This policy explains how All-Round Marketing Ltd trading as ARM BMS (“ARM BMS”, “we”, “us”) handles personal information when you visit our website, create an account, use the software or contact us.
1. Who is responsible for your information?
All-Round Marketing Ltd, company number 15080219, is the controller for account, billing, website and support information. When a customer stores information about its own clients, staff, contractors or suppliers in ARM BMS, that customer is normally the controller and we act as its processor.
2. Information we collect
- Account information such as name, business name, email, telephone number, role and sign-in identifiers.
- Workspace content such as contacts, jobs, quotations, reminders, receipts, files, stock records and communications added by authorised users.
- Subscription and transaction references. Full card details are intended to be handled by the appointed payment provider, not stored by ARM BMS.
- Security and technical information such as IP address, browser, device, audit events, failed sign-ins and essential session data.
- Messages and support information you send to us.
3. How and why we use it
We use information to provide and secure the service, administer accounts and subscriptions, deliver requested reminders and communications, respond to support requests, prevent misuse, improve reliability and meet legal obligations. Our lawful bases may include performance of a contract, legitimate interests, legal obligations and consent where it is specifically required.
4. Sharing and service providers
We only share information where needed with hosting, database, email, communications, calendar, identity, payment and professional-service providers, or where the law requires it. Google, Apple, Microsoft, Twilio, WhatsApp and Stripe only become involved when the relevant feature is configured or used. Each provider applies its own terms and privacy information.
5. International transfers
Some providers may process information outside the UK. Where required, we use appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement or approved contractual safeguards.
6. Retention
We keep account and workspace information while an account is active and for a reasonable period afterwards for recovery, security, disputes and legal obligations. Customers can request deletion subject to legitimate retention requirements. Backups are removed on their normal secure rotation. Inactive workspace deletion, where offered, is communicated before it is applied.
7. Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent. If your request concerns information placed in ARM BMS by one of our customers, contact that customer first. You may complain to the UK Information Commissioner’s Office at ico.org.uk.
8. Security
We use access controls, separated workspaces, encrypted web transport, security tokens, audit records, optional two-factor authentication and restricted provider credentials. No online service can promise absolute security, so users must protect their credentials and tell us promptly about suspected misuse.
9. Children
ARM BMS is business software and is not directed at children. Account holders must ensure they have a lawful basis for any personal information they enter.
10. Changes and contact
We may update this policy as the service or law changes. Material changes will be highlighted where practical. Privacy questions and rights requests can be sent to info@allroundmarketing.co.uk or to All-Round Marketing Ltd, 153 Green Close, Didcot, Oxfordshire, OX11 8TD.