Aretiico Privacy Policy

Introduction

We recommend that you read thisPrivacy Notice in full to ensure you are fully informed.  However, if you only want to access aparticular section of this Privacy Notice, then you can click on the relevantlink above to jump to that section.

Aretiico respects your right toprivacy.  This Privacy Notice explainswho we are, how we collect, share and use personal information about you andhow you can exercise your privacy rights.

This Privacy Notice applies topersonal information that we collect (i) when you browse and visit our websiteat https:\\aretiico.com  (“Website”) and (ii) when you create anaccount and apply for a certification through us ("Certification Services").

If you have any questions orconcerns about our use of your personal information, then please contact ususing the contact details under the “How to contact us” heading below.

2.    Aretiico Privacy Notice

2.1    What does Aretiico do?

Aretiico Limited is an internet trust business headquartered in the UK. We offer trust services tohelp businesses protect data, and issue certifications for web authenticationand specifically are the first public Root CA domiciled in the United Kingdom.

For more information aboutAretiico, please see the “About Us” section of our Website at https://aretiico.com/.

2.2    What personal information does Aretiico collectand why?[HW2] 

The personal information that we may collect about you broadly falls into the following categories:

2.2.1    Information that you provide

Certain parts of our Website may ask you to provide personal information including:

ContactData

We may ask you to provide your contact details includingyour name, email, organisation and phone number to submit enquiries to us or where you subscribe to marketing communications from us ("Contact Data"). Where you engage with us via a social media service and send correspondence to our social media accounts we will also collect personal information shared in this way. Please note that the social media company will also handle your personal information for its own purposes and these sites will have their own privacy notices.  

When you engage with and apply for ourCertification Services we may ask you to provide personal information including:

AccountData

We may ask you to provide details including your name, address, organisation, contact number, username/Aretiico ID and a password in order to set up your account ("Account Data").

IdentificationData

For identity verification and ID validation we will also ask for your photo, driving license ID number, passportID number, issue and expiry dates of such identification documentation and date of birth. This may also include your name, previous names, and current and previous address information ("IdentificationData").

BusinessData

Where you are applying for certificate on behalf of a business, you will be asked for the name, registered address, company ID, VAT number and telephone number which where you are a sole trader could encompass personal data ("BusinessData").

Onboarding Data

Where your company or a business you are associated with is applying for a certification, where you are involved in that business we may collect an Aretiico ID, your name, role in the business and signature. We may also request additional documentation to evidence or prove your association with the business (collectively, "Onboarding Data") This information may be provided directly by you or could be provided by your employer or associated company.

CommunicationsData

When you contact us via email we may retain for our records such email correspondence. Where you contact us by phone we may monitor or record calls you make in certain circumstances, for example calls may be monitored and recorded for training or customer service purposes(collectively, "Communications Data").

VideoData

Where you are unable to complete the checks using our online process for the screening checks and identity verification, the Authentication Team will carry out these checks manually.This may involve a live video call with the Authentication Team to complete these checks.

SpecialCategory Data

When we need to verify and validate your identity documentation, such as your photo and ID documentation, this may also involve the collection of biometric data where you are asked to take a photo to confirm identity ("Biometric Data"). This is used for the sole purpose of validating your photo against your identification documentation, and the biometric data is not retained following confirmation of a valid ID.

2.2.2    Information that we collect automatically

When you visit our Website, we collect certain information automatically from your device.  In some countries, including countries in theEuropean Economic Area and UK (together, "Europe"), this information may be considered personal data under applicable data protection laws.

Specifically, the information we collect automatically will include information such as your IP address, device type, unique device identification numbers, browser-type, operating system, broad geographic location (e.g., country or city-level location) ("Device Data"). We also collect information about how your device has interacted with our Website, including the pages you accessed and links clicked, when you accessed and for how long("Technical Data").  

Collecting this information enables us to better understand the visitors who come to our Website, where they come from and what content on our Website is of interest to them.  We use this information for our internal analytics purposes and to improve the quality and relevance of our Website for our visitors.