Arrameia Ltd.
Last updated: 9/1/2026
1. Who we are
This Privacy Policy explains how Arrameia Ltd. ("Arrameia," "we," "us," or "our") collects, uses, stores, and protects your personal data when you visit our website, purchase our products or services, or otherwise interact with us.
Arrameia Ltd. is a company registered in England and Wales (company registration number: 17395400, with its registered office at:
219 Kensington High Street, London, W8 6BD, United Kingdom
We are the data controller responsible for your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at: [email protected]
2. What personal data we collect
"Personal data" means any information relating to an identified or identifiable individual. We may collect the following categories of personal data about you:
Identification data — such as your name, date of birth, and gender (where relevant to a course or programme)
Contact data — such as your postal address, email address, and telephone number
Financial data — such as bank account details and payment card details (processed via our secure payment providers)
Technical data — such as your IP address, browser type and version, device information, and other data collected through cookies and similar technologies
Usage data — such as information about how you use our website, products, and services
Marketing and communications data — such as your preferences in receiving marketing from us and your communication preferences
3. How we collect your personal data
We collect personal data through:
Direct interactions — for example, when you fill in a form, create an account, purchase a course or service, subscribe to our newsletter, or otherwise contact us
Automated technologies — such as cookies and similar tracking technologies used on our website (see Section 8 below)
Third parties — including payment processors, analytics providers, and other service providers we work with (for example, Google Analytics and payment providers such as PayPal or Stripe)
4. Legal basis for processing your personal data
Under the UK GDPR, we will only use your personal data where the law allows us to do so. Most commonly, we rely on the following legal bases:
Performance of a contract — where processing is necessary to deliver a course, product, or service you have purchased from us
Legal obligation — where we need to comply with a legal or regulatory obligation, such as tax and accounting requirements
Legitimate interests — where processing is necessary for our legitimate business interests (for example, improving our website and services), provided your interests and fundamental rights do not override those interests
Consent — where you have given clear consent for us to process your personal data for a specific purpose, such as sending you marketing communications. You may withdraw your consent at any time.
5. How we use your personal data
We use your personal data, where permitted by law, to:
Provide, manage, and deliver our courses, products, and services
Process payments and manage your account
Communicate with you about your purchases, enquiries, or support requests
Send you marketing communications, where you have consented to receive them
Improve and personalise our website, products, and services
Comply with our legal and regulatory obligations
Detect, prevent, and address fraud, security, or technical issues
6. Sharing your personal data
We do not sell or share your personal data with third parties for their own marketing purposes.
We may share your personal data with trusted third-party service providers who perform services on our behalf, under strict confidentiality and data processing terms, including:
Payment processors (for example, PayPal or Stripe), to process transactions
Analytics providers (for example, Google Analytics), to help us understand how our website is used
IT and hosting providers, email and communication platforms, and other operational service providers
We may also disclose your personal data where required to comply with a legal obligation, or to protect our rights, property, or safety, or that of our customers or others.
7. International transfers
Some of our third-party service providers may be based, or may process data, outside the United Kingdom. Where this is the case, we ensure that appropriate safeguards are in place, such as:
Transferring data to countries that the UK government has confirmed provide an adequate level of protection for personal data; or
Using specific contractual protections approved by the UK, such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
8. Cookies
Our website uses cookies and similar technologies to distinguish you from other users, to remember your preferences, and to help us improve your experience and analyse how our website is used.
You can set your browser to refuse some or all browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of our website may become inaccessible or not function properly.
9. Data retention
We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Where you have purchased a course, product, or service from us, we generally retain your data for six years following the end of our relationship, in order to meet our tax and accounting obligations.
Where you have contacted us but have not become a customer, we generally retain your data for two years from the date of your last contact with us.
In some circumstances, we may retain your personal data for a longer period where required by law, or to establish, exercise, or defend legal claims.
10. Data security
We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We also limit access to your personal data to those employees, agents, contractors, and other third parties who have a genuine business need to access it.
11. Your rights
Under the UK GDPR, you have the following rights in relation to your personal data:
The right to be informed about how we collect and use your personal data
The right of access to the personal data we hold about you
The right to rectification of inaccurate or incomplete personal data
The right to erasure ("the right to be forgotten") in certain circumstances
The right to restrict processing of your personal data in certain circumstances
The right to data portability, allowing you to obtain and reuse your personal data for your own purposes
The right to object to processing of your personal data, including for direct marketing purposes
The right to withdraw consent at any time, where we rely on consent to process your personal data
Rights related to automated decision-making and profiling (where applicable)
You can exercise these rights free of charge, unless your request is manifestly unfounded, repetitive, or excessive, in which case we may charge a reasonable fee or refuse to act on the request. To exercise any of these rights, please contact us at [email protected].
12. How to complain
We hope that we can resolve any query or concern you raise about our use of your personal data. If you remain unhappy, you have the right to lodge a complaint at any time with the Information Commissioner's Office (ICO), the UK's independent regulator for data protection matters:
Information Commissioner's Office (ICO) Website: www.ico.org.uk
We would, however, appreciate the chance to address your concerns before you approach the ICO, so please contact us in the first instance.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically.
14. Contact us
If you have any questions, comments, or requests regarding this Privacy Policy or our data protection practices, please contact us at:
Arrameia Ltd. 219 Kensington High Street London, W8 6BD United Kingdom
Email: [email protected]