ARIA by Bid Savvy / Regulatory Landscape

Privacy Notice.

Who we are

Bid Savvy Solutions Ltd (we, us, our) is the data controller for personal data collected through the ARIA website and services. We are a limited company registered in England and Wales, company number 16791831, with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the Information Commissioner’s Office under registration number ZC121879.

For any data protection enquiry, contact us at hello@ariabidsavvy.co.uk.

What data we collect

We collect the following categories of personal data:

Contact details you provide via the contact form, email, or phone (name, email, organisation, message content)
Booking details if you book a call via Calendly (name, email, meeting time)
Transaction data if you buy ARIA Compass via Stripe (name, email, billing country; card details are processed by Stripe and not seen by us)
Learning data if you enrol in ARIA Compass (enrolment record, course progress, assessment results)
Engagement data if your organisation engages us for consultancy (documents and notes from the engagement)
Marketing data if you subscribe to ARIA updates (email address and preferences, held in Mailchimp)
Outreach data from publicly available LinkedIn profiles of decision-makers in our target audience, used for professional B2B prospecting via Waalaxy
Technical data via Google Analytics (IP address, browser, pages visited), subject to your cookie preferences

Why we use it and lawful basis

Responding to enquiries and providing services	Contract or pre-contractual steps (Article 6(1)(b))
Processing payments and meeting tax obligations	Contract and legal obligation (Article 6(1)(b) and (c))
Marketing emails (if you subscribe)	Consent (Article 6(1)(a))
LinkedIn outreach to decision-makers	Legitimate interests (Article 6(1)(f))
Website analytics	Consent (Article 6(1)(a))
Operating our business and securing our systems	Legitimate interests (Article 6(1)(f))

Who we share data with

We use the following third-party processors, each bound by a written data processing agreement:

Stripe (payment processing)
Calendly (call booking)
LearnDash (learning platform)
GoDaddy (website hosting and business email)
Google Analytics 4 (website analytics)
Mailchimp (email marketing)
Waalaxy (LinkedIn outreach)

We may also share data with our professional advisers (accountants, solicitors), and with regulators or law enforcement where legally required. We do not sell personal data to third parties

International transfers

Some of our processors are based outside the UK (notably Stripe, Calendly, Google, Mailchimp, and Waalaxy). Where data is transferred internationally, we rely on the UK-US Data Privacy Framework, EU adequacy decisions, or Standard Contractual Clauses with appropriate safeguards as required by UK GDPR Chapter V.

How long we keep data

Enquiry data: 2 years from last contact
Customer and engagement data: 7 years after the engagement ends, for tax and insurance purposes
Marketing data: until you unsubscribe
Outreach data: duration of campaign plus 12 months
Analytics data: 26 months

Your rights

Under UK GDPR you have the right to access your data, ask us to correct or delete it, restrict or object to processing, withdraw consent, and request data portability where applicable. To exercise any of these rights, contact hello@ariabidsavvy.co.uk. We will respond within one calendar month.
You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or 0303 123 1113 if you are unhappy with how we have handled your data.

Cookies and marketing

For details of how we use cookies, see our Cookies Notice. You can unsubscribe from marketing emails using the link in any marketing email or by contacting us.

Changes to this notice

We may update this notice from time to time. The “Last updated” date above shows when it was last changed.