Privacy Policy

Last updated: 19 March 2026

This Privacy Policy explains how Human Arc (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit www.humanarc.co.uk or contact us.

1. Who we are

Human Arc is the independent advisory practice of Benjamin Tilly.

For the purposes of data protection law, we are the data controller of your personal data.

Contact: info@humanarc.co.uk

2. What data we collect

We collect only the minimum personal data necessary:

a) Information you provide directly

If you contact us by email, we may collect:

  • Your name

  • Email address

  • Any information you include in your message

b) Automatically collected information

When you visit our website, we may collect:

  • IP address (anonymised where possible)

  • Browser type and device information

  • Pages visited and time spent on site

This data is collected using analytics tools (see Section 5).

3. How we use your data

We use your personal data to:

  • Respond to enquiries and communications

  • Operate and improve our website

  • Understand how visitors use our website

We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

Under UK GDPR, we rely on the following legal bases:

  • Legitimate interests – to respond to enquiries and operate our website

  • Consent – for analytics cookies (see Section 5)

5. Analytics and cookies

We use Google Analytics (GA4) to understand how visitors use our website.

Google Analytics collects information such as:

  • Pages visited

  • Time on site

  • Device and browser type

This data is processed in a way that does not directly identify individuals.

Analytics cookies are only set with your consent via our cookie banner.

For more information, see our Cookie Policy.

6. Sharing your data

We do not sell or rent your personal data.

We may share data with trusted service providers where necessary, including:

  • Squarespace (website hosting)

  • Google (analytics services)

These providers process data on our behalf and are subject to appropriate safeguards.

7. International data transfers

Some of our service providers (such as Google) may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses.

8. Data retention

We retain personal data only for as long as necessary:

  • Email enquiries: retained for as long as relevant to the enquiry and any follow-up

  • Analytics data: retained in accordance with Google Analytics settings

9. Your rights

Under UK data protection law, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Object to or restrict processing

  • Withdraw consent (where applicable)

To exercise these rights, contact us at the email address above.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

10. Data security

We take reasonable technical and organisational measures to protect your personal data.

11. Changes to this policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised date.

12. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Human Arc
Email: [Insert Email Address]