Privacy Policy
Last updated: 30 September 2026
At Arenno, accessible through arenno.co.uk, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, create an account, place an order, contact us or otherwise interact with our services.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and the Data (Use and Access) Act 2025.
1. Who We Are
Arenno operates the website arenno.co.uk.
Data Controller: Arenno
Website: arenno.co.uk
Email: support@arenno.co.uk
For questions about this Privacy Policy, the use of your personal information or your data protection rights, please contact us at support@arenno.co.uk.
If a UK representative is required under applicable data protection law, their contact details will be made available here.
2. Personal Information We Collect
Depending on how you use our website, we may collect the following categories of personal information:
Information You Provide to Us
This may include:
-
your full name;
-
billing and delivery address;
-
email address;
-
telephone number;
-
account details, if you create an account;
-
order and purchase information;
-
communications you send to us;
-
returns, refunds and customer service information; and
-
any other information you voluntarily provide.
Payment Information
When you make a purchase, payment information may be processed by our payment service providers.
Where payments are handled directly by a third-party payment provider, Arenno may receive information relating to the transaction, such as payment status, transaction reference and limited payment details, rather than your complete card information.
Information Collected Automatically
When you visit our website, we and our authorised service providers may automatically collect certain technical information, including:
-
IP address;
-
browser type and version;
-
device type;
-
operating system;
-
approximate location derived from your IP address;
-
pages viewed;
-
referring website or source;
-
interactions with our website;
-
shopping basket activity;
-
date and time of access; and
-
cookie and similar technology identifiers.
3. How We Use Your Personal Information
We may use your personal information to:
-
process, fulfil and deliver your orders;
-
process payments, refunds and returns;
-
send order confirmations and delivery updates;
-
provide customer support;
-
respond to enquiries and complaints;
-
manage your customer account;
-
detect and prevent fraud, abuse and security incidents;
-
maintain the security and functionality of our website;
-
comply with accounting, tax, legal and regulatory obligations;
-
improve our website, products and customer experience;
-
understand how customers use our website;
-
measure the effectiveness of our marketing;
-
personalise website content where permitted;
-
send marketing communications where permitted by law; and
-
establish, exercise or defend legal claims.
We will not use your personal information for purposes that are incompatible with those described in this Privacy Policy unless permitted or required by law.
4. Our Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for processing your personal information.
Depending on the circumstances, we may rely on:
Contract
We process information where necessary to enter into or perform a contract with you.
For example, we need your name, delivery address and contact information to process and deliver an order.
Legal Obligation
We may process information where necessary to comply with legal obligations, including tax, accounting, consumer protection and regulatory requirements.
Legitimate Interests
We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.
These interests may include:
-
improving our products and services;
-
operating and securing our website;
-
preventing fraud;
-
understanding customer behaviour;
-
managing our business;
-
protecting our legal rights; and
-
certain forms of direct marketing where permitted by law.
Consent
Where consent is required, such as for certain marketing communications, advertising technologies or non-essential cookies, we will ask for your consent.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Cookies and Similar Technologies
We use cookies and similar technologies to operate our website, remember preferences, understand website usage and, where permitted, measure and personalise advertising.
Some cookies are strictly necessary for the website to function. These may be used without consent where permitted by law.
Other cookies, including certain analytics, advertising and personalisation cookies, will only be used where the required consent has been obtained.
Where applicable, you can accept, reject or manage non-essential cookies through our cookie consent controls.
You may change your cookie preferences at any time through the cookie settings available on our website.
Further information about the cookies and technologies used on our website may be provided through our Cookie Policy or cookie preference centre.
6. Marketing Communications
Where permitted by law, we may use your contact details to send you information about our products, promotions and offers.
We will obtain consent where consent is legally required.
In circumstances where applicable law allows us to contact existing customers about similar products or services, we may do so while providing a clear opportunity to opt out.
You can stop receiving marketing communications at any time by:
-
using the unsubscribe option included in the communication; or
-
contacting us at support@arenno.co.uk.
Opting out of marketing communications will not prevent us from sending essential service communications, such as order confirmations, delivery notifications or information relating to an existing transaction.
