Legal, Privacy & Cookies
Last updated: July 2026
At Arcadia, your privacy matters to us. We want you to be confident that your personal information is handled safely, securely and transparently.
This Privacy & Cookies Policy explains how we collect and use personal information through ark-kits.co.uk, including information submitted through our contact, enquiry, eligibility and purchase-request forms.
1. Who we are
The ark-kits.co.uk website is operated by:
Arcadia Pharma Ltd trading as Arcadia Medical
Company number: 08497840
Unit 3 Bell Court
Swansea West Business Park
Fforestfach
Swansea
SA5 4HP
In this policy, references to “Arcadia”, “we”, “our” or “us” mean Arcadia Pharma Ltd trading as Arcadia Medical.
Arcadia is the data controller responsible for deciding how and why personal information collected through this website is used.
Questions about this policy or our use of personal information can be sent to:
Email: info@arcadiapharma.co.uk
Postal address: Data Privacy, Arcadia Medical, Unit 3 Bell Court, Swansea West Business Park, Fforestfach, Swansea, SA5 4HP
2. Information we collect
Depending on how you use the website and the services you request, we may collect the following information.
Information you provide directly
This may include:
-
your name;
-
your job title or role;
-
your school, organisation or business name;
-
your email address;
-
your telephone number;
-
your postal, billing or delivery address;
-
the products or services in which you are interested;
-
information about your organisation’s eligibility to obtain an ARK kit;
-
relevant occupational health arrangements;
-
information included in messages or correspondence with us;
-
order, account, invoice and payment-status information; and
-
your marketing and communication preferences.
You can browse the website without completing an enquiry form. However, certain information will still be processed automatically when you visit the website, as explained below.
Information collected automatically
When you visit ark-kits.co.uk, our website platform and authorised service providers may collect technical and usage information, including:
-
your internet protocol address;
-
browser and device type;
-
operating system;
-
approximate location derived from your internet connection;
-
pages visited and links selected;
-
the date and time of your visit;
-
the website or page that referred you to us;
-
website performance and security information; and
-
your cookie and privacy preferences.
This information may be collected through cookies and similar technologies.
Sensitive and medical information
Our general website forms are not intended for submitting detailed personal medical information or information identifying individual children.
Please avoid including personal medical histories, diagnoses, prescription details or information about identifiable pupils or employees in a free-text message unless we have specifically asked you to provide it through an appropriate and secure process.
If sensitive information is provided to us unexpectedly, we will only retain and use it where there is a lawful and necessary reason to do so.
3. How we use your information
We only use personal information for specific and legitimate purposes.
Responding to enquiries
We use information submitted through our website to:
-
respond to questions;
-
provide information about ARK kits and related services;
-
understand the nature of your request;
-
prepare quotations or purchase information; and
-
provide customer support.
We normally rely on our legitimate interests in responding to enquiries and developing our services, or on taking steps at your request before entering into a contract.
Assessing eligibility and supplying ARK kits
We may use your information to:
-
assess whether a school or organisation is eligible to obtain particular products;
-
understand relevant occupational health arrangements;
-
establish and manage a customer account;
-
process purchase requests and orders;
-
arrange delivery;
-
issue invoices and manage payments;
-
maintain appropriate product-supply records; and
-
provide service, safety, expiry or recall communications where applicable.
Depending on the circumstances, we rely on contractual necessity, steps taken before entering into a contract, compliance with legal or regulatory obligations, and our legitimate interests in operating our business safely and effectively.
Operating and protecting the website
We use technical and usage information to:
-
provide and maintain the website;
-
diagnose technical problems;
-
protect the website and its users from fraud, misuse and security threats;
-
understand whether pages and forms are operating correctly; and
-
improve the accessibility, performance and usability of the website.
We rely on our legitimate interests in maintaining a secure and effective website. Where non-essential cookies or similar technologies are involved, we rely on your consent.
