This notice is issued by Arcana Strategy Group Ltd ("Arcana", "we", "us", "our") in accordance with Articles 13 and 14 of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. It sets out how we process personal data obtained through this website, and the rights available to you in respect of that data.
This notice applies to personal data we obtain in our capacity as controller, being data collected through this website and any correspondence arising from it.
This notice covers personal data collected through this website. Personal data handled in the course of a client engagement is governed by the arrangements agreed with the client firm concerned.
The controller in respect of the processing described in this notice is:
| Entity | Arcana Strategy Group Ltd |
| Registered office | 207 Regent Street, Floor 3, London W1B 3HH, United Kingdom |
| Registered in | England and Wales, company number 17169021 |
| ICO registration | ZC139331 |
| Data protection contact | arcanastrategy.group@gmail.com |
Categories of data. First name; last name; email address; the subject category selected; the content of your message; and, where you choose to supply it, a telephone number. Supply of the telephone number is optional; the remaining fields are required in order to submit an enquiry.
Purposes. To receive, assess and respond to your enquiry; to conduct any correspondence arising from it; and to maintain a record of that correspondence.
Lawful basis. Article 6(1)(f) of the UK GDPR — processing necessary for the purposes of our legitimate interests, namely receiving and responding to enquiries concerning our services. We have carried out a balancing assessment and consider that this processing does not override your interests, rights and freedoms, on the grounds that the data is volunteered by you for the express purpose of obtaining a response, is limited to what that response requires, and is not used for any further purpose.
Recipients within our organisation. Enquiries are delivered to a mailbox accessible only to the three directors of the firm.
Further use. We do not use enquiry data for marketing, and we do not add enquirers to a mailing list.
This website does not use analytics, advertising or tracking cookies. Cookies strictly necessary for the site to function may be set, which under regulation 6(4) of the Privacy and Electronic Communications (EC Directive) Regulations 2003 do not require consent.
If we introduce analytics or any other non-essential cookies, we will obtain consent before they are set and update this notice accordingly.
We disclose personal data to the following categories of recipient, each of which acts as a processor on our behalf under a written agreement:
| Recipient | Function |
|---|---|
| Netlify, Inc. | Website hosting and processing of contact form submissions |
| Google LLC | Provision of the email service through which enquiries are received and retained |
We do not disclose personal data to any other third party save where required to do so by law, by a court of competent jurisdiction, or by a regulator acting within its powers.
Our directors are located in the United Kingdom, the United States and Latin America, and the processors identified at section 5 operate internationally. Personal data may accordingly be transferred to, stored in, or accessed from countries outside the United Kingdom.
Where personal data is transferred outside the United Kingdom, that transfer is made on the basis of the transfer mechanisms operated by the relevant processor, which may include UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's Standard Contractual Clauses. Details of the mechanisms applied by each processor are set out in that processor's published documentation, and may be obtained from us on request.
| Category | Retention period |
|---|---|
| Enquiries not resulting in an engagement | Twenty-four months from the date of last contact, after which the record is deleted |
| Enquiries resulting in an engagement | Transferred to the corresponding client record and retained for the duration of the relationship and any subsequent period required by law or by our professional and contractual obligations |
We review enquiry records twice yearly and delete those that have reached the end of the applicable period.
Subject to the conditions and exemptions in the UK GDPR and the Data Protection Act 2018, you have the following rights:
Requests should be addressed to the contact details at section 2. We will respond within one month of receipt. Where a request is complex or where a number of requests are received, that period may be extended by up to two further months, and we will notify you of any extension and the reasons for it within one month of receipt.
We do not carry out automated decision-making, including profiling, producing legal effects concerning you or similarly significantly affecting you, within the meaning of Article 22 of the UK GDPR.
We maintain technical and organisational measures appropriate to the risk, in accordance with Article 32 of the UK GDPR. Access to enquiry data is restricted to the three directors of the firm, and is protected by the access controls and encryption in transit provided by the providers identified at section 5.
Provision of the data identified as required at section 3.1 is necessary in order for us to receive and respond to an enquiry submitted through this website. If it is not provided, we will be unable to respond. There is no statutory or contractual requirement to provide it, and you may contact us by other means.
If you consider that we have not handled your personal data in accordance with this notice or with applicable law, we ask that you raise the matter with us in the first instance using the contact details at section 2, so that we may investigate.
You have the right to lodge a complaint with the Information Commissioner's Office, the supervisory authority for data protection in the United Kingdom:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone 0303 123 1113 · ico.org.uk
Exercise of that right is without prejudice to any other administrative or judicial remedy available to you.
We may amend this notice to reflect changes in our processing or in applicable law. The version number and effective date above indicate the current version.