7. How We Share Personal Information
We may share personal information with trusted third parties where reasonably necessary to operate our business and provide our services.
These may include:
-
payment processors;
-
website and e-commerce service providers;
-
hosting and cloud service providers;
-
delivery, courier and logistics providers;
-
customer support providers;
-
email and communications providers;
-
analytics providers;
-
advertising and marketing platforms, where permitted;
-
fraud prevention and cybersecurity providers;
-
accountants, auditors, insurers and professional advisers; and
-
government authorities, regulators, courts or law enforcement bodies where required by law.
We require service providers handling personal information on our behalf to process it appropriately and in accordance with applicable data protection requirements.
We may also disclose personal information in connection with a merger, acquisition, restructuring, financing, sale or transfer of all or part of our business, subject to appropriate safeguards.
We do not sell your personal information in the ordinary meaning of selling personal data for money.
8. International Transfers
Some of our service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with UK data protection law.
Depending on the destination and circumstances, these safeguards may include:
-
UK adequacy regulations;
-
approved contractual safeguards;
-
the UK International Data Transfer Agreement;
-
the UK Addendum to appropriate standard contractual clauses; or
-
another lawful transfer mechanism recognised under UK law.
You may contact us at support@arenno.co.uk if you would like further information about the safeguards used for international transfers relevant to your personal information.
9. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, fraud-prevention and reporting obligations.
The appropriate retention period depends on factors including:
-
the type and sensitivity of the information;
-
why the information was collected;
-
whether it remains necessary for providing our services;
-
applicable legal requirements; and
-
whether information may be required to establish or defend legal claims.
When information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.
10. Security
We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, disclosure or unauthorised access.
These measures may include access controls, encryption where appropriate, secure systems, monitoring and restrictions on who may access personal information.
However, no method of transmitting or storing information electronically can guarantee absolute security.
11. Your Data Protection Rights
Depending on the circumstances and subject to applicable legal limitations, you may have the right to:
-
Access personal information we hold about you;
-
Rectify inaccurate or incomplete personal information;
-
Erase your personal information in certain circumstances;
-
Restrict processing of your personal information;
-
Object to processing, including certain processing based on legitimate interests;
-
Object to direct marketing at any time;
-
Data portability, where applicable;
-
Withdraw consent where processing is based on consent; and
-
exercise rights relating to certain forms of automated decision-making.
These rights are not absolute and may not apply in every circumstance.
To exercise your rights, contact:
We may need to request information reasonably necessary to confirm your identity before responding to your request.
We will handle requests within the time limits required by applicable law.
12. Automated Processing and Fraud Prevention
We may use automated systems to assist with fraud prevention, security, payment verification, analytics and the operation of our website.
Where we make a decision based solely on automated processing that produces legal or similarly significant effects on you, we will provide the protections and information required under applicable UK data protection law.
13. Data Protection Complaints
If you have concerns about how Arenno has collected or used your personal information, you may submit a data protection complaint to us at:
Please include sufficient information for us to understand and investigate your complaint.
We will:
-
provide a clear means for you to raise a data protection complaint;
-
acknowledge qualifying complaints within the period required by applicable law;
-
take appropriate steps to investigate the complaint without undue delay;
-
keep you appropriately informed about the progress of the complaint; and
-
communicate the outcome of our investigation.
We encourage you to contact us first so that we have an opportunity to address your concerns.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
14. Third-Party Websites
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices of independent third-party websites. We recommend reviewing their privacy policies before providing personal information to them.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to:
-
our business or services;
-
the way we process personal information;
-
technologies used on our website; or
-
applicable legal and regulatory requirements.
When we make changes, we will update the “Last updated” date at the top of this page.
Where required by law, we will provide additional notice of material changes.
16. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data protection rights or want to make a data protection complaint, please contact us:
Arenno
Website: arenno.co.uk
Email: support@arenno.co.uk
Business Address: Orlando, FL - Atlantic Digital
We aim to handle all privacy enquiries fairly, transparently and in accordance with applicable UK data protection legislation.