Privacy Policy Terms of Service Data Processing Agreement AI Transparency
Cookie Preferences

Privacy Policy

VERSION 1.0 EFFECTIVE DATE: TBC LAST REVIEWED: JULY 2026 DATA CONTROLLER: SLAWOMIR KUPROWSKI, TRADING AS ARRAC.IO
CONTENTS
  1. Who We Are
  2. Scope of This Policy
  3. What We Collect
  4. How We Use It
  5. Our Legal Basis
  6. Who We Share Data With
  7. International Transfers
  8. How Long We Keep It
  9. Your Rights
  10. Cookies
  11. Security
  12. Contact & Complaints

ARRAC.IO is offered by Slawomir Kuprowski, an individual trading as ARRAC.IO, of [Business Address, United Kingdom] ("ARRAC", "we", "us"). For the purposes of UK data protection law, Slawomir Kuprowski is the data controller in respect of the personal data described in this Policy — for example, the contact details of people who visit our website or request a trial.

This Policy is separate from our Data Processing Agreement, which governs personal data ARRAC processes on behalf of a Customer within the Platform (for example, a Customer's Microsoft 365 security event data). Where the DPA applies, the Customer — not ARRAC — is the controller of that data, and this Policy does not apply to it.

This Policy explains how we handle personal data of:

  • Visitors to our website (arrac.io and subdomains)
  • People who request a trial
  • People who speak with our AI or human sales representatives
  • Named contacts of Customer organisations (for account administration and support)

Depending on how you interact with us, we may collect: your name, email address, phone number, company name, job role, and details of your enquiry or trial request; call recordings and transcripts where you speak with our sales team (including our AI voice assistant), together with a summary of the conversation; and basic technical data (IP address, browser type, pages visited) via standard website analytics.

We do not knowingly collect information from anyone under 18, and our services are intended for business use only.

  • To respond to enquiries and provide information you've requested
  • To set up and manage a trial or paid subscription
  • To contact you about your trial, including by phone, SMS, or email
  • To improve our sales process and the accuracy of our AI voice assistant, using call summaries and outcomes
  • To send you service-related communications and, where you have consented, marketing communications
  • To comply with our legal and accounting obligations

We rely on legitimate interests to respond to enquiries, manage trials, and improve our sales process; contract where we are taking steps to enter into, or performing, an agreement with you or your organisation; consent where you have opted in to marketing communications, which you may withdraw at any time; and legal obligation where we must retain records for tax or accounting purposes.

We share personal data with a small number of service providers who help us operate our sales and communications process, each acting under contract and only for the purposes we specify. This currently includes providers of email delivery, SMS and voice calling infrastructure, AI voice and language processing, and website hosting. A detailed, current list of these providers is maintained in our Data Processing Agreement. We do not sell personal data to any third party.

Some of the service providers referred to above are located outside the United Kingdom, including in the United States. Where this is the case, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, to ensure your data continues to receive an equivalent level of protection.

We keep trial enquiry data for as long as reasonably necessary to respond to your enquiry and for a limited period afterwards in case you return, after which it is deleted or anonymised unless you become a Customer or ask us to retain it for a specific reason. Call recordings and transcripts are retained for a limited period to support quality review and are then deleted. Records we are required to keep for tax or legal reasons are retained for the statutory period.

Under UK data protection law, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion in certain circumstances, object to or restrict certain processing, request a portable copy of your data, and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us using the details in Section 12.

Our website uses essential cookies necessary for it to function, and may use analytics cookies to help us understand how visitors use the site. Where analytics cookies are not strictly necessary, we will ask for your consent before setting them. You can review or change your choices at any time via Cookie Preferences.

We take appropriate technical and organisational measures to protect personal data we hold. Further detail on our security practices is available on our Security page.

For any question about this Policy or to exercise your rights, contact [email protected]. If you are unhappy with how we have handled your personal data, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Terms of Service → Data Processing Agreement → Security →