Privacy Policy

Last Updated: February 28, 2024

Arzani Ltd and its subsidiaries ("Company", "We", or "Us") respect your privacy and are committed to protecting it in accordance with the highest legal standards developed over more than 20 years in privacy law, as well as in full compliance with UK data protection legislation including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

Your Privacy Rights Matter

This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data. By using our services, you agree to the collection and use of information in accordance with this policy.

1 Information We Collect

1.1 Personal Information

  • Contact information (name, email, phone number)
  • Account credentials
  • Business information
  • Transaction data
  • Communication records

1.2 Automatically Collected Information

  • Device and browser information
  • IP address and location data
  • Usage patterns and preferences
  • Cookies and similar technologies

2 Business Information Protection

2.1 Sensitive Business Information

We understand the sensitive nature of business sale information and implement the following protections:

  • Business listing data is encrypted using industry-standard AES-256 encryption
  • Access to full business details is restricted to verified buyers only
  • Financial records are stored separately with additional security measures
  • Non-disclosure agreements are automatically generated for sensitive information access

2.2 Confidentiality Measures

To protect business confidentiality, we:

  • Anonymize business listings unless explicitly authorized otherwise
  • Implement strict access controls for employee access to business data
  • Maintain detailed access logs for all sensitive information
  • Require confidentiality agreements from all platform users

3 Data Processing and Transfer

3.1 International Data Transfers

For users in the European Economic Area (EEA) and UK:

  • All data transfers comply with UK GDPR requirements
  • Standard Contractual Clauses (SCCs) are implemented for international transfers
  • Data processing agreements are in place with all third-party processors
  • Regular data protection impact assessments are conducted

3.2 Third-Party Processing

We engage the following categories of third-party processors:

  • Payment processors (regulated financial institutions)
  • Cloud storage providers (with UK/EU data centers)
  • Analytics services (anonymized data only)
  • Email service providers (marketing and transactional)
  • Document verification services

4 Marketplace-Specific Privacy Measures

4.1 Business Listing Privacy

  • Public listings show only non-identifying business information
  • Detailed financials are shared only after NDA execution
  • Seller contact information is protected through our messaging system
  • Geographic location is approximated unless authorized

4.2 Buyer Privacy

  • Buyer credentials and financial capacity are verified privately
  • Search history and saved listings are confidential
  • Communication with sellers is anonymized by default
  • Due diligence documents are access-controlled

5 Data Retention and Deletion

5.1 Retention Periods

We retain different types of data for specific periods:

  • Active listings: Duration of listing plus 30 days
  • Transaction records: 7 years (legal requirement)
  • Communication records: 2 years after last interaction
  • Account information: Until account deletion request

5.2 Data Subject Rights

As a data subject, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request erasure of your data ("right to be forgotten")
  • Object to processing of your data
  • Request restriction of processing
  • Request data portability

If you have any questions about this Privacy Policy, please contact us at privacy@arzani.com

Back to top