Book Audit

Privacy Policy

Last updated: 28th August 2022

This privacy policy describes our policies and procedures on the collection, use and disclosure of your information when you use the service and tells you about your privacy rights and how the law protects you.

We use your personal data to provide and improve the service. By using the service, you agree to the collection and use of information in accordance with this privacy policy.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

01. Consent

By using our website, you hereby consent to our privacy policy and agree to its terms.

02. Collecting Information

02.1. Personal Information You Disclose To Us

The personal information that we collect on this website, you have voluntarily provided to us when you express an interest in obtaining information about us or services, when you participate in activities on the services, or otherwise when you contact us.

The personal information that you have provided will depend on interactions with us through the services we offer on the website. The personal information we collect may be the following;

Sensitive Information

We do not request any sensitive personal information through our website.

Payment Information

If you're signing up for our services, we may collect data necessary to process your payment, such as your payment card details. All payment data is processed and stored (when necessary) by our payment provider Stripe. You can find their privacy notice here.

02.2. Information Automatically Collected

When visiting our website, some information such as your internet protocol address (IP address), browser and device are collected automatically.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we may also collect information through cookies, web beacons or pixels.

The information that we collect automatically includes;

Log & Website Usage Information

Our servers collect service-related, diagnostic, usage, and performance data when you visit or use our website and save it in log files. This log data includes your IP address, device information, browser type and settings, as well as information about your activity on the website depending on how you engage with us.

Device Information

We gather device data such as information about your computer, phone, tablet, or other devices you may use to access our website. This device data might include information such as your IP address, device model, location, browser type, internet service provider, mobile carrier, operating system and system configuration details based on the technology used.

Location Information

We collect information about the location of your device, which can be either precise or imprecise. The amount of data we gather is determined by the kind and settings of the gadget you use to access our website. Only IP address-based location data is collected and no GPS locating is used.

02.3. Information Collected From Other Sources

We may collect information about you from a variety of sources in order to better provide you with relevant marketing, offers, and services and to keep our records up to date. This data includes residential addresses, job titles, email addresses, phone numbers, intent data (or user behaviour data), IP addresses and social media profiles.

03. Processing Information

Depending on how you use our services, we may process your personal information for a number of reasons, including:

  1. To provide our services to our customers. We may use your information to deliver the service you requested.
  2. To support user enquiries. We may use your information to respond to your questions and address any concerns you may have with the provided service.
  3. To send administrative information to you. We may use your information to send you details about our services or changes to our terms and conditions.
  4. To provide you with marketing and promotional material. We may use your personal information for our marketing purposes if this is in accordance with your marketing preferences. You can opt out of any marketing communications by following the unsubscribe link in the footer of any marketing emails or SMS messages. You can also contact us directly for us to remove any information we hold.
  5. To deliver targeted advertising to you. We may use your information to show you personalised content and advertising which is tailored to your interests or location.
  6. To discover usage trends. We may use information about how you use our website or services to better understand how they are being used so we can improve them for future users.
  7. To assess the success of our marketing efforts. We may use your information to monitor and assess how to provide marketing campaigns that are most relevant to you.

Legal Basis of Processing Your Information

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

  1. Consent. We may use your information if you have given us consent to do so. You may withdraw your consent at any time by contacting us.
  2. Honour a contract. We may use your personal information to preserve our rights and obligations under a contract with you, including but not limited to the services we provide or at your request before entering into a contract with you.
  3. Legitimate Interests. We may use your information if we feel it is necessary to pursue our legitimate business interests, and those interests do not outweigh your rights and fundamental freedoms. For example, we may use personal information for the following purposes in order to a. Send them information about special offers on our services, b. Present personalised and relevant advertising content to them, c. Analyse how people use our services in order to improve them.
  4. Legal Obligations. We may use your information in order to comply with our legal responsibilities, such as cooperating with law enforcement or regulatory agency, defending our legal rights, or disclosing your data as evidence in a court case in which we are involved.
  5. Vital Interests. We may use your information if we believe it is necessary to safeguard your vital interests or the vital interests of a third party, such as situations that could endanger the safety of any person.

04. Sharing Information

We may share your information with service providers and sub-contractors who execute services for us or on our behalf and need access to such data to do their tasks. We have contracts in place with all service providers and sub-contractors, this is to safeguard your personal information. This means that, unless we have instructed them to do so, they are unable to take any actions with your personal information. They will not sell or share your personal information with anybody other than us. They also commit to keeping the data they have on our behalf and storing it for the length of time we've specified. The third parties we may share personal information with are as follows:

We may need to share your personal information in the following situations:

05. Storing Information

05.1. Information Storage Timeframes

We will only keep your personal information as long as it is required for the purposes stated in this privacy notice unless a longer retention period is required or permitted by law (such as accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than 2-years.

When we don't have a continuing business need to handle your personal information, we will either delete or anonymise it, or, if this is not feasible (for example, because your personal information has been kept in backup archives), we will securely store your personal data and isolate it from any future processing until you give us permission to do so.

05.2. Keeping Information Safe

We have implemented appropriate and reasonable technical and organisational security measures to safeguard the privacy of any personal information we handle. Despite our efforts to protect your information, no transmission over the Internet or data storage technology can be assured to be completely secure. We can't promise or guarantee that any criminals won't be able to break through our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, the transmission of personal information to and from our services is at your own risk. You should only access our website within a secure environment.

06. Privacy Rights

In some regions such as the UK, the EU, Iceland, Liechtenstein and Norway you have certain privacy rights under applicable data protection laws of those regions. These may include the following rights;

  1. To request access and receive a copy of your personal information that we hold.
  2. To request the complete deletion of your personal information.
  3. To restrict the use of your personal information.
  4. To data portability.

06.1 Objecting and Complaints

In certain circumstances, you may also have the right to object to the use of your personal information. You can make such a request by contacting us using the contact details provided below in section 08. Contact Arriba.

We will consider each request and act accordingly with the applicable data protection laws in your region.

If you believe we are unlawfully using your personal information, you also have the right to complain to your local data protection authority.

06.2 Withdrawing Consent

You have the right to withdraw your consent if you give it in order for us to process your personal information. You can withdraw your consent at any time by contacting us by using the contact details provided in the 08. Contact Arriba.

However, please note that this will not affect the lawfulness of the processing before its withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

06.3 Opt-Out of Marketing Communications

You can unsubscribe from our marketing communications at any time by clicking on the unsubscribe link in the footer of emails that we send, replying 'STOP' to the SMS messages that we send, or by contacting us using directly using the contact details provided in the 08. Contact Arriba. You will then be removed from our communication marketing channels. However, please note we may still contact you in relation to any services you have with us, to respond to service requests or other non-marketing reasons.

06.4 Cookies and Tracking

By default, most modern web browsers are set to accept cookies by default. You can usually choose to set your browser to reject cookies and remove any pre-existing cookies. If you do choose to remove cookies and reject cookies being used, this could affect certain features and aspects of our website.

If you have any questions or enquiries about your privacy rights and what they mean for you or your personal information then you can email us at [email protected].

07. Updates to Privacy Notice

We reserve the right to update this privacy notice from time to time when we see fit. Please see the last updated date at the top of the privacy notice for when we last revised our privacy notice. Please note that the updated version will be effective as soon as accessible. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

08. Contact Arriba

If you have questions about this notice, you may email us at [email protected].

You can also contact us via post using the following address;

Arriba, White Tower, MediaCityUK, Salford, M50 2NT, UK