Who we are?

Mobon Apps LTD (“we”, “our”, “us” or “ARCH Order”) is a company registered in England and Wales with number 07920246. Our registered office is 5 Merchant Square, London, England, W2 1AY.

In respect of GDPR, we are the data controller, meaning we collect your personal information and choose how to process it and who we need to share it with for further processing.

What information do we collect?

In order to offer our service we need to collect various personal data for various reasons. These reasons are:

• Contract: when you open and use our account you enter into a contract with us to provide our services
• Legitimate interests: providing our type of product requires in some cases that we process data e.g. for improving our service
• Consent: where applicable, such as communications preferences, we will ask for your consent

The following summarises which data is collected:

• Personal details – such as title, full name, address
• Contact details – such as phone number and email
• Payment data – details about the use of your card or PayPal account such as payments, refunds
• Communications data – what we learn about you from emails and conversations between you and us
• Technical data – such as IP address, browser you are using to access our service
• Analytical data – data related to how you use our products and services such as which actions are taken in the website or kiosk app

How do we use personal information?

We use the information – to operate, maintain, enhance and provide all features of ARCH Order, to provide the services and information that you request, to respond to comments and questions and to provide support to users of the ARCH Order.

We use the information to understand and analyze the usage trends and preferences of our visitors and users, to improve the ARCH Order, and to develop new products, services, features, and functionality. To accomplish this we may use third party providers to analyze and gain insight into how ARCH Order is used and to help us improve.

We may use your email address to send you service and marketing related notices. Those emails can be unsubscribed from with clear and simple instructions in the email. We may also use your email address to notify you on updates to our Privacy Policy or Terms of Use.

Service Providers

ARCH Order may share your personal identifiable information with third parties (like hosting and payment processing) for the purpose of providing services to you. If we do this, such third parties’ use of your information will be bound by restrictions consistent with this Privacy Policy.

Where do we store and process personal data?

We store your data primarily in the European Economic Area (EEA) however there are some aspects of operating our service that require us to transfer and store parts of your personal data with 3rd parties in non-EEA countries. Where this is the case we have ensured that we have the necessary agreements in place with those 3rd parties to the level expected by European data protection law.

Some of the kinds of 3rd parties that receive your personal data are in the areas of:

• Payment processing
• System emails
• Update and marketing emails
• Error logging
• Product analytics

How do we secure personal data?

We operate a “Secure by Design” approach to protecting your data. This involves the use of best practices such as intrusion detection systems, firewalls, access control, encryption and policies that ensure only those who need access to data do.

How long do we keep your personal data for?

Your personal data are retained so long as you remain an active customer of ARCH Order, i.e. you have an open account with us.

In the event that you wish to close your ARCH Order account we’ll hold your personal information based on the following criteria:

• For as long as we have reasonable business needs, such as managing our relationship with you and managing our operations
• For as long as we provide goods and/or services to you and then for as long as someone could bring a claim against us; and/or
• Retention periods in line with legal and regulatory requirements or guidance.

Your rights in relation to personal data

Under the General Data Protection Regulation 2018 you have enhanced rights in respect of your personal data. If you wish to use any of them, we’ll explain at that time if they are engaged or not.

• The right to be informed about the processing of your personal information
• The right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed
• The right to object to processing of your personal information
• The right to restrict processing of your personal information
• The right to have your personal information erased (the “right to be forgotten”)
• The right to request access to your personal information and to obtain information about how we process it
• The right to move, copy or transfer your personal information (“data portability”)
• Rights in relation to automated decision making which has a legal effect or otherwise significantly affects you

How to contact us?

If you have any questions about this privacy notice, or if you wish to exercise your rights you can contact us by email info@arch2oder.com

Changes

This policy may change from time to time and is effective from date of posting to our website, mobile app, and/or self-service kiosk.