top of page

Privacy Policy

By Arisa is committed to protecting and respecting your privacy. This policy explains how we collect, use, and store your personal data when you visit our website or use our services.

Last Updated: 22/02/2026

1. Who We Are

Legal Business Name: BY A.E.C MCR LTD
Trading Name: By Arisa
Registered Address: Unit 2 Robert Street, Manchester, Lancashire, United Kingdom, M3 1EY
Email: hello@byarisa.com

We are the data controller responsible for your personal data.

2. Information We Collect

We may collect and process the following data:

Information you provide

  • Name

  • Email address

  • Phone number

  • Billing details

  • Booking information

  • Messages or enquiries

Automatically collected data

  • IP address

  • Device and browser information

  • Website usage data

  • Cookies

3. How We Use Your Data

We use your personal data to:

  • Process bookings and payments

  • Respond to enquiries

  • Provide customer support

  • Send confirmations and service updates

  • Improve our website and services

  • Send marketing communications (if you opt in)

4. Legal Basis for Processing

Under UK GDPR, we rely on:

  • Contract — to provide services you request

  • Legal obligation — to meet legal requirements

  • Legitimate interests — to operate and improve our business

  • Consent — for marketing communications

You may withdraw consent at any time.

5. Payments

Payments are processed securely via third-party payment providers. We do not store full card details on our servers. Payment providers process data according to their own privacy policies.

6. Marketing

If you opt in, we may send:

  • Promotions

  • Updates

  • Offers

You can unsubscribe anytime via email link or by contacting us.

We do not sell your personal data.

7. Data Sharing

We may share your data with trusted third parties when necessary, such as:

  • Payment processors

  • Booking software providers

  • Email marketing platforms

  • Website hosting providers

  • Legal authorities if required

All third parties are required to protect your data.

8. Data Storage & Retention

We take appropriate security measures to protect your data. Your information is only kept as long as necessary for:

  • service provision

  • legal compliance

  • dispute resolution

9. Your Rights

Under UK data protection law, you have the right to:

  • Access your data

  • Correct inaccurate data

  • Request deletion

  • Restrict processing

  • Object to processing

  • Request transfer of data

  • Withdraw consent

To exercise your rights, email: hello@byarisa.com

You also have the right to complain to the Information Commissioner’s Office (ICO).

10. Cookies

We use cookies to improve your experience and analyse website performance. You can manage cookies through your browser settings. See our Cookie Policy for full details.

11. Third-Party Links

Our website may contain links to other websites. We are not responsible for their privacy practices.

12. Updates

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date.

bottom of page