1. Introduction

Arqiva is committed to protecting and respecting yourprivacy. This privacy notice contains general information on the personal datathat Arqiva Limited (“Arqiva”, “we” or “us”)collects and uses when users (“you”) visit www.arqiva.com (the “Website”),what we do with that information and the rights you have. If you have anyquestions, please contact dpo@arqiva.com.

In this privacy notice, “personal data” means anyinformation that relates to an identified or identifiable natural person. 

As part of our commitment to protect your personal data andbe transparent about its uses, we want to inform you:

• why and how Arqiva collects, uses and stores your personal data;
• the lawful bases on which your personal data is processed; and
• what your rights and our obligations are in relation to such processing.

This privacy notice applies only to data gathered inconnection with your use of the Website. The privacy notice does not apply topersonal data collected in connection with any access to Arqiva’s site accessservices, or any other services, products or arrangements, which are subject toseparate privacy notices.

‍

2. Types of personal data collected

We will collect and process the following personal dataabout you:

• information regarding your use of and interactions on the Website, including what information you’ve accessed and when;
• technical information;
• information you have shared with us via the Website that may be considered personal data (for example through web forms); and
• information you have shared with us via social media platforms, and other Arqiva-branded webpages, that may be considered personal data (for example, through web forms);

We use cookies (small text files stored in your browser) tocollect data. For more details on this, please see our Cookies Notice (www.arqiva.com/policies/cookie-policy)

3. Our legal basis for processing personal data

Depending on the purpose of the processing activity (seeparagraph 4 below), the processing of your personal data will be one of thefollowing:

• necessary for the legitimate interests of Arqiva (without unduly affecting your fundamental rights and freedoms). Examples of our legitimate interests include maintaining and operating our business and the Website, complying with our internal policies and procedures, and improving the Website and our products and services;
• required to comply with our legal and regulatory responsibilities that we are subject to;
• necessary to establish, exercise or defend our rights, for example, if we are involved in or subject to legal proceedings; or
• in limited circumstances, processed with your consent which we may obtain from you from time to time. When you give consent, you will be given details about how to change your mind. You can withdraw your consent at any time.

4. Purposes for which we process personal data

We always process your personal data for a specific purpose,and only such personal data is relevant to achieve that purpose. In particular,we will use your personal data in order to:

• allow you to use and access the Website;
• review and improve the Website;
• communicate with you and provide you with information about our products and services;
• manage our relationship with you, for example, to respond to any queries or concerns you may have about our products or services;
• improve our products and services, and testing and upgrading of our systems and processes;
• meeting our legal and regulatory obligations;
• ensuring the safety of our customers, employees and other parties, for example in case of any cyber attacks; and
• any other purposes that we notify to you from time to time.

5. Sharing your personal data

We may share your data with:

• other entities within the Arqiva group;
• our suppliers who provide services to us to support the Website;
• public and judicial authorities, regulators and governmental bodies, to comply with any legal obligations or to enforce or protect our rights, property or the safety of our customers; or
• any third-party business that acquires, or may potentially acquire, Arqiva or as part of any business restructuring or reorganisation.

When we share your data with third parties, we take steps toensure they meet appropriate information security standards, so that yourpersonal data remains secure.

We will also disclose data where we are required to, inorder to protect or exercise the legal rights of ourselves, our employees,other stakeholders, or any other individual (or their representative) thatlegitimately requests such data.

6. Links to other websites

Our Website may contain links to other websites run by otherorganisations. This privacy notice applies only to our Website‚ so we encourageyou to read the privacy notices on the other websites you visit. We cannot beresponsible for the privacy notices and practices of other sites, even if youaccess them using links from our Website.

In addition, if you linked to our Website from a third-partysite, we cannot be responsible for the privacy notices and practices of theowners and operators of that third party site and recommend that you check the privacynotice of that third party site.

7. International data transfers

As we are a global business, we may transfer your personaldata to recipients located outside of the UK or the European Economic Area(EEA). If we send your information to a country outside the UK and the EEA, wewill make sure that your information is appropriately protected and that thetransfer is carried out in compliance with applicable data protection laws.

If you like more information in relation to how your data isprotected, please contact dpo@arqiva.com.

8. Data retention

We will retain your personal data for as long as necessaryto fulfil the purpose for which it was collected, or to comply with legal,regulatory, or internal policy requirements.

How long we will retain your personal data will bedetermined through:

• reviewing the volume, nature and sensitivity ofthe personal data;
• determining the potential risk of harm fromunauthorised use or disclosure of the personal data;
• understanding why we process your personal dataand whether we can achieve those purposes through other means; and
• any legal, regulatory or internal policyrequirements which may set minimum retention periods.

‍

9. Your rights

You have a right to:

• request a copy of your personal data;
• ask us to correct any incorrect personal data;
• require us to delete your personal data;
• object to, or request that we restrict our use of your personal data to certain purposes;
• receive your personal data in a structured, commonly used and machine-readable format and / or request that we provide the data to another party (if technically feasible);
• where we process personal data on the basis of your consent, withdraw that consent at any time;
• not be subject to a decision based on solely automated processing (including profiling) that produces legal effects that may significantly affect you;
• complain to us if you think we have breached your rights; and
• complain to the data protection authority if you think we have breached your rights.

‍

If you wish to exercise your rights or raise a complaint,you can do this by contacting dpo@arqiva.comwhere we will acknowledge and respond to your enquiry within the applicablelegislative timescales.

If you are not satisfied with Arqiva’s response in eithercase, you have a right to make a complaint to the Information Commissioner’sOffice (ICO). For further information about your rights, or to raise a complaint, you can contact the Information Commissioner’s Office at https://ico.org.uk/global/contact-us/ or telephone on 0303 123 1113.

10. Changes to this privacy notice

This notice explains what Arqiva does, rather than adocument that binds Arqiva or any other person contractually. We reserve theright to amend the notice from time to time. If we make important changes tothe notice, such as how we use your data, we will inform you of the updatethrough appropriate means, depending on how we normally communicate with you.

11. Our contact information

Arqiva Limited is registered with the InformationCommissioner’s Office as a controller (registration Z7533473). Our registeredaddress is Crawley Court, Winchester, Hampshire, SO21 2QA.