Online privacy statement

Who we are

Arum Systems Ltd ("arum", "we", "us") is the data controller for personal data collected through this website and in the course of our work. We are registered in England and Wales, company number 3603562, registered office c/o Bishop Fleming LLP, 10 Temple Back, Bristol BS1 6FL. Arum Systems Ltd is registered with the Information Commissioner’s Office under registration number Z5031327. Our Data Protection Officer can be reached at dpo@arum.co.uk or by post at the registered office.

The personal data we collect

• Contact and enquiry details you give us: name, work email, company, telephone number and anything you write in a form or email.
• Booking details when you schedule a conversation with us through HubSpot Meetings.
• Application details when you apply for a role or register as an associate: CV, covering note and contact details.
• Business contact details for people at client, prospect, vendor and partner organisations, collected in the course of our work.
• Technical data from your visit: IP address, browser, device and pages viewed, held in server logs.
• Survey and feedback responses you choose to give us.

Where it comes from

Most of it comes from you directly. Some comes from your organisation when we work with it, from publicly available professional sources such as LinkedIn, and from our service providers (HubSpot for forms and meetings, Google reCAPTCHA on application forms).

Why we use it and our lawful basis

• To respond to your enquiry, book and hold conversations, and provide our services: performance of a contract or steps before one, and our legitimate interest in running our business.
• To consider your application for a role or associate assignment: steps before entering into a contract, and our legitimate interest in recruiting.
• To keep our website secure and working: our legitimate interest.
• To send you insights and event invitations: your consent, which you can withdraw at any time using the link in every email or by writing to dpo@arum.co.uk.
• To meet legal, regulatory, audit and tax obligations: legal obligation.

Who we share it with

Service providers who process data on our behalf under contract: HubSpot (forms, meetings, CRM and email), Google (reCAPTCHA on application forms), our hosting and email providers, and professional advisers. We do not sell personal data. Where a client engagement requires it, we share business contact details with that client under the terms of our agreement with them.

International transfers

arum has offices in the United Kingdom, the United States and Australia and some providers process data outside the UK. Where personal data leaves the UK we rely on adequacy regulations or the UK International Data Transfer Agreement and standard contractual clauses.

How long we keep it

Enquiry and booking details for up to three years after our last contact. Application details for up to twelve months after the process ends, unless you ask us to keep them longer. Client engagement records for the period required by contract, tax and audit rules, normally seven years. Marketing preferences until you withdraw consent.

Your rights

You can ask for a copy of the personal data we hold, ask us to correct or delete it, restrict or object to how we use it, ask for it in a portable format, and withdraw consent. Write to dpo@arum.co.uk. We may ask for proof of identity. You can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies

See our cookies policy for the small number of cookies this website uses and how to manage them.

Changes to this notice

We will post any changes on this page. This version was published on 16 September 2026.