Privacy Policy
At ARU Sports (a trading name of ARU Spa Limited), we adhere to the highest institutional standards of commercial discretion. We will never sell, lease, or monetize client organization information, financial ranges, or diagnostic briefs to third-party advertisers or competing sports entities.
1. Data Controller Identification
The legal entity responsible for the collection and processing of your personal and business data under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 is:
2. Information We Collect
When you complete our online intake brief, request a consultation, or communicate with our sports management team, we may collect the following categories of information:
- Contact Details: Full name, professional job title/role, business email address, and phone / WhatsApp number.
- Organization Profile: Organization name, entity type (e.g. Sports Club, Academy, Corporate Sponsor, Venue), and operating borough/region (e.g. Haringey, Barnet, Finchley, London).
- Commercial Scope & Objectives: Primary strategic objectives (e.g., kit sponsorship, digital membership automation, valuation deck design), target revenue scales, timeline requirements, and qualitative notes.
- Technical Diagnostics: Standard anonymized server request logs, browser user-agent, and IP address for cybersecurity and bot mitigation.
3. Lawful Basis & Purposes for Processing
We process your information in accordance with Article 6 of the UK GDPR under the following lawful bases:
To evaluate your diagnostic brief, schedule discovery sessions, prepare commercial proposals, and establish commercial consulting agreements.
To conduct secure sports commercial consulting, optimize website performance, verify business leads, and maintain ongoing commercial correspondence.
4. Third-Party Processors & Infrastructure
We utilize vetted, enterprise-grade cloud service providers to securely handle form transmission and hosting. All data transfers employ modern TLS 1.3 encryption in transit:
- Web3Forms / Form Endpoints: Encrypted relay infrastructure utilized exclusively to deliver structured form payloads directly to our executive inbox.
- Hosting & Edge Delivery: Cloud infrastructure operating under strict UK / EU standard contractual clauses.
5. Data Retention & Safeguards
We retain submitted commercial inquiry records only for as long as necessary to fulfill the diagnostic request or manage active client engagements:
- Active Clients: Retained for the full term of the sports management contract plus statutory corporate record-keeping requirements (up to 6 years for legal and accounting audits).
- Prospective / Inactive Inquiries: Inquiries that do not transition into a commercial mandate are securely purged after a maximum period of 24 months.
6. Your Rights Under UK GDPR
As a data subject located in the United Kingdom or European Economic Area, you possess statutory rights regarding your personal information:
You also possess the right to lodge a formal complaint with the UK supervisory authority: The Information Commissioner's Office (ICO) at ico.org.uk.
7. Contacting Our Privacy Lead
To exercise any of your statutory rights or submit questions regarding this policy, please reach out directly: