Privacy Policy

1. Who is responsible for your data

The Website is operated under the Areté brand.

For privacy-related questions, requests or concerns, contact:

privacy@aretehuman.com

2. Information we collect

Areté follows a data-minimisation approach. We aim to collect only information that is reasonably necessary for the relevant purpose.

Information you provide to us

If you contact us by email, we may receive information such as:

• your name;
• your email address;
• the contents of your message;
• and any other information you choose to provide.

If an enquiry later develops into a professional relationship, additional information may be collected separately where necessary to provide the relevant service.

Please avoid sending medical records or other particularly sensitive personal information in an initial email enquiry unless Areté has specifically requested that information through an appropriate channel.

Technical information

When you visit the Website, limited technical information may be processed automatically by the infrastructure used to deliver and protect it.

This may include information such as:

• IP address;
• browser or device information;
• request timestamps;
• security events;
• and basic network or server logs.

This information is used primarily to deliver the Website, maintain security, prevent abuse and diagnose technical problems.

3. How we use personal information

We may use personal information where reasonably necessary to:

• respond to enquiries;
• communicate with prospective or existing clients;
• take steps towards providing requested services;
• operate and secure the Website;
• prevent misuse or abuse;
• maintain appropriate business records;
• and comply with applicable legal obligations.

We do not sell personal information.

We do not use personal information collected through this Website for behavioural advertising.

We do not use Website visitors' personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal bases for processing

Where the General Data Protection Regulation (“GDPR”), the UK GDPR or similar data-protection legislation applies, personal information is processed only where there is an appropriate legal basis.

Depending on the circumstances, this may include:

• taking steps at your request before entering into a contract;
• performing a contract with you;
• complying with a legal obligation;
• pursuing legitimate interests in operating and securing Areté;
• or obtaining your consent where consent is specifically required.

Where processing is based on legitimate interests, those interests are considered against the rights and reasonable expectations of the individuals concerned.

5. Cookies and similar technologies

Areté does not currently use cookies for behavioural advertising, advertising profiling or cross-site tracking.

The Website does not currently use non-essential analytics cookies.

The Website or its infrastructure providers may use strictly necessary technical technologies where required to:

• deliver the Website;
• maintain network and Website security;
• prevent fraud or abuse;
• or provide functionality requested by the user.

If analytics, advertising or other non-essential tracking technologies are introduced in the future, this Privacy Policy will be updated and, where required by applicable law, consent will be requested before those technologies are used.

6. Service providers

Areté relies on a limited number of trusted service providers to operate its website, communications and technical infrastructure.

These may include providers of website hosting and security, email services and other technical or professional services reasonably necessary to operate Areté.

Where these providers process personal information on our behalf, they may do so only for the purposes required to provide their services and subject to appropriate contractual and organisational safeguards.

We do not permit service providers acting on our behalf to use personal information for unrelated advertising purposes.

7. International data transfers

Because Areté operates online and uses technology providers whose infrastructure may operate across different jurisdictions, personal information may in some circumstances be processed outside the country in which you live.

Where European data-protection law applies and personal information is transferred outside the European Economic Area, appropriate safeguards or another lawful transfer mechanism will be used where required by applicable law.

8. How long we keep information

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected.

For general enquiries, this will normally mean retaining communications while the enquiry is active and for a reasonable period afterwards where necessary for follow-up, record keeping or the establishment, exercise or defence of legal claims.

If you become a client, information relating to that relationship may need to be retained for longer periods where necessary to comply with contractual, accounting, tax, professional or other legal obligations.

When information is no longer reasonably required, it will be deleted or anonymised where appropriate.

9. Your rights

Depending on where you live and the law that applies to you, you may have rights regarding your personal information.

Where the GDPR applies, these may include the right to:

• request access to your personal data;
• correct inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of certain processing;
• object to certain processing;
• receive certain personal data in a portable format;
• and withdraw consent where processing is based on consent.

Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

To exercise a privacy right, contact:

privacy@aretehuman.com

We may need to take reasonable steps to verify your identity before completing certain requests.

Where applicable, you also have the right to lodge a complaint with the competent data-protection supervisory authority in your country.

10. Security

Areté takes reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, loss, disclosure or misuse.

No online service or method of electronic communication can guarantee absolute security.

Our approach is therefore to collect only the information reasonably necessary and to use systems and service providers appropriate to the nature of the information involved.

11. Children

The Website is not directed at children under the age of 18, and Areté does not knowingly use the Website to collect personal information from children.

If we become aware that personal information has been provided by a child through the Website in circumstances where it should not have been collected, reasonable steps will be taken to delete it.

12. External websites

The Website may contain links to websites operated by third parties.

This Privacy Policy applies only to Areté.

Areté is not responsible for the privacy practices of third-party websites, and users should review the relevant privacy information before providing personal data to those services.

13. Changes to this Policy

This Privacy Policy may be updated where the Website, Areté's services, technology or applicable legal obligations change.

When changes are made, the revised version will be published on this page and the “Last updated” date will be changed accordingly.