Legal
Website Privacy Notice
1. Who we are
Noble Arc Limited ("Noble Arc", "we", "us" or "our") is the controller responsible for the personal information described in this notice. We operate www.noblearc.co.uk and alicianoble.com. Alicia Noble is a trading name of Noble Arc Limited.
Our company details are:
- Company name: Noble Arc Limited
- Company number: 15652964
- Registered in: England and Wales
- Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
- Privacy and complaints email: alicia@noblearc.co.uk
- Privacy complaints: email alicia@noblearc.co.uk. We do not currently operate a separate privacy complaint form.
This notice explains how we use personal information when you visit either website, contact us, complete a quiz or scorecard, join our mailing list, enquire about or buy our services, or attend an event or in-person day.
2. Information we collect
Depending on how you interact with us, we may collect:
- identity and contact information, currently your first name and email address when you request a ScoreApp result;
- professional information, such as your occupation, current career level and functional area;
- your quiz or scorecard answers, automatically calculated scores, career-positioning profile and related communications;
- enquiry and correspondence information, including messages you send us;
- booking and transaction information, such as the service or event purchased, price, date, payment status, refund information and Stripe transaction reference;
- marketing preferences and records of consent or objections;
- website and device information, such as IP address, browser or device type, pages viewed, referral source and cookie or similar-technology identifiers; and
- information needed to establish, exercise or defend legal claims, prevent fraud, keep our services secure, and meet our legal and accounting duties.
The current ScoreApp quiz asks multiple-choice questions about career direction, reputation, capability, professional relationships, and the sustainability of your workload, energy and recovery. It is not intended to diagnose or collect information about your physical or mental health. Please do not enter health information or details about race or ethnicity, religious or philosophical beliefs, political opinions, trade-union membership, genetic or biometric information, sex life or sexual orientation, or criminal offences into our forms. We will review this notice and our legal basis before intentionally collecting any such information.
We do not receive your full payment-card details when you pay through a Stripe-hosted payment page. Stripe collects and processes those details under its own privacy information. We may receive limited information about the payment and payer so that we can administer the booking, issue receipts, prevent fraud and keep appropriate records.
3. How we collect information
We collect information:
- directly from you when you contact us, sign up, complete a ScoreApp quiz, book or buy a service, attend an event, or otherwise communicate with us;
- automatically from your device when you use our websites, subject to the choices available through our cookie or privacy settings;
- from Stripe when you make or attempt a payment;
- from ScoreApp when you use a quiz or scorecard linked from our site;
- from Hostinger when you use a website form or funnel hosted on our sites;
- from Microsoft 365 when you contact us by email or, if enabled, submit a Microsoft Form;
- from Substack if you choose to subscribe to a Noble Arc or Alicia Noble publication there; and
- from Eventbrite if you register for an event that we list or administer through Eventbrite.
4. Why we use information and our lawful bases
| Purpose | Information normally used | UK GDPR lawful basis |
|---|---|---|
| Respond to an enquiry and discuss a possible service | Contact details, occupation and correspondence | Taking steps at your request before entering a contract; where that does not apply, our legitimate interests in responding to enquiries and developing our business |
| Provide services, bookings, events and customer support | Contact, booking, transaction and correspondence information | Performance of our contract with you |
| Provide and administer a requested ScoreApp quiz and results | First name, email address, occupation, career level, functional area, answers, calculated scores and profile | Our legitimate interests in providing the interactive assessment you request and helping you understand your career positioning |
| Take and reconcile payments through Stripe | Contact, booking, transaction and limited payment information | Performance of our contract with you; compliance with legal obligations; our legitimate interests in preventing fraud and managing payments |
| Keep tax, accounting and business records | Customer, booking, transaction and correspondence information | Compliance with legal obligations; our legitimate interests in keeping appropriate records and dealing with legal claims |
| Send newsletters and other email marketing | Name, email address, preferences and engagement information | Consent, unless the UK "soft opt-in" lawfully applies to marketing our similar services to an existing customer |
| Operate, secure and troubleshoot the websites | Device, log and security information | Our legitimate interests in providing secure, reliable websites and preventing fraud or misuse |
| Measure aggregate website use to improve the websites | Website-use and device information | Our legitimate interests in understanding and improving our websites; where consent is required for storage or access on your device, we also request that consent |
| Establish, exercise or defend legal claims and handle complaints | Relevant customer, transaction and correspondence information | Our legitimate interests in protecting our legal rights and resolving disputes; compliance with legal obligations where applicable |
Where we rely on legitimate interests, we consider whether the use is necessary and balance our interests against your rights and reasonable expectations. You can ask us for more information about this assessment.
