Privacy Policy

This Privacy Policy explains how ARC Management Systems Consulting Limited (“we”, “us” or “our”) collects, uses and protects personal information when you visit our website or contact us through it.

We are committed to handling personal information lawfully, fairly and transparently, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy should be read alongside our Cookie Policy, which explains the cookies and similar technologies used on this website.

Who we are

ARC Management Systems Consulting Limited is the data controller for personal information collected through this website.

If you have any questions about this policy or how we handle personal information, please contact us using the info@arcmsconsulting.com mailbox.

Information we collect

We collect personal information in the following ways:

Information you give us

When you use the enquiry form on this website, we collect the information you choose to provide, which may include:

• Your name;
• Your company or organisation;
• Your email address;
• Your telephone number, if you provide it; and
• The content of your message.

If you contact us directly by email or telephone, we will hold the information you provide in that correspondence.

Information collected automatically

When you visit our website, our hosting provider records standard technical information in server logs, such as your IP address, browser type and the pages requested. This information is used to keep the website secure and operating correctly.

Our enquiry form is protected by Cloudflare Turnstile, a security service that helps us distinguish genuine visitors from automated bots. Turnstile runs invisibly, so you will not see a challenge or a badge. To do its job it processes technical information about your device and browser, such as your IP address, browser characteristics and how you interact with the page, and it may store a small amount of data on your device for that purpose only. Cloudflare acts as a processor on our behalf and does not use this information to build a profile of you or for advertising.

Cloudflare describes what Turnstile collects and how it is handled in the Cloudflare Turnstile Privacy Policy. Its use on this website is also described in our Cookie Policy.

We do not use analytics, advertising or marketing technologies on this website, and we do not track your activity across other websites.

How we use your information

We use the personal information we collect to:

• Respond to your enquiry and correspond with you about it;
• Scope, propose and deliver consultancy or auditing services you have asked us about;
• Keep our website secure and protect it against spam and automated abuse; and
• Comply with our legal and regulatory obligations.

We do not use your information for marketing purposes unless you have asked us to keep in touch, and we do not sell personal information to anyone.

Our lawful basis

We rely on the following lawful bases under the UK GDPR:

• Legitimate interests — to respond to enquiries, to communicate with prospective and existing clients, and to keep our website secure. We have considered these interests against your rights and do not believe they are overridden by them.
• Contract — where your enquiry leads to an engagement, to take the steps you ask for before entering into a contract and to perform that contract.
• Legal obligation — where we are required to keep records or respond to lawful requests.

Who we share your information with

We share personal information only where it is necessary to operate the website and respond to you:

• Web Optic Limited, which hosts this website on a managed server in the United Kingdom and delivers enquiry form submissions to us by email;
• Cloudflare, Inc., which provides the Turnstile security check on our enquiry form; and
• Our email provider, through which we receive and reply to your correspondence.

These providers act on our behalf and are permitted to process personal information only for the purposes described here. We do not share personal information with any other third party unless we are required to do so by law.

International transfers

Our website is hosted in the United Kingdom. Cloudflare operates globally and may process the technical information used by Turnstile on servers outside the United Kingdom. Where that happens, the transfer is protected by safeguards recognised under UK data protection law, and Cloudflare's own privacy policy applies to its processing.

How long we keep your information

We keep enquiry correspondence for as long as is necessary to deal with your enquiry and any engagement that follows from it, and for a reasonable period afterwards in case you return to us. Where an enquiry does not lead to an engagement, we will not keep it for longer than two years after our last contact with you.

Server logs are kept by our hosting provider for a limited period for security purposes and are then deleted.

How we protect your information

This website is served over an encrypted connection (HTTPS). It is a static website with no database or content management system, which limits the information it holds and the ways in which it can be attacked. Access to the hosting environment is restricted, and it is monitored and backed up.

Information you send us by email is protected by the security measures of our email provider and by our own internal controls.

Your rights

Under the UK GDPR you have rights over your personal information, including the right to:

• Be informed about how your information is used;
• Access the personal information we hold about you;
• Have inaccurate or incomplete information corrected;
• Have your information erased, in certain circumstances;
• Restrict or object to our processing of your information, in certain circumstances; and
• Receive your information in a portable format, in certain circumstances.

To exercise any of these rights, please contact us using the info@arcmsconsulting.com mailbox. We may need to verify your identity before responding, and we will respond within one month.

If you are not satisfied with how we have handled your personal information, you have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would welcome the opportunity to address your concerns first.

Cookies and similar technologies

The only technology of this kind used on our website is Cloudflare Turnstile, which protects our enquiry form and is strictly necessary for that purpose. It operates invisibly, without a visible challenge. We do not use analytics, advertising or tracking cookies. Full details are in our Cookie Policy and the Cloudflare Turnstile Privacy Policy.

Links to other websites

Our website may contain links to other websites, including our LinkedIn page. This policy does not cover those websites, and we are not responsible for their content or privacy practices.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to the information we collect or how we use it;
• Changes to our website or the services we use to operate it;
• Changes in technology; or
• Changes in legal or regulatory requirements.

The date at the end of this policy indicates when it was most recently updated.

Contact us

If you have any questions about this Privacy Policy or how we handle personal information, please contact us using the info@arcmsconsulting.com mailbox.

Review of this Policy

This Policy was last updated in September 2026.