Legal
Privacy Policy
Last updated: 30 June 2026
1. Who we are
Arbiris Protocol (“Arbiris”, “we”, “us”) operates the website at arbiris.uk. We are the data controller for the personal data described in this policy.
If you have questions about how we handle your data, contact us at privacy@arbiris.uk.
2. What data we collect and why
We collect data only for purposes described below. We do not sell your data to third parties.
Analytics cookies (PostHog)
If you consent, we use PostHog to collect anonymised analytics about how visitors use this site — including pages visited, session duration, browser type, device type, and approximate location (country/city level). IP addresses are anonymised before storage. No data is sold or shared for advertising.
- Legal basis: Your consent (Article 6(1)(a) UK GDPR)
- Retention: 12 months from collection
- Processor: PostHog, Inc. — data hosted on EU infrastructure (Frankfurt)
Contact form submissions
When you submit our contact form, we collect your name, email address, and message content. This data is used solely to respond to your enquiry.
- Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR)
- Retention: 24 months from last contact
- Processor: Resend (email delivery)
3. Cookies we set
| Cookie | Purpose | Expires |
|---|---|---|
| cookie-consent | Stores your cookie preferences, including analytics consent | localStorage (no expiry) |
| ph_* | PostHog analytics (only if consented) | 1 year |
4. International transfers
PostHog stores data on EU-based servers (Frankfurt, Germany), which provides equivalent protection to UK GDPR standards. No data is transferred to countries without an adequacy decision without appropriate safeguards in place.
5. Your rights under UK GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (“right to be forgotten”)
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — withdraw your analytics consent at any time; this does not affect the lawfulness of processing before withdrawal
To exercise any right, contact privacy@arbiris.uk. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
6. Withdraw or update your consent
You can change your cookie preferences at any time. Withdrawing consent stops all future analytics collection immediately; it does not erase data already collected.
7. Changes to this policy
We may update this policy as our practices change or as required by law. The “Last updated” date at the top reflects the most recent revision. Significant changes will be communicated via the website.