ScoreApp automatically assigns points to your answers and produces scores across Direction, Reputation, Capability, Relationships and Sustainability. It may also place a score in a descriptive result band. This is profiling, but it is intended as an informational self-assessment. It does not determine employment, access to a service, price, credit or any other legal or similarly significant outcome. You may contact us for an explanation or to discuss your result.
5. Marketing
Signing up for a newsletter is optional. A request for a quiz result, information or a service is not automatically consent to receive unrelated marketing. Where consent is needed, we use a separate, clear opt-in and keep a record of the choice.
You can unsubscribe at any time by using the link in a marketing email or contacting us at alicia@noblearc.co.uk. Unsubscribing does not affect service messages needed to administer an enquiry, booking, purchase or event. We may keep a minimal suppression record so that we respect your request not to receive further marketing.
6. Cookies, analytics and similar technologies
We use necessary technologies and server logs to operate and secure our websites. Hostinger provides hosting statistics, access logs and website traffic analytics. These may include visitor numbers, traffic sources, country or region, device type, pages requested and technical error information.
Google Analytics is not currently identified as part of our planned setup. We will not add Google Analytics, Google Tag Manager, Meta Pixel, advertising conversion tracking, session recording or similar tracking without first updating this notice and implementing any consent controls required by law.
Our cookie or privacy settings explain each technology, its provider, purpose and duration. Where the law requires consent, the technology remains disabled until you choose to enable it. You can change your choice at any time using the "Cookie settings" link in the footer of either website.
We may operate limited analytics without prior consent only where the legal statistical-purpose exception applies: the sole purpose must be aggregate statistics used to improve our site; neither we nor the provider may use it to identify, track or profile visitors or for advertising; and visitors must receive clear information and a simple, free way to object. Advertising, conversion tracking, cross-site tracking, profiling and session recordings are not treated as exempt and are not enabled without the required consent.
See the Cookie Notice linked in the footer of each website for the current list of technologies used on that site.
7. Who receives information
We may share relevant information with:
- Hostinger, which hosts our websites and may provide forms, funnels, traffic statistics and technical logs;
- Hyper Targeted Marketing Limited, trading as ScoreApp, which provides the quiz and scorecard platform;
- Stripe and its banking, payment and fraud-prevention partners when you use a Stripe payment page;
- Microsoft, through Microsoft 365 services such as Outlook and Excel and, if enabled, Microsoft Forms, which supports email, records and form responses;
- Substack, if you subscribe to or interact with a publication we operate there;
- Eventbrite, if you register for or interact with an event we administer there;
- Hostinger's analytics service, subject to the choices and limits described above;
- professional advisers, insurers, auditors and accountants where reasonably necessary;
- regulators, courts, law-enforcement bodies, tax authorities and other public authorities where required or permitted by law; and
- a buyer, investor or successor if our business or assets are reorganised, sold or transferred, subject to appropriate confidentiality and data-protection safeguards.
Our service providers may act as processors on our instructions. Some providers, including Stripe for certain payment, fraud-prevention and legal-compliance activities, may also act as separate controllers and provide their own privacy information.
We do not sell personal information.
8. International transfers
Some providers or their sub-processors may access or store personal information outside the UK. Where this is a restricted transfer, we use an applicable legal safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, and any additional measures required by data-protection law.
