Privacy Policy

Last Updated: 28 September 2026

1. Introduction

Arkival Ltd (“Arkival”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and share your personal data when you visit our website, purchase our digital products, create an account, subscribe to our services, communicate with us or otherwise interact with Arkival.

This policy should be read alongside our Terms and Conditions and Cookies Policy where applicable.

For the purposes of UK data protection law, Arkival Ltd is the controller of the personal data described in this Privacy Policy.

2. Contact Details

Arkival Ltd
Office 6
251–255 Church Road
Benfleet
Essex
SS7 4QP
United Kingdom

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us through the Contact page on our website.

3. Personal Data We Collect

The personal data we collect depends on how you interact with Arkival.

Information You Provide to Us

We may collect information that you provide when you:

  • create or manage an account;

  • purchase a digital product;

  • purchase, manage or cancel a subscription;

  • sign up for newsletters or marketing communications;

  • participate in competitions, promotions or surveys;

  • contact us for customer support or otherwise communicate with us; or

  • otherwise provide information directly to us.

This information may include:

  • your name;

  • email address;

  • account and registration information;

  • billing information;

  • order and transaction information;

  • subscription information;

  • marketing preferences;

  • communications with us; and

  • other information that you choose to provide.

Payment Information

When you make a payment, your payment information is processed securely through the payment services made available through our website and our payment service providers.

Arkival does not directly store full payment card details on its own servers.

Payment providers may collect and process information necessary to complete transactions, prevent fraud and comply with their legal obligations.

Information Collected Automatically

When you visit or use the Arkival website, certain technical and usage information may be collected automatically.

This may include:

  • IP address;

  • browser and device type;

  • operating system;

  • pages viewed;

  • referral source;

  • approximate location derived from technical information;

  • dates and times of visits;

  • website interactions; and

  • other technical or diagnostic information.

We may also use cookies and similar technologies. Further information about these technologies and your choices is available in our Cookies Policy.

Information From Third Parties

We may receive personal data from third parties where appropriate, including our website, payment, analytics, marketing and social media service providers.

For example, we may receive information relating to a transaction from a payment provider or information relating to your interaction with an Arkival promotion or social media account.

4. How We Use Your Personal Data

We may use personal data to:

  • process purchases and payments;

  • provide access to digital products;

  • create and manage customer accounts;

  • create and manage subscriptions;

  • provide and maintain the Arkival website and member services;

  • respond to questions and provide customer support;

  • send important service, account, purchase or subscription communications;

  • send marketing communications where permitted;

  • operate competitions, promotions or surveys;

  • maintain the security and integrity of our website and services;

  • detect, investigate and prevent fraud, abuse or misuse;

  • understand how our website and services are used;

  • improve our website, products and customer experience;

  • maintain appropriate business, accounting and tax records;

  • establish, exercise or defend legal claims; and

  • comply with applicable legal and regulatory obligations.

5. Lawful Bases for Processing

We only process personal data where we have a lawful basis for doing so.

Depending on the circumstances, we may rely on the following lawful bases:

Performance of a contract – where processing is necessary to enter into or perform a contract with you. This includes processing purchases, providing digital products, managing accounts and subscriptions and providing services you have requested.

Legal obligation – where processing is necessary for us to comply with a legal obligation, including certain accounting, tax, regulatory and record-keeping requirements.

Legitimate interests – where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. These interests may include operating and improving Arkival, providing customer support, maintaining the security of our services, understanding how our services are used, preventing fraud and protecting our business and legal rights.

Consent – where you have given us consent to carry out particular processing. This may include certain marketing activities and the use of certain cookies or similar technologies where consent is required.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Marketing

Where permitted by law, we may use your contact details to send you information about Arkival products, collections, subscription services, promotions and other updates.

Where consent is required, we will obtain it before sending such communications.

You can unsubscribe from marketing emails at any time by using the unsubscribe link contained within the email or by contacting us.

Unsubscribing from marketing does not prevent us from sending necessary service communications relating to your account, purchases, subscriptions or other transactions with Arkival.

7. Third-Party Services and Sharing Your Information

We use third-party service providers to operate Arkival. These providers may process personal data on our behalf or, in some circumstances, for their own purposes in accordance with their own privacy policies.

These include:

Squarespace – our website, online store and subscription services are operated using Squarespace. Squarespace may process personal data when you visit our website, create or use an account, purchase products, manage a subscription or otherwise interact with our services.

Squarespace Payments – used to facilitate and process payments made through the Arkival website. Payment information may be processed by Squarespace and its payment service providers in order to complete transactions securely.

Google Drive – used to host and deliver certain digital products purchased through our retail store. Google may process technical information when you access files through its services.

Cloudflare and Cloudflare R2 – used to host and deliver certain digital products, including files made available through our subscription service. Cloudflare may process technical information such as IP addresses and request information when files or services are accessed.

