Last updated: 8 October 2026
This policy explains how White Arrow Technology Ltd (“we”, “us”) collects and uses personal data when you visit whitearrowtechnology.com, contact us, use our free tools or chat assistant, or become a client.
1. Who we are
White Arrow Technology Ltd is a company registered in England and Wales (company number 15567749), based in Luton, United Kingdom. We are the data controller for the personal data described in this policy.
For any privacy question or request, contact Valter Schmaltz at [email protected].
2. What data we collect
- Contact and enquiry data – your name, email address, company, phone number and message when you use a contact form or email us.
- Chat assistant data – messages (and, if you choose to use voice, your audio input) exchanged with “Arrow”, our AI assistant, plus any details you share, such as your name, email or domain.
- Free tools data – the domain you scan with our DMARC, SPF, DKIM or email-spoofing tools, the scan results, and the email address you give us to receive a report or join free DMARC monitoring.
- Booking data – your name, email and chosen time when you book a consultation through our scheduling provider.
- Client data – contact, billing and service details when you become a client, and DMARC aggregate reports for domains we monitor for you.
- Technical and security data – IP address, browser type, pages visited and access logs, collected by our hosting, firewall and analytics tools.
3. How and why we use it
- To reply to enquiries and provide quotes – legitimate interests or steps before entering a contract.
- To run scans, send reports and provide monitoring you request – performance of a contract or legitimate interests.
- To deliver and invoice our services to clients – performance of a contract and legal obligation (accounting and tax records).
- To keep our website secure and prevent abuse – legitimate interests.
- To understand how our website is used and improve it – consent, where analytics cookies are used.
- To send you occasional updates about our services – legitimate interests for existing clients (soft opt-in) or consent. You can unsubscribe at any time.
We do not sell your personal data, and we do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
4. Who we share it with
We use trusted service providers who process data on our behalf under contract, including:
- Website hosting, security and email delivery providers;
- Anthropic, which provides the AI model behind our chat assistant;
- Scheduling providers (such as Cal.com or Calendly) for booking consultations;
- Google (Tag Manager and Analytics) for website analytics;
- Our DMARC monitoring platform provider, for clients who use that service;
- Our accountants and professional advisers, where needed.
We may also disclose data where required by law or to protect our legal rights.
5. International transfers
Some of our providers are based outside the UK, including in the United States. Where data is transferred outside the UK, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the UK International Data Transfer Agreement or Addendum to protect it.
6. How long we keep it
- Enquiries, chat transcripts and free-tool reports: up to 2 years after our last contact, unless you become a client.
- Client and billing records: 6 years after the end of the financial year they relate to, as required for UK tax purposes.
- Security and access logs: for the period set by our security tools, normally no more than 12 months.
7. Cookies
We use cookies that are strictly necessary for the website to work and stay secure. With your consent, we may also use analytics cookies set through Google Tag Manager to understand how visitors use the site. You can block or delete cookies in your browser settings at any time.
8. Your rights
Under UK data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time where we rely on consent. To exercise any of these rights, email [email protected]. We will respond within one month.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
9. Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page, with the date it was last updated.