Last updated: August 7, 2025
This Privacy Policy explains how Arvion (“Arvion,” “we,” “us,” or “our”) collects, uses, and protects your personal data when you visit our website at https://arvion.net (the “Site”), contact us, or use our services. We are a creative digital agency based in the UK, serving clients globally. We are committed to protecting your privacy and handling your data in a transparent and lawful manner.
Governing Law: This Privacy Policy is governed by UK law, specifically the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As a global agency, we aim to comply with all applicable data protection laws worldwide, including the EU GDPR, California Consumer Privacy Act (CCPA), and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
By using our Site or services, you agree to the collection and use of your information in accordance with this policy.
Arvion is a UK-based creative digital agency specializing in UI/UX design, branding, website, app, and API development, digital marketing, graphics design, and video editing. Our registered address is [ ]. For data protection purposes, we are the data controller of the personal data we collect from you.
ICO Registration: [ ]
We collect personal data to provide and improve our services, communicate with you, and operate our business. Below is a detailed breakdown of the specific data we collect and why:
Contact Information:
Website Usage Data:
Third-Party Analytics Data:
Customer & Project Data:
Client Assets & Materials:
Marketing and Communication Data:
Financial Information:
We use the data we collect for the following purposes:
To Provide Services: To fulfill our contractual obligations, including delivering UI/UX design, development, digital marketing, and other current and future services. This includes processing client-provided assets and materials solely for project completion.
To Store and Manage Client Assets: We securely store client-provided materials (logos, content, media files, etc.) for the duration of projects and retain them as specified in our data retention policy.
To Communicate with You: To respond to your inquiries, provide customer support, and send you updates about your projects.
To Improve Our Website and Services: We analyze website usage data to understand how visitors interact with our Site, which helps us enhance its functionality, content, and user experience.
For Marketing and Promotion: With your consent, we may use your contact information to send you marketing materials, newsletters, and information about our services. You can opt out of these communications at any time.
For Legal and Regulatory Compliance: To comply with our legal obligations, enforce our terms and conditions, and protect our rights and the rights of our clients.
Under UK and EU data protection laws (including the UK GDPR), we must have a valid legal basis to process your personal data. Our legal bases are:
Contractual Necessity: We process your data to perform our contract with you or to take steps at your request before entering into a contract (e.g., when you request a quote or consultation). This applies to client project data, contact information for service delivery, and payment processing.
Legitimate Interests: We process data where it is necessary for our legitimate interests as a business, provided your rights and freedoms do not override those interests. Our legitimate interests include:
Consent: In some cases, we rely on your explicit consent to process your data, particularly for:
Legal Obligation: We process your data to comply with legal or regulatory obligations, such as:
We do not sell, rent, or trade your personal data with third parties. We may share your information with the following categories of recipients:
Service Providers and Their Specific Data Access:
Data Processing Agreements: All service providers are bound by Data Processing Agreements (DPAs) that require them to protect your data and only use it for the purposes we specify.
Legal and Regulatory Authorities: We may disclose your information if required by law or to respond to valid legal requests, such as a court order, subpoena, or regulatory investigation.
Business Transfers: In the event of a merger, acquisition, or sale of our assets, your data may be transferred as part of that transaction. You will be notified of any such change in ownership or control of your personal data.
Data Storage Locations: As a UK-based company serving global clients, your personal data may be transferred to and stored in countries outside the UK and European Economic Area (EEA). Our primary data storage locations include:
Transfer Safeguards: When we transfer your data to countries without an adequacy decision, we implement appropriate safeguards:
Third-Party Provider Vetting: We carefully assess all international service providers for their data protection practices and ensure they provide adequate safeguards for international transfers.
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Our specific retention periods are:
Contact Inquiries: 24 months from last contact to allow for follow-up with potential clients, unless you become a client
Client Project Data: 7 years after project completion (required for UK accounting and legal compliance under Companies Act 2006)
Client Assets & Materials:
Secure Deletion Process: After retention periods expire, we permanently delete or anonymize your data using industry-standard data destruction methods. For digital files, we use multi-pass overwriting techniques. For physical media, we use certified destruction services. We maintain logs of deletion activities for audit purposes.