Legal, regulatory and business administration
We may use personal information to:
-
meet medicines, product-safety or other regulatory requirements;
-
maintain appropriate business and accounting records;
-
manage complaints, disputes or legal claims;
-
prevent or investigate fraud and misconduct;
-
respond to regulators, public authorities or courts;
-
protect our legal and commercial interests; and
-
support a restructuring, sale or transfer of all or part of our business.
We rely on compliance with legal obligations and our legitimate interests in protecting and administering our organisation.
4. Marketing communications
We may send marketing emails about ARK products, services, training, news or emergency-preparedness information where you have actively chosen to receive them.
Marketing consent is optional and is not required in order to submit an enquiry or request information about an ARK kit.
You can withdraw your consent at any time by:
-
using the unsubscribe link in a marketing email; or
-
contacting us at info@arcadiapharma.co.uk.
Withdrawing consent will not affect the lawfulness of marketing sent before your withdrawal.
We may retain a limited suppression record after you unsubscribe so that we can respect your preference and avoid contacting you again unintentionally.
5. Who we share your information with
We do not sell personal information.
Where necessary, personal information may be shared with:
-
authorised Arcadia personnel;
-
website hosting and website-management providers;
-
customer relationship management and enquiry-management providers;
-
IT, email, cloud-storage and cybersecurity providers;
-
authorised partners supporting the administration of the ARK service on our behalf;
-
payment, accounting and financial administration providers;
-
couriers, fulfilment providers and other suppliers involved in completing an order;
-
professional advisers, including accountants, auditors, insurers and lawyers;
-
regulators, enforcement bodies, courts or public authorities; and
-
a purchaser, investor or adviser involved in a proposed sale, restructuring or transfer of our business.
Service providers acting on our behalf are only permitted to use personal information for the services they provide to us and must protect it appropriately.
6. Wix and website data
The ark-kits.co.uk website is created and hosted using the Wix website platform.
Information submitted through Wix Forms may be stored in the website’s Wix contact-management and customer relationship management systems. Wix may also process technical, security, website-usage and cookie-consent information when people visit the website.
Wix.com Ltd and its authorised group companies and subprocessors may process website information in the United Kingdom, European Economic Area, Israel, United States and other countries in which they or their service providers operate.
Where information is transferred outside the United Kingdom, appropriate safeguards will be used as required by UK data protection law. These may include UK adequacy regulations or approved contractual safeguards.
7. International transfers by other providers
Some of our other technology providers may also operate internationally.
Where personal information is transferred to a country that has not been recognised as providing an adequate level of data protection, we will take appropriate steps to protect the information. These may include contractual safeguards and appropriate technical and organisational protections.
You can contact us for further information about the safeguards used for a particular transfer.
8. How long we keep information
We only retain personal information for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, regulatory and product-safety requirements.
Our usual retention approach is:
-
general enquiries that do not result in an ongoing customer relationship are normally retained for up to 24 months following the last substantive contact;
-
eligibility and purchase-request information is retained for as long as needed to assess and document the request;
-
customer, order, account and invoice records are normally retained for at least six years after the end of the relevant financial year or customer relationship;
-
regulatory, product-safety or recall records may be retained for longer where required by law;
-
marketing information is retained until consent is withdrawn or the information is no longer required, subject to periodic review;
-
unsubscribe and suppression records may be retained for as long as necessary to respect the person’s preferences; and
-
cookie and analytics information is retained according to the duration of the relevant cookie and our website privacy settings.
Information may be retained for longer where it is needed for a complaint, investigation, legal claim or regulatory requirement.
9. How we protect your information
We use appropriate technical and organisational measures designed to protect personal information against:
-
accidental or unlawful destruction;
-
loss or alteration;
-
unauthorised access or disclosure; and
-
other unlawful forms of processing.
These measures include appropriate access controls, password and account protections, secure service providers, staff access restrictions and proportionate information-security procedures.
No internet-based system can be guaranteed to be completely secure. However, we regularly consider the nature of the information, the potential risks and the measures reasonably available to protect it.
