Privacy Policy
The Association for Rental Living (“ARL”, “we” and “us”) is committed to protecting the privacy of those with whom we interact and we recognise the need to respect and protect information that is collected or disclosed to us (called “Personal Information”, explained below).
This Privacy Notice is intended to tell you how we use your Personal Information, and we’ve tried to explain what we do in enough detail to give you the information you need at a glance. If you still can’t find the information you need, you can email us at admin@theARL.org.uk.
This Privacy Notice applies to The ARL website and services that refer to or link to the Privacy Notice and will apply whether you access our services using a computer, mobile phone, tablet, TV, or other device.
Who are we?
We are the data controller of the Personal Information (explained below) that we collect about you. We have a current registration (number ZA49296) in the Data Protection Register. If you have any questions about this Privacy Notice, including any requests to exercise your legal rights, please contact us at admin@theARL.org.uk
What is Personal Information and what Personal Information does the UKAA collect about you?
For the purposes of this Privacy Notice “Personal Information” consists of any information that relates to you and/or information from which you can be identified, directly or indirectly. For example, information which identifies you may consist of your name, address, telephone number, photographs, location data, an online identifier (e.g. cookies identifiers and your IP address) or to one or more factors specific to your physical, economic, cultural or social identity.
We may collect use, store and transfer different kinds of Personal Information about you which we have grouped together as follows:
Identity and Contact Data includes first name, last name, company, position, address (whether business or individual), email address, telephone number and photograph.
Payment Data includes your payment details such as credit or debit card.
Technical and Usage Data includes internet protocol (IP) addresses, the type of browser used while visiting our website and the numbers of users who visit our website, usage session dates and duration, page views, and how you use our website.
How is your Personal Information collected?
The ARL collects information when a user visits our website, when a customer becomes a member or purchases our services, and when a customer contacts us whether by the telephone, email or post. We use different methods to collect data from and about you including:
Personal Information you provide directly. You may give us your Identity and Contact Data by corresponding with us by email, phone or otherwise. This includes Personal Information that you provide when you:
Join our organisation as a member and complete our membership form,
Purchase any of our event tickers, or
Otherwise interact with us.
Automated technologies or interactions. As you interact with our website, we may automatically collect Technical and Usage Data about your equipment, browsing actions and patterns. We collect this Personal Information by using cookies and other similar technologies. Please see section 9 below.
Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:
Technical and Usage Data from third party analytics providers, such as Google Analytics.
Identity and Contact Data from publicly available sources.
How do we use your information?
We may use the Personal Information that we collect for the following purposes:
Deliver our Membership Package, and our other Services – as well as to administer systems and accounts;
Analysis Purposes – for assessment and analysis of the build to rent market, customers, and other services,;
Statistical Purposes – for research, statistical and behavioural analysis;
Membership and Website Improvement – to enhance our membership and services, to ensure content from our website is presented in the most effective manner for you and your computer, to enhance the user experience, and to develop new services;
Customer Support Services – to provide customer support services;
Business Purposes – for business monitoring and internal record keeping including maintaining our accounts, complying with good practice and for other administrative, operational and security reasons;
Legal Obligations – to comply with our legal and regulatory obligations; and
Updates – to communicate with you, including communicating with you about your transactions with us, giving you important information about your membership, sending you notices about any material changes to our Privacy Notice, and, where permitted by you and applicable laws, marketing, sending you offers and promotions for our services.
The law allows us to use the Personal Information as set out above on the basis that the processing is necessary for the performance of a contract with you, or we are acting in our “legitimate interests” in the promotion and efficient running of our business.
Marketing communications:
When you become a member of our organisation, purchase any of our event tickets, request information on our website or otherwise communicate with us, we may use your Identity and Contact Data to send you marketing-related correspondence by email related to our services. Names and email addresses of event attendees may be shared with event partners for the purposes of administering the event and for follow-up messaging.
When we process your Personal Information for marketing purposes, we do so on the basis that it is in our legitimate interests to do so, in promoting our organisation and to personalise and to target more effectively our marketing communications to ensure, to the extent possible, that any marketing-related correspondence is relevant to you
If you are currently receiving regular mailings from the ARL and would like this to stop, you can opt out and ask for your information to be removed from our database. To opt out of receiving marketing-related correspondence, please click “Unsubscribe” from any marketing or promotional email you receive from us. This will ensure that we will not send you regular mailings of that sort again unless you opt back in, but we will still have your email information.
To whom do we disclose your information?
We will only use your Personal Information for our internal business purposes, some of which are mentioned above. We may disclose your information to the following entities:
Service Providers
We use third party service providers to help us to administer certain activities and services on our behalf, such as providing our website, providing payroll services, and analysing usage of our Services. We may share Personal Information about you with such third party service providers solely for the purpose of enabling them to perform services on our behalf and they will operate only in accordance with our instructions. Here are examples of third-party service providers we use:
IT and Software Providers – we use IT and software providers to provide our website and other IT services.
Payment processor – if you wish to make a booking for one of our events with a credit card, we use PayPal to process your payment. All credit card details are immediately destroyed following payment.
MailChimp – we use MailChimp to assist us in sending you our marketing communications.
Analytics Service Providers – analytics providers are used to assist us in understanding the usage of our website and other services and to enable us to improve our services. The analytics provider we currently use is Google Analytics.
