ARISTÉ LTD is committed to protecting your privacy and handling your personal data with the utmost care and discretion. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
ARISTÉ LTD is the data controller responsible for your personal data. We are registered with the Information Commissioner's Office (ICO) under registration number CSN0531299.
Contact: correspondence@ariste.uk
2. Information We Collect
We collect and process the following categories of personal data:
- Identity Information: Name, title, date of birth, passport details (for travel arrangements)
- Contact Information: Address, email address, telephone numbers
- Service Information: Preferences, requirements, and records of services provided
- Financial Information: Payment details, invoicing records (as required for transactions)
- Special Category Data: Dietary requirements and religious observances (only where necessary for service delivery, with your explicit consent)
3. How We Use Your Information
We process your personal data for the following purposes:
- To provide lifestyle management services as agreed in our service contract
- To communicate with you regarding your requirements and preferences
- To coordinate with third-party service providers on your behalf
- To comply with legal and regulatory obligations
- To maintain accurate records of our relationship
4. Legal Basis for Processing
We process your personal data under the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Service delivery | Contract performance (Article 6(1)(b)) |
| Tax and accounting records | Legal obligation (Article 6(1)(c)) |
| Marketing communications | Consent (Article 6(1)(a)) |
| Business administration | Legitimate interests (Article 6(1)(f)) |
| Special category data (dietary/religious) | Explicit consent (Article 9(2)(a)) |
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
| Data Category | Retention Period |
|---|---|
| Client records | Duration of relationship plus 7 years |
| Passport and visa copies | 2 years from travel completion (earlier deletion available on request) |
| Financial records | 7 years (HMRC requirement) |
| Marketing preferences | Until consent withdrawal plus 2 years |
6. Data Sharing and Transfers
We share your personal data only where necessary to provide our services:
- Service Providers: Hotels, airlines, restaurants, and other vendors engaged on your behalf
- Professional Advisors: Legal and financial professionals where required
- Technology Providers: Our CRM and business systems providers (operating under strict data processing agreements)
Where data is transferred outside the United Kingdom, we ensure appropriate safeguards through UK International Data Transfer Agreements (UK IDTA) or UK Addenda to EU Standard Contractual Clauses.
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (subject to legal retention requirements)
- Right to Restriction: Request limitation of processing
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Where processing is based on consent
To exercise any of these rights, please contact us at correspondence@ariste.uk. We will respond within one calendar month.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data:
- AES-256 encryption for sensitive data at rest
- TLS 1.2+ encryption for data in transit
- Multi-factor authentication for system access
- Role-based access controls
- Regular security assessments
- Staff confidentiality agreements and annual training
9. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Telephone: 0303 123 1113
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any material changes will be communicated to you directly. The current version will always be available on our website.
Questions About Your Data
For any enquiries regarding your personal information or this policy, please contact our Data Protection Lead.
correspondence@ariste.uk