Squarespace Email Campaigns – used to manage and send newsletters, product announcements and other marketing communications. Squarespace may process contact information, subscription preferences and information relating to the delivery of and interaction with those communications.

We may also disclose personal data where reasonably necessary to:

  • professional advisers such as accountants, lawyers or insurers;

  • regulators, courts, law enforcement authorities or other public authorities where required by law;

  • prevent or investigate fraud, misuse or security incidents;

  • protect Arkival’s legal rights; or

  • facilitate a sale, restructuring, investment or transfer of all or part of our business, subject to appropriate protections.

We do not sell your personal data.

8. International Transfers

Some of the service providers we use may process personal data outside the United Kingdom.

Where a transfer of personal data outside the UK is subject to UK international data transfer rules, we take appropriate steps to ensure that the transfer complies with applicable data protection law.

Depending on the circumstances, this may include relying on UK adequacy regulations, appropriate contractual or other safeguards, or another lawful transfer mechanism recognised under UK data protection law.

You may contact us if you would like further information about the safeguards applicable to international transfers of your personal data.

9. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, disclosure, misuse or unauthorised access.

Access to personal data is limited to people and service providers who reasonably require access for legitimate business purposes.

Although we take reasonable measures to protect personal data, no internet transmission or electronic storage system can be guaranteed to be completely secure.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, security and reporting requirements and establishing, exercising or defending legal claims.

The appropriate retention period depends on the type of information and why we hold it.

As a general guide:

Account information – normally retained while your account remains active. Certain information may be retained after an account is closed where reasonably necessary for legal, fraud-prevention, security or record-keeping purposes.

Transaction and financial records – retained for the period required by applicable accounting and tax law. Certain UK company and tax records generally need to be retained for approximately six years, although longer periods may apply in some circumstances.

Customer communications – retained for as long as reasonably necessary to provide support, maintain appropriate business records, resolve disputes and establish or defend legal claims.

Marketing information – retained while you remain subscribed or as otherwise necessary to record your marketing preferences. We may retain limited information after you unsubscribe to ensure that your preference continues to be respected.

Website and usage information – retained for an appropriate period depending on the nature of the data, the relevant service and the purpose for which it is collected.

When personal data is no longer required, we will delete, anonymise or otherwise securely dispose of it where reasonably practicable and subject to our legal obligations.

11. Your Data Protection Rights

Depending on the circumstances and the lawful basis on which we process your personal data, you may have the right to:

Access – request a copy of personal data that we hold about you.

Rectification – ask us to correct inaccurate or incomplete personal data.

Erasure – ask us to delete personal data in circumstances where the law provides a right to erasure.

Restriction – ask us to restrict the processing of your personal data in certain circumstances.

Data portability – request certain personal data in a structured, commonly used and machine-readable format and, where applicable, have it transferred to another organisation.

Withdraw consent – withdraw your consent at any time where we rely on consent as our lawful basis.

Object to processing – object to certain processing based on legitimate interests.

Your Right to Object

You have the right to object to the processing of your personal data in certain circumstances.

You also have the right to object at any time to the use of your personal data for direct marketing purposes.

To exercise any of these rights, please contact us through the Contact page on our website.

These rights are not absolute and may be subject to conditions or exemptions under applicable data protection law.

We may need to request information from you to verify your identity before responding to certain requests.

12. Cookies and Similar Technologies

We use cookies and similar technologies in connection with the Arkival website.

Some technologies are necessary for our website and services to operate. Others may be used for functionality, analytics, measurement or marketing purposes.

Where consent is required by applicable law, we will request your consent before using the relevant cookies or similar technologies.

For more information about the technologies we use, their purposes and the choices available to you, please see our Cookies Policy.

13. Children

Arkival is not specifically directed at children, and we do not knowingly seek to collect personal data from children.

If you believe that a child has provided personal data to us in circumstances where they should not have done so, please contact us so that we can investigate and take appropriate action.

14. Automated Decision-Making

Arkival does not currently use personal data to make solely automated decisions that produce legal or similarly significant effects on individuals.

If this changes, we will update this Privacy Policy and provide the information required by applicable data protection law.

15. Complaints

If you have a complaint or concern about how we use your personal data, please contact us using the details in Section 17. We will investigate and respond in accordance with applicable data protection law.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Information about your data protection rights and how to make a complaint is available from the ICO.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, business practices, service providers or legal obligations.

When we make changes, we will publish the updated Privacy Policy on this page and update the “Last Updated” date above.

Where appropriate, we may also notify you of significant changes through our website, account services or other appropriate means.

17. Contact Us

If you have questions about this Privacy Policy, wish to exercise a data protection right or have concerns about how your personal data is handled, please contact:

Arkival Ltd
Office 6
251–255 Church Road
Benfleet
Essex
SS7 4QP
United Kingdom

You can contact us through the Contact page on the Arkival website.