We implement comprehensive technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or disclosure:
Technical Safeguards:
Organizational Safeguards:
Limitations: While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to maintaining industry best practices.
Under UK and international data protection laws, you have the following rights regarding your personal data:
Right to Access: You have the right to request a copy of the personal data we hold about you, including information about how we process it within the retention period.
Right to Rectification: You can request that we correct any inaccurate or incomplete personal data without undue delay.
Right to Erasure (‘Right to be Forgotten’): You can request deletion of your personal data when:
Note: This right may be limited where we have a legal obligation to retain the data (e.g., financial records for tax purposes).
Right to Restrict Processing: You can request that we limit how we use your personal data in certain circumstances, such as while we verify its accuracy.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g., CSV, JSON) and transmit it to another controller.
Right to Object: You can object to processing based on legitimate interests, particularly for direct marketing purposes (which we will stop immediately).
Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
How to Exercise Your Rights: To exercise any of these rights, please email us at privacy@arvion.com with the subject line “Data Subject Request” and include:
Response Time: We will respond to all valid requests within one month of receipt. For complex requests, we may extend this by an additional two months and will notify you of any delay.
Fees: Most requests are free, but we may charge a reasonable fee for excessive or repetitive requests.
Right to Complain: You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:
Current Status: We do not currently use automated decision-making processes or profiling that would significantly affect you. All business decisions involving your personal data are made by humans.
Future Changes: If we implement automated processing in the future (such as automated client matching or pricing algorithms), we will:
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.
In the unlikely event of a data breach that poses a high risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach, as required by law. We will provide information about the nature of the breach and the steps we are taking to address it.
Our website uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device. We use them for:
Essential Cookies: Necessary for the website to function properly
Functionality Cookies: Remember your preferences and settings
Analytics Cookies: Help us understand how you use our Site to improve it (Google Analytics)
Marketing Cookies: Provide personalized content and track marketing effectiveness
You can control cookies through your browser settings, but disabling them may affect the functionality of our Site.
Our Site may contain links to other websites, such as social media platforms or client sites. This Privacy Policy only applies to our Site. We are not responsible for the privacy practices of other websites, so we encourage you to read their privacy policies.
Change Notification Process:
What We Consider Significant Changes:
Your Options: If you disagree with policy changes, you may:
Version History: We maintain records of previous policy versions for transparency and legal compliance.
Effective Date: This Privacy Policy is effective as of August 7, 2025, and supersedes all previous versions.
Ownership: All client-provided assets, materials, and intellectual property remain the sole property of the client. We do not claim any ownership rights over materials provided to us.
Confidentiality: We treat all client assets and materials as confidential information. Our team members and contractors are bound by confidentiality agreements and will not disclose, use, or reproduce client materials for any purpose other than delivering the agreed services.
Security of Client Assets: Client materials are stored securely using industry-standard encryption and access controls. Access is limited to team members directly involved in your project.
Use Limitations: Client assets are used exclusively for:
Portfolio and Marketing Use: We will not use client materials, assets, or project details in our portfolio, case studies, or marketing materials without explicit written consent from the client.
Return of Materials: Upon project completion or termination, we will:
Third-Party Assets: If you provide materials that contain third-party intellectual property, you confirm that you have the necessary rights and permissions for us to use these materials in delivering our services.
For Privacy-Related Inquiries, contact us via;
Privacy Email: privacy@arvion.com (recommended for data subject requests)
General Email: hello@arvion.com
Address: [ ]
Phone: +(880) 164 408 565
For Data Subject Requests: Please use the subject line “Data Subject Request” and include your full name, contact information, and specific request details.
Response Time: We aim to respond to all inquiries within 3-5 business days, and data subject requests within one month as required by law.
For EU Residents: You may also contact your local data protection authority in your EU member state.
This Privacy Policy is effective as of August 7, 2025, and applies to all information collected by Arvion.