You may contact us for more information about the safeguards relevant to your information.
9. How long we keep information
We do not intend to build a permanent general database of quiz participants or unsuccessful enquirers. However, some information must be held temporarily to provide results and answer enquiries, and transaction and accounting records must be retained for legal and business purposes. We keep personal information only for as long as reasonably necessary for the purpose collected, including legal, tax, accounting, fraud-prevention and dispute-resolution needs. Our standard periods are:
| Record | Intended period |
|---|---|
| Unsuccessful enquiries | 6 months after the enquiry is closed or the last meaningful contact |
| Event or service waitlists | Until the relevant event or service has opened or been cancelled, then up to 3 months; never more than 12 months without renewed permission or another documented reason |
| ScoreApp answers and identifiable results where no customer relationship follows | 90 days after the result is supplied; anonymous aggregate statistics may be retained longer |
| Customer, contract and substantive service records | 6 years after the service or customer relationship ends where reasonably needed for legal claims |
| Transaction, invoice and accounting records | 6 years from the end of the company financial year to which the record relates, or longer where legally required |
| Marketing contacts | Until consent is withdrawn, you unsubscribe, or 24 months pass without meaningful engagement; a minimal suppression record may be kept afterwards |
| Security and access logs controlled by us | Normally up to 90 days, unless needed for security investigation or legal claims; hosting providers may keep necessary service logs for their documented operational periods |
| Individual-level analytics information | Only for the shortest period needed to produce aggregate statistics; anonymous aggregate statistics may be retained longer |
| Complaints and related correspondence | 6 years after closure where reasonably needed for legal claims |
We review records regularly and delete or anonymise them when the relevant period expires. We may retain a record longer where needed for an active dispute, legal claim, regulatory request or legal obligation. Deleting our copy does not necessarily delete information that an independent provider, such as Stripe, Eventbrite or Substack, must keep for its own legal purposes.
10. Security
We use appropriate technical and organisational measures designed to protect personal information. These include access controls, appropriate account security, encrypted transmission where supported, vendor review, backups and limiting access to people who need the information. No internet service is completely secure, and you should avoid sending sensitive information through ordinary email or forms unless requested and an appropriate method is provided.
11. Your data-protection rights
Depending on the circumstances, you may have the right to:
- be informed about how we use your information;
- ask for access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to erase information;
- ask us to restrict how information is used;
- receive certain information in a portable format;
- object to processing based on legitimate interests, and object at any time to direct marketing;
- withdraw consent at any time, without affecting earlier lawful processing; and
- ask for safeguards relating to qualifying solely automated decisions.
These rights are not absolute and exemptions may apply. To exercise a right, contact alicia@noblearc.co.uk. We may need enough information to confirm your identity and understand the request. We normally respond without undue delay and within the period required by law.
12. Privacy complaints
If you are concerned about how we use your information, please email alicia@noblearc.co.uk with "Privacy complaint" in the subject line. We will acknowledge a data-protection complaint within 30 days and respond without undue delay. We may ask for information needed to investigate and will tell you the outcome.
You may also complain to the Information Commissioner's Office (ICO), the UK regulator:
- Website: ico.org.uk/make-a-complaint/data-protection-complaints/
- Telephone: 0303 123 1113
We would appreciate the opportunity to address your concern first, but you do not have to contact us before approaching the ICO.
If EU or other overseas data-protection law applies to your interaction, you may also have the right to complain to the relevant local supervisory authority.
13. Third-party links and services
Our sites link to third-party services such as ScoreApp and Stripe. Those services may collect information directly from you under their own privacy notices. We encourage you to read the privacy information shown when you follow those links. This notice describes Noble Arc's use of information and does not control an independent third party's activities.
14. Changes to this notice
We may update this notice when our websites, services, providers or legal duties change. We will publish the revised version on both websites and update the date at the top. Where a change materially affects how we use information, we will take additional steps to bring it to the attention of affected people where appropriate.