Privacy Policy

Last updated: 22 August 2026 • Arrow Digital (Hudsys Ltd)

1. Overview & Data Controller

Arrow Digital ("Arrow", "we", "us", or "our") is a trading style of Hudsys Ltd. We provide bespoke web design, custom business tools, SEO, and digital growth services to UK businesses.

We are committed to protecting your privacy and ensuring your personal data is handled securely and transparently in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Hudsys Ltd (Trading as Arrow Digital)

Studio Location: Grantham, Lincolnshire, United Kingdom

Direct Contact: neil@arrowwebdesign.co.uk | 07814 379980

2. Personal Data We Collect

We only collect data that is strictly necessary to communicate with you, provide our web engineering and marketing services, and fulfill contracts.

Direct Enquiries & Audit Forms

Full Name and Business Name
Email Address and Telephone / WhatsApp Number
Current Website URL and Industry Sector
Project Scope and Budget Requirements

Technical & Usage Data

IP address (anonymized/hashed for security)
Browser type, device viewport, and operating system
Pages visited and interactive tool usage (e.g. ROI Calculators)
Session cookies based on your consent choices

3. Legal Basis for Processing

Under the UK GDPR, we process personal data under the following lawful bases:

Contractual Performance: To deliver website builds, custom software, hosting maintenance, and customer support as agreed.
Legitimate Interests: To respond to free audit requests, prevent fraud, secure our servers, and improve our services.
Explicit Consent: For optional performance cookies and newsletter subscriptions (which can be withdrawn at any time).

4. Data Storage, Security & Isolation

We enforce bank-grade security protocols across all infrastructure:

TLS 1.3 Encryption

All data transmitted to and from our servers is 256-bit encrypted in transit.

Isolated Environments

Zero cross-tenant exposure. Client databases and leads are strictly segregated.

No Selling of Data

We never sell, rent, or trade your personal or business data to third parties.

5. Sub-Processors & Third-Party Services

We work with trusted UK and global service providers under strict data processing agreements:

Cloud Edge Hosting: Vercel Inc. (Enterprise Edge Network, SOC2 certified).
Email Deliverability: Resend / AWS SES (Transactional enquiry notifications).
Payment Processing: Stripe Payments Europe Ltd (PCI-DSS Level 1 compliant).
Direct Support: WhatsApp Business API / Telegram Webhook (Direct client communication).

6. Your Rights Under UK GDPR

You have the following legal rights regarding your personal data:

Right of Access: Request a full copy of data we hold on you (Subject Access Request).

Right to Erasure: Request the complete deletion of your records ("Right to be forgotten").

Right to Rectification: Request correction of inaccurate information.

Right to Object: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, email us at neil@arrowwebdesign.co.uk. We respond to all verified requests within 30 days without charge.

7. How to Contact Our Privacy Team

If you have questions about this policy or wish to lodge a query with the UK Information Commissioner's Office (ICO), contact us:

Email: neil@arrowwebdesign.co.uk

Phone / WhatsApp: 07814 379980

Postal Address: Arrow Digital (Hudsys Ltd), Grantham, Lincolnshire, UK