Privacy Notice

This Privacy Notice explains how D3 Digital Services Limited (“ARify”, “we”, “us”) collects and uses personal data when you use the ARify platform and publisher dashboard. We are registered with the UK Information Commissioner’s Office (ICO) and hold Cyber Essentials certification. ARify™ is a product of D3 Digital Services Limited (Company Number 06877573).

1. Who we are

Controller for account and billing data relating to publisher users: D3 Digital Services Limited. For privacy and GDPR queries contact our Data Protection Officer at [email protected], or [email protected]. Where we process content or end-user data on your instructions as a publisher customer, we act as a processor under our Customer Data Processing Agreement.

2. Data we collect

We collect information you provide directly to us, such as name, email, and billing details. We also automatically collect usage data, device information, and IP addresses when you interact with our platform.

• Account details: name, email, business name, password (hashed), role, and plan preferences.
• Billing details handled via our payment provider (Stripe), such as subscription status and payment method tokens — we do not store full card numbers.
• Service content you upload (images, media, AR configurations) and usage logs needed to run and secure the service.
• Reader interaction data generated through your QR experiences (for example scan counts), which we process for you as described in the DPA.

3. How we use it

We use your data to provide, maintain, and improve our services, process transactions, communicate with you, and personalize your experience on the ARify platform.

• To create and manage your account and provide the ARify service (contract).
• To bill for subscriptions and prevent fraud (contract / legitimate interests).
• To secure the platform, monitor abuse, and improve reliability (legitimate interests).
• To meet legal obligations (for example tax and accounting records).

4. Cookies and tracking

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

4.1 What are cookies?

Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie.

4.2 Categories of cookies we use

We use “Strictly Necessary” cookies required for the site to function, and “Analytics” cookies (if you consent) to help us understand how you use the site.

4.3 Specific cookies used

We use arify-language to remember your language preference, and arify-cookie-consent to store your cookie choices. These are strictly necessary for the site’s intended presentation. The publisher dashboard may also set session and authentication cookies required to keep you signed in and protect the service.

4.4 Legal basis for cookie processing

Under UK GDPR, we process necessary cookies based on legitimate interest, and optional cookies based on your consent.

4.5 How to withdraw consent

You can change your cookie preferences at any time by using the cookie settings controls on arify.co.uk (via the “Cookie Settings” link in the footer), which reopens the consent banner.

5. Third-party services

We may employ third-party companies to facilitate our service, provide the service on our behalf, perform service-related services, or assist us in analyzing how our service is used. These third parties have access to your personal data only to perform these tasks. We use carefully selected processors (for example hosting, email, and Stripe for payments) under contracts that require appropriate protection. We do not sell your personal data.

6. Hosting, security and retention

The security of your data is important to us, but remember that no method of transmission over the internet or method of electronic storage is 100% secure. We strive to use commercially acceptable means to protect your personal data.

• Hosting: application and data are hosted with reputable cloud providers with access restricted to authorised personnel.
• Encryption: data in transit is protected with TLS/HTTPS. Sensitive secrets and credentials are stored using industry-standard protections.
• Backups: we maintain backups to support recovery from failure or incident, with access controls applied to backup stores.
• Access controls: staff access is limited on a need-to-know basis, with authentication and monitoring appropriate to the role.
• Incident response: we investigate security incidents, contain impact, and notify affected customers and regulators where required by law.
• Retention: we retain your personal data only for as long as is necessary for the purposes set out in this notice, and to the extent necessary to comply with our legal obligations, then delete or anonymise it.

7. Your rights under UK GDPR

Under the UK General Data Protection Regulation, you have the right to access, rectify, or erase your personal data. You also have the right to restrict or object to our processing of your data, and the right to data portability. Contact [email protected] to exercise these rights.

8. Complaints

If you believe we have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Contact us

For any GDPR-related queries, please contact our Data Protection Officer at [email protected].

10. Related documents

See also our Terms of Service, Customer Data Processing Agreement, and the marketing-site Cookie & GDPR Policy.