10. Cookies and similar technologies
Cookies are small text files stored on your device when you visit a website. They can help a website operate securely, remember choices, measure website use and provide additional functions.
We use the following categories of cookies.
Essential cookies
Essential cookies are necessary for the secure and reliable operation of this website. They cannot normally be disabled through our cookie banner because some parts of the website may not function correctly without them.
-
The Wix platform may use essential cookies including XSRF-TOKEN, which helps protect website forms and requests against fraud and is normally deleted at the end of your browsing session.
-
The hs cookie is used for website security and normally lasts for the duration of your browsing session.
-
The svSession cookie supports website security, stability and core functionality and may remain on your device for up to 12 months.
-
The SSR-caching cookie supports efficient page loading and rendering and may remain on your device for up to 24 hours.
-
Cookies beginning with TS are used for security and attack detection and normally last for the duration of your browsing session.
-
The bSession cookie helps Wix measure the effectiveness and stability of its systems and may remain on your device for up to 24 hours.
-
The fedops.logger.sessionId cookie helps identify, monitor and investigate website errors and may remain on your device for up to 12 months.
The names, purposes and duration of essential cookies may change when Wix updates its platform or website services.
Analytics cookies
Analytics cookies help us understand how visitors use the website, which pages are most useful and whether the website is performing effectively.
Analytics cookies will only be used where you have given consent through the website’s cookie banner.
Functional cookies
Functional cookies support optional website features and remember certain visitor choices. They will only be used where required for a feature and where the appropriate consent has been obtained.
Marketing cookies
Marketing cookies may be used to measure campaigns or provide more relevant advertising. We will only use marketing cookies where these features have been enabled and you have given consent.
Third-party content
Some website functions or embedded content may be provided by third parties. These providers may use their own cookies or similar technologies.
Where required, third-party features will only be enabled after the appropriate cookie consent has been obtained. Their use of information is also governed by their own privacy policies.
Managing your cookie preferences
When you first visit the website, you will be given the opportunity to:
-
accept optional cookies;
-
reject optional cookies; or
-
select individual cookie categories.
Essential cookies will continue to operate because they are required for the website to function safely.
You can change your preferences at any time by selecting the Cookie Settings link available on the website.
You can also delete or block cookies through your browser settings. Blocking essential cookies may prevent parts of the website from working correctly.
11. Your data-protection rights
Depending on the circumstances and the lawful basis on which we use your information, you may have the right to:
-
request access to the personal information we hold about you;
-
request correction of inaccurate or incomplete information;
-
request deletion of your information;
-
request restriction of how your information is used;
-
object to processing based on our legitimate interests;
-
object at any time to the use of your information for direct marketing;
-
receive certain information in a portable format;
-
withdraw consent at any time where processing is based on consent; and
-
raise concerns about decisions made solely through automated processing, where applicable.
These rights are not absolute and may be subject to legal exemptions.
We may need to verify your identity before responding to a request. We normally respond within one month, although the law permits additional time in certain circumstances.
Requests can be sent to info@arcadiapharma.co.uk.
12. Complaints
Please contact us first if you have concerns about how we have handled your information. We will investigate your concern and aim to resolve it.
You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data-protection regulator.
13. Links to other websites
Our website may contain links to websites operated by other organisations.
We are not responsible for the privacy practices, security or content of third-party websites. You should review the relevant privacy policy before providing personal information to another organisation.
14. Changes to this policy
We may update this Privacy & Cookies Policy to reflect changes to:
-
the website;
-
our services;
-
the technology providers we use;
-
our data-processing activities; or
-
applicable legal and regulatory requirements.
The latest version will always be published on this website with the date of the most recent update.
Where a change materially affects how we use personal information, we will provide an appropriate additional notice.
15. Contact us
Questions, concerns and requests relating to personal information can be sent to:
Privacy contact
Arcadia Medical
Unit 3 Bell Court
Swansea West Business Park
Fforestfach
Swansea
SA5 4HP
Email: info@arcadiapharma.co.uk
Telephone: +44 (0)1792 940270
_edited.png)