Privacy Policy

Last updated: 20 October 2026

This policy explains how Arrel Marketing ("we", "us", "our") collects, uses and protects personal data when you visit this website or contact us, and sets out your rights over that data.

1. Who we are

Arrel Marketing is a marketing agency operating across the UK and Spain. For the purposes of data protection law, we are the data controller for the personal data described in this policy.

Data controller: Arrel Marketing
Registered address: Flat 3, 5 Claude Road, Cardiff, CF24 3PZ
Company registration number: 17054022
Contact email: hello@arrelmarketing.com

2. What data we collect

We collect the following categories of personal data:

• Contact form submissions: name, email address, business name or social media handle (if you choose to share it), and the content of your message.
• Correspondence: information you provide when emailing, messaging or calling us.
• Website usage data: where you have given consent, we may collect analytics data such as pages visited, device and browser type, and approximate location, via cookies (see our Cookies Policy).
• Client and prospect information: if you become a client, business details relevant to delivering our services (e.g. brand information, social media account access).

3. How we use your data

We use personal data to:

• Respond to enquiries submitted through the contact form or by email
• Provide, manage and improve our marketing services to clients
• Understand how our website is used, to improve it, where you've consented to analytics cookies
• Meet our legal and accounting obligations

4. Legal basis for processing

Under UK GDPR and, where applicable, the EU GDPR, we rely on the following legal bases: your consent (for non-essential cookies), our legitimate interests (for responding to enquiries and improving our services), and contractual necessity (for delivering services to clients).

5. Sharing your data

We do not sell your personal data. We only share it with trusted providers who help us run the website and deliver our services. They process data on our instructions and are required to keep it secure. These are:

• Google Workspace: email, calendar and file storage
• Netlify: hosts this website and receives messages sent through our contact form
• Metricool: scheduling, publishing and reporting on clients' social media accounts
• Canva, Adobe Creative Cloud and CapCut: designing and editing content for clients
• Anthropic (Claude): an AI assistant we use to help with writing and planning
• Trace: measures which marketing brings visitors to the site, only if you accept analytics cookies (see our Cookies Policy)
• Our accountant and bank: invoicing and keeping financial records

Where you've agreed to analytics cookies, we also use Google Analytics to understand how visitors use the site. Details are in our Cookies Policy.

6. International transfers

We work between the UK and Spain, and some of the providers above (including Google, Netlify, Adobe, Canva, CapCut and Anthropic) may process data outside the UK and the European Economic Area, for example in the United States. Where this happens, we rely on recognised safeguards such as adequacy regulations, the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or the EU-US Data Privacy Framework and its UK Extension.

7. How long we keep your data

If you get in touch but don't become a client, we keep your enquiry and our correspondence for up to 12 months after our last contact, then delete it.

If you become a client, we keep your contract, invoices and related records for 6 years after our work together ends, as required for tax and accounting purposes. Any access we have to your social media accounts is removed when our work together ends, and we delete content files we no longer need.

8. Your rights

Depending on where you're based, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data
• Object to or restrict certain processing
• Withdraw consent at any time (for marketing or analytics)
• Request a copy of your data in a portable format
• Lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO); in Spain, the Agencia Española de Protección de Datos (AEPD)

To exercise any of these rights, contact us at hello@arrelmarketing.com.

9. Cookies

This website uses cookies to function and, with your consent, to help us understand how it's used. Full details are in our Cookies Policy. You can change your preferences at any time using the "Cookie Settings" link in the footer.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.

11. Contact us

If you have any questions about this policy or how we handle your data, please get in touch at hello@arrelmarketing.com.