This Privacy Policy explains how AROHARBOUR LIMITED, a company registered in England and Wales with company number 14916080, whose registered office is at House 80, Lower Bents Lane, Bredbury, Stockport, England, SK6 2NN (“AroHarbour”, “we”, “us” or “our”) collects and uses personal data when you visit aroharbour.cloud (the “Website”) or contact us. We are the data controller for this personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. How to contact us
Email: [email protected] (subject “Privacy request”)
Post: AROHARBOUR LIMITED, House 80, Lower Bents Lane, Bredbury, Stockport, England, SK6 2NN
2. The personal data we collect
- Contact data – your name, email address, company name and the content of any message you send us.
- Listing and customer data – if you request a listing: business contact details, product information, invoices and payment records. We do not store full card numbers; payments are handled by our payment provider.
- Technical data – IP address, browser type, device information, pages visited and the referring website, collected by our hosting provider's server logs for security purposes.
- Analytics and advertising data – only if you accept non-essential cookies: information about how you use the Website and whether you arrived from one of our advertisements (for example via Google Analytics or Google Ads conversion tracking). See our Cookie Policy.
We do not intentionally collect special category data, and the Website is not intended for children under 16.
3. How we use your data and our lawful bases
| Purpose | Data | Lawful basis |
|---|---|---|
| Responding to enquiries and complaints | Contact data | Legitimate interests (answering people who contact us) |
| Providing and invoicing listing services | Contact, listing and customer data | Performance of a contract |
| Keeping accounting and tax records | Customer data | Legal obligation |
| Keeping the Website secure and working | Technical data | Legitimate interests |
| Analytics and measuring advertising | Analytics and advertising data | Consent (you can withdraw at any time) |
| Sending business updates to listing customers | Contact data | Legitimate interests; you can opt out in every email |
We do not sell your personal data and we do not use it for automated decision-making that has legal or similarly significant effects on you.
4. Who we share data with
We share personal data only with service providers who process it on our behalf under contract, and only as needed:
- Website hosting and content delivery providers;
- Email and office software providers;
- Payment and invoicing providers (for paid listings);
- Our accountants and professional advisers;
- Google (Google Analytics / Google Ads), only if you consent to non-essential cookies;
- Law enforcement, regulators or courts where we are legally required to do so.
5. International transfers
Some of our providers may process data outside the UK (for example in the EEA or the United States). Where this happens we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep data
- General enquiries: up to 2 years after our last contact with you.
- Customer, invoice and payment records: 6 years after the end of the financial year they relate to, to meet UK tax and company law requirements.
- Server logs: up to 90 days, unless needed to investigate a security incident.
- Analytics data: as set in our analytics settings, no longer than 14 months.
7. Your rights
Under UK GDPR you have the right to: access your personal data; have inaccurate data corrected; have data erased; restrict or object to processing (including objecting to direct marketing at any time); data portability; and withdraw consent at any time where we rely on consent. To exercise any right, email [email protected]. We will respond within one month. We may need to verify your identity first.
8. Complaints
If you are unhappy with how we use your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
9. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and two-factor authentication on our business accounts. No method of transmission over the internet is completely secure, but we work to protect your data.
10. Links to other websites
Our directory links to third-party websites. We are not responsible for their privacy practices; please read their privacy policies.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last changed.