Introduction

Arrk Limited  (“we”, “our”, “us”), registered in England under number 03574335, are  committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, store, process, use, disclose, and safeguard your information when you visit our website www.arrkgroup.com and/or use our mobile application (the “Service”). This policy is in accordance with the prevailing data protection legislation, including the Data Protection Act 2018 and General Data Protection Regulations (GDPR) as applied by UK and EU.

Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

Information We Collect

We may collect and process the following data about you:

  • Personal Identification Information: Name, email address, phone number, etc. And it may include your title, gender, age, full name, address and other communication contact information, academic achievements; course of study, university or further education establishment, job title, industry affiliation, company affiliation, specialism, social media interests and following, club membership and personal interests, disability and ethnicity information
  • Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Usage Data: Information about how you use our website, social media posts, job postings, surveys, our products and services offerings.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

Manner of collecting Information

We may collect the information in the following situation and manner:

  • by approaching us to supply services
  • by subscribing to our news articles, case studies, blogs and articles etc.
  • by interacting with our website, by participating in our blogs and articles.
  • by installing cookies from our websites and apps (Please refer our cookies policy)
  • by interacting with our social media channels and postings
  • by applying to any job postings
  • by requesting further information, services or content; and
  • by completing surveys and questionnaires
  • through third party data subscriptions

How We Use Your Information

We use the information we collect in the following ways:

  • To provide, operate, and maintain our Service.
  • To improve, personalize, and expand our Service.
  • To understand and analyze how you use our Service.
  • To develop new products, services, features, and functionality.
  • To communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes.
  • To process your transactions and manage your orders.
  • To send you emails, mobile notifications, pop-ups, etc.
  • To find and prevent fraud.
  • To carry out the requirements of any contracts entered into between you and us.
  • To allow you to use the interactive features, AI based analytics of our website, when you choose to do so.
  • Where you are an employee or job applicant to record details of your employment or application.

We are committed to responsible use and communication using your personal information and related practices. We only send communication to individuals whose data has been lawfully and fairly obtained. If at any time you do not wish to receive emails from us, please use the unsubscribe functionality contained in our communications. Alternatively, please contact us on talktous@arrkgroup.com.

Our websites, social media posts and email bulletins may contain links to and from the websites, social media pages of third parties including our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies. We do not set and are not responsible for those policies.

Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds:

  • Consent: You have given your consent for us to process your personal data for one or more specific purposes.
  • Contract: Processing is necessary for the performance of a contract to which you are a party.
  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
  • Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by us or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

Your Data Protection Rights

The data protection legislation gives you a number of rights. These rights include:

  • Right to data erasure which is explained under the heading “How do I opt out” above.
  • Right to make a “subject access request”, which is a request for a copy of the data which we hold about you.
  • Right of correction (or where appropriate erasure) of data which we hold about you where this is inaccurate.
  • Right to data portability
  • Right to withdraw your future consent to our processing your personal data.
  • Right to contact and make enquiries of our data protection co-ordinator who can be contacted at Email: talktous@arrkgroup.com
  • Right to complain to the Office of the Information Commissioner.
  • Right to be informed of the matters stated in this privacy policy.

Please be aware that if you exercise one of these rights, that in order to protect your privacy, we may require you to undergo some verification tests to ensure that we are dealing with you.

Data Usage, Sharing and Disclosure

We may share your personal data with:

  • Service Providers: In addition to our employees, we may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related marketing services, or assist us in analyzing how our Service is used.
  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Legal Requirements: We may disclose your personal data where required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
  • Digital Marketing:  We employ inhouse developed and third party applications/ platforms and subscriptions  for marketing our services digitally to our customers and potential customers.  And your personal data may be shared, stored and processed with-in/by such applications.
  • Data Analysis: We employ inhouse developed and third party applications/ platforms and subscriptions for varieties of data analytics to improve our service offerings. And your personal data may be shared, stored and processed with-in/by such applications.
  • Analytics Suppliers: In common with the comparable companies we use your personal data to help Analytic Suppliers match relevant ads to you using the data analytics of those Analytic Suppliers. However, we only use the data in that way where you are a subscriber to the services of Analytic Suppliers and have therefore agreed to this service by acceding to the relevant Agreements of those Analytic Suppliers. Accordingly, we do not control the countries in which those Analytic Suppliers process data.

We mean by Analytic Suppliers companies such as: Facebook; Google; LinkedIn; Twitter and Microsoft. Analytic Suppliers supply us with statistical information on how users interact with our website to help us improve our user experience.

