Privacy Policy

Last updated: April 2025

1. Introduction

Arenk Ltd ("we", "us", or "our"), a company registered in England and Wales, operates the websites and mobile applications including Thiswap and FarePilot (collectively the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.

By using any of our Services you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.

2. Information We Collect

We may collect the following types of information:

• Account information — name, email address, and password when you register.
• Profile information — details you voluntarily provide such as profile picture, university, and location.
• Usage data — pages visited, features used, time spent, and actions taken within the Services.
• Device information — device type, operating system, browser type, and IP address.
• Communications — messages and content you send through the Services.
• Contact form submissions — name, email, and message content when you contact us.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Services.
• Create and manage your account.
• Respond to your enquiries and support requests.
• Send service-related notifications and updates.
• Improve and personalise our Services.
• Monitor and analyse usage trends to improve user experience.
• Detect, prevent, and address technical issues and fraud.
• Comply with legal obligations.

4. Legal Basis for Processing (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

• Contract — processing necessary to provide the Services you have requested.
• Legitimate interests — improving our Services and preventing fraud.
• Legal obligation — where we are required to process data by law.
• Consent — where you have given us explicit consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service providers — trusted third parties who assist us in operating our Services (e.g. cloud hosting, analytics), bound by confidentiality obligations.
• Legal authorities — where required by law or to protect the rights and safety of our users and the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. Cookies are small data files stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent; however, some features of our Services may not function properly without cookies.

We use the following types of cookies:

• Essential cookies — required for the Services to function.
• Preference cookies — remember your settings such as language preference.
• Analytics cookies — help us understand how visitors interact with our Services.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Services. We will delete or anonymise your data upon request, unless we are required to retain it by law or for legitimate business purposes such as resolving disputes or enforcing our agreements.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — request that we restrict processing of your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us at info@arenk.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Children's Privacy

Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Third-Party Links

Our Services may contain links to third-party websites. We have no control over the content or privacy practices of those sites and are not responsible for their privacy policies. We encourage you to review the privacy policy of any third-party site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page or by sending a notification through our Services. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: info@arenk.co.uk
• Website: www.arenk.co.uk
• Address: London, United Kingdom