Last updated: 08 October 2026
Who we are
Arc & Engine Marketing Consultancy ("Arc & Engine", "we", "us") is the data controller for the personal information described in this policy.
Legal entity: Arc & Engine Ltd, registered in England and Wales, company number 17352925
Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, UNITED KINGDOM
We handle personal information in line with the UK GDPR and the Data Protection Act 2018.
What this policy covers
This policy explains what personal information we collect through www.arcandengine.co.uk and in the course of providing our services, why we collect it, what we do with it, and the rights you have over it.
Information we collect
Information you give us directly
Your name, email address, company name, job title and the content of your message, when you complete our enquiry form or email us.
Information you share with us during introduction calls, diagnosis work or an ongoing engagement, including notes, documents and business information you provide. This may include the names and contact details of your colleagues or customers.
Billing details necessary to invoice you for work carried out.
Information collected automatically
Our website is hosted by Squarespace, which records limited technical information when you visit, including your IP address, browser and device type, the pages you view, and how you arrived at the site. This is used to keep the site running securely and to understand how it is used.
Why we use your information, and our lawful basis
Purpose
Lawful basis
Responding to your enquiry and arranging an introduction call
Taking steps at your request before entering a contract; our legitimate interest in responding to people who contact us
Providing consultancy services and managing the engagement
Performance of a contract
Invoicing, accounting and keeping business records
Legal obligation; legitimate interests
Keeping the website secure and understanding how it is used
Our legitimate interest in maintaining and improving our website
Sending occasional updates or insights by email, where you have asked to receive them
Consent, which you can withdraw at any time
We do not sell your personal information, and we do not use it to make automated decisions or to build marketing profiles.
Cookies
Our website uses cookies set by Squarespace that are necessary for the site to function, together with cookies that help us understand how visitors use the site. You can control or delete cookies through your browser settings. Blocking essential cookies may affect how parts of the site work.
Who we share it with
We keep your information confidential and share it only with:
Service providers who process data on our behalf, under contract and on our instructions. These currently include Squarespace (website hosting and form submissions), Xero accounting software and Miro virtual whiteboard.
Professional advisers, such as our accountant, where necessary.
Authorities or regulators, where we are legally required to disclose information.
Any information you share with us about your business during an engagement is treated as confidential and is not disclosed to third parties without your agreement.
International transfers
Some of our providers are based outside the UK, including in the United States. Where personal information is transferred outside the UK, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework, so that your information continues to be protected.
How long we keep it
Enquiries that do not lead to work: up to 12 months from our last contact with you.
Client records and project material: for the duration of the engagement and for 6 years afterwards, in line with our contractual and accounting obligations.
Financial records: 6 years, as required by HMRC.
Marketing contacts: until you unsubscribe or ask us to remove you.
Your rights
Under UK data protection law you have the right to:
ask for a copy of the personal information we hold about you;
ask us to correct information that is inaccurate or incomplete;
ask us to delete your information, where there is no ongoing reason for us to keep it;
ask us to restrict how we use your information, or object to our use of it where we rely on legitimate interests;
ask us to transfer your information to another provider, where that applies;
withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, email info@arcandengine.co.uk. We will respond within one month.
If you are unhappy with how we have handled your information, you can raise it with us first, and you also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Security
We take reasonable technical and organisational measures to protect your information, including access controls, encrypted storage and reputable service providers. No system is completely secure, but we review our arrangements as the business grows.
Use of AI tools
We use AI tools to support our own work, such as research and drafting. We do not enter personal data or client-confidential information into these tools. Where we use AI on client work, all information is anonymised first, so no client or individual can be identified.
Children
Our services are aimed at businesses. We do not knowingly collect personal information from anyone under 18.
Changes to this policy
We may update this policy from time to time. The current version will always be published on this page, with the date it was last updated shown at the top.
Contact
Questions about this policy or about how we handle your information: info@arcandengine.co.uk