  • Third party aggregator services and plug-ins:  As a part of our marketing of our services we are listed on several third party aggregators platforms, plug-ins, most of which are linked/directed to our websites.  This may create a situation of access to your private information.
  • Transfer to India: Disclosure of your information

We may disclose your relevant personal information freely between the member companies of our group, which at the moment is Arrk Limited, Onevoice Digital Limited and Arrk Solutions Private Limited, a private limited company duly incorporated with registration number U72900MH2002FTC135091 under the laws of India, having its registered office at Unit No. 1 & 2, Building No. 5, Sector-2, Millennium Business Park, Mahape, Navi Mumbai, PIN 400710. This Privacy Notice applies to each of those companies and we reserve the right to freely pass the data between these companies. Arrk Limited (which is the parent company of Arrk Solutions Private Limited) and Arrk Solutions Private Limited have entered into a Model Form Contract based on the Standard Contractual Clauses on transfer of personal data to third countries as per Directive 95/46/EC of European Parliament and of the Council. This allows for the lawful transfer of your data to Arrk Solutions Private Limited.

Data Security

We use administrative, technical, and physical security measures to help protect your personal data. With our cloud adoption strategy, most of the data has moved to cloud with relevant security, back-up services provided by the cloud service providers.

We implement appropriate security measures to protect information from loss, misuse, unauthorised access, modification, disclosure, alteration, destruction.  Our security systems include password authenticated access, Email and Web Filtering and Monitoring Tools, End Point Protection Systems, along with regular change policies and where ever appropriate including Multi Factor Authentication. We also encrypt and anonymise data wherever it is appropriate to do so.  We regularly take back-ups of our data, including Cloud storage. We regularly review overall web security and audit procedures.

Our security measures include the following Information Security Management (“ISMS”) policies:

  • ISMS policy: Acceptable Usage
  • ISMS policy: Antivirus
  • ISMS policy: Backup
  • ISMS policy: Cloud Computing
  • ISMS policy: Data Protection
  • ISMS policy: Data Security Breach
  • ISMS policy: Incident Management
  • ISMS policy: Information Handling
  • ISMS policy: Logical Access Control
  • ISMS policy: Mobile Computing
  • ISMS policy: Network and System Security
  • ISMS policy: Password protection
  • ISMS policy: Physical Security
  • Information Technology Security policy: – Patch Management

In conforming with data protection laws, we endeavor to implement appropriate procedures to protect your personal data and to prevent any unauthorized access or misuse of it. Our servers, cloud storages on which your personal data is kept, are located in the United Kingdom or, in the case of our sister company Arrk Solutions Private Limited, India.

We use the services of several companies located across the globe.  It is our endeavor to ensure the relevant suppliers are in compliance to local/jurisdictional data compliances likes;

  • Companies that are located in the United States, has joined the Privacy Shield system allowing the processing of data by those company in accordance with the GDPR.
  • Companies that are located in the United Kingdom and European Union are directly governed by the GDPR.
  • Companies that are located in India or other places have commensurate Information Security practices in place allowing the processing of data by those company in accordance with the GDPR.

Despite the best of intentions and practices, please be aware that the storage, transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data when transmitted via the internet between us: any such transmission is at your own risk. Please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

Data Retention

We normally hold and process your data in accordance with the following criteria and duration:

Source criteria of the data Relevant Event date Maximum duration of processing
Data collected for events Date of event 12 months after the end of the year in which event took place
Data collected during case studies, white papers, articles, blogs, surveys and questionnaires and similar The last date on which such case studies, white papers, articles and blog were hosted live on our websites 12 months after the end of the year in which such contents were withdrawn from our websites
Data collected when you correspond or similarly interact with us The last date of such correspondence or interaction with us 12 months after the end of the year in which the last such correspondence or interaction took place
Data collected during recruitment processes where you are not employed The last date on which we communicated in the recruitment process 12 months after the end of the year in which the said last date fell
Data collected during recruitment processes where you are employed The last date of your employment 12 months after the end of the sixth year in which the last date of your employment fell
Data not falling into any of the categories above but otherwise collected about you from a third party Last date on which we had contact with you 12 months after the end of the year in which the last date on which we had contact with you fell

 

In addition, we may regularly purge personal data subject records which are not relevant on earlier occasions.

In any event we will stop the processing of your data where you ask us to do so by contacting us at talktous@arrkgroup.com. The only circumstances in which we will not do so are where we have a legal obligation or a legitimate interest to continue processing your data.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page, unless otherwise stated.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • By email: talktous@arrkgroup.com
  • By visiting this page on our website: www.arrkgroup.com
  • By phone number: +44 161 227 9900
  • By mail: Arrk Limited, Colony Jactin House, 24 Hood Street, Manchester, M4 6WX, United Kingdom