Privacy Policy

1. Introduction

This Privacy Policy explains how Archiva processes personal data in accordance with UK GDPR.

2. Our Role

We act as:

• A data controller for our own business operations (e.g. client communications)
• A data processor when handling data on behalf of clients

Clients are responsible for the personal data collected through their own websites.

3. Data We Collect

We may collect:

• Client contact details (name, email)
• Billing information
• Technical access data (including credentials and API keys provided to us)
• Limited exposure to end-user data where required for support

4. How We Use Data

We use data to:

• Deliver our services
• Communicate with clients
• Maintain and improve our operations
• Comply with legal obligations

5. Data Sharing

We may share data with service providers where necessary, including infrastructure platforms such as Supabase, Netlify, and Stripe.

We do not sell personal data.

6. Data Retention

We retain data only as long as necessary for business or legal purposes.

7. Security

We implement reasonable technical and organisational measures to protect data, including secure handling of credentials.

8. Your Rights

Under UK GDPR, you have the right to:

• Access your data
• Request correction or deletion
• Restrict or object to processing
• Request data portability

9. Third-Party Platforms

Client websites may integrate with external platforms such as YouTube and Spotify. Data handling by those platforms is governed by their own policies.

10. Changes

We may update this Privacy Policy from time to time.

11. Contact

Charlie@archiva.tv