respond within 30
days to inform you of why.


Data breach


We take great care with your personal data and do not anticipate any data breaches. A
personal data breach means that the security of personal data is compromised. This
includes accidental or unlawful destruction, loss, alteration, unauthorised disclosure
of, or access to personal data. In the unlikely event that a data breach occurs, we will follow GDPR-compliant protocol by implementing a recovery plan, notifying the appropriate authorities, and informing any relevant people or organisations.


This Privacy Policy was last updated on 30 May, 2024, and will be reviewed on a
six-monthly basis to ensure it is current.