Third parties when required by Law or to Protect our Services
We will disclose your Personal Information to comply with applicable law or respond to valid legal process, including from our regulators, law enforcement or other government agencies; to protect our customers (e.g. to prevent spam or attempts to defraud users of our services); to operate and maintain the security of our website (e.g. to prevent or stop an attack on our systems or networks); or to protect the rights or property of the ARL, including enforcing any terms or agreements governing the use of our services.
Other Parties At Your Direction
We may share Personal Information about you with third parties when you request such sharing.
What do we do to keep your information secure?
We have put in place appropriate physical and technical measures to safeguard the Personal Information that we collect in connection with our services. In addition, we limit access to your Personal Information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Information on our instructions and they are subject to a duty of confidentiality. However, please note that although we take appropriate steps to protect your Personal Information, no website, device, online application or transmission of data, computer system or wireless connection is completely secure and therefore we cannot guarantee the security of your Personal Information.
International Transfer of Data
The Personal Information that we collect from you may be stored and processed in your region, or transferred to, stored at or otherwise processed outside the European Economic Area (“EEA”), including but not limited to the United States of America (where, MailChimp is based) or in any other country where the ARL’s service providers maintain facilities.
By using or participating in any Service and/or providing us with your Personal Information, you acknowledge that we will collect, transfer, store and process your information outside the EEA. We will take all steps reasonably necessary to ensure that your Personal Information is kept secure and treated in accordance with this Privacy Notice and the requirements of applicable law wherever the data is located.
Where we transfer your Personal Information outside the EEA to other third parties, we will ensure that appropriate transfer agreements and mechanisms, such as the EU Standard Contractual Clauses, are in place to help ensure that our third party service providers provide an adequate level of protection to your Personal Information. MailChimp are certified under the EU/US Privacy Shield, which ensures adequate protection is provided to your personal data. We will only transfer your Personal Information outside the EEA in accordance with applicable laws or where you have given us your consent to do so.
Data Retention – How long we will store/keep your Personal Information
The ARL retains Personal Information for as long as necessary to fulfil the purposes for which your Personal Information has been collected as outlined in this Privacy Notice unless a longer retention period is required by law. When your Personal Information is no longer required for the purpose it was collected or as required by applicable law, it will be deleted and/or returned to you in accordance with applicable law.
Accessing your Personal Information and other rights you have
The ARL will collect, store and process your Personal Information in accordance with your rights under any applicable data protection laws. Under certain circumstances, you have the following rights in relation to your Personal Information:
Subject Access – you have the right to request details of the Personal Information which we hold about you and copies of such Personal Information.
Right to Withdraw Consent – where you have consented to our processing of your Personal Information, you have the right to withdraw such consent at any time. In the event you wish to withdraw your consent to processing, please contact us using the details provided in section 11.
Data Portability – you may, in certain circumstances, request us to port (i.e. transmit) your Personal Information directly to another organisation.
Rectification – we want to ensure that the Personal Information about you that we hold is accurate and up to date. If you think that any information we have about you is incorrect or incomplete, please let us know. To the extent required by applicable laws, we will rectify or update any incorrect or inaccurate Personal Information about you.
Restriction of processing – you have the right in certain specified situations to require us to stop processing your Personal Information.
Object to processing – You have the right to object to specific types of processing of your Personal Information, such as, where we are processing your Personal Information for the purposes of direct marketing.
Prevent automated decision-taking – in certain circumstances, you have the right not to be subject to decisions being taken solely on the basis of automated processing.
Enforcing your rights
If you wish to enforce any of your rights under applicable data protection laws, then please see section 11 below. We will respond to your request without undue delay and by no later than one month from receipt of any such request, unless a longer period is permitted by applicable data protection laws, and we may charge a reasonable fee for dealing with your request which we will notify to you. Please note that we will only charge a fee where we are permitted to do so by applicable data protection laws.
Complaints
If you are concerned that we have not complied with your legal rights under applicable data protection laws, you may contact the Information Commissioner’s Office (www.ico.gov.uk) which is the data protection regulator in the UK. which is where the ARL is located. Alternatively, if you are based outside the UK, you may contact your local data protection supervisory authority.
Third-Party Links on Our Website
Our website may contain links to other third party websites that are not operated by the ARL. These linked sites and applications are not under the ARL’s control and as such, we are not responsible for the privacy practices or the content of any linked websites and online applications. If you choose to use any third party websites, any Personal Information collected by the third party’s website will be controlled by the Privacy Notice of that third party. We strongly recommend that you take the time to review the privacy policies of any third parties to which you provide Personal Information. In particular, our partner events are not covered by this Privacy Notice. Please refer to the third-party organiser’s privacy notice when booking a place at one of our partner events. We provide links to third party companies, we accept no responsibility on the use of your data on their site. We do not pass personal data on the third parties from the members benefits page.
Cookies
What are cookies?
We may use cookies on our website. Cookies are small text files that can be read by a web server in the domain that put the cookie on your hard drive. Cookies are assigned to and stored in a user’s internet browser on a temporary (for the duration of the online session only) or persistent basis (cookie stays on the computer after the internet browser or device has been closed). Cookies collect and store information about a user’s preferences, product usage and content viewed which allows for us to provide users with an enhanced and customized experience when engaging with our website.
Further information on cookies
For further information on what cookies are, how BPF and other third parties use them, and for details of how cookies can be disabled, please see our Cookie Policy here.
Changes to this Privacy Notice
It also is important that you check back often for updates to the Privacy Notice, as we may change this Privacy Notice from time to time. The “Date last updated” legend at the bottom of this page states when the notice was last updated and any changes will become effective upon our posting of the revised Privacy Notice.
We will provide notice to you if these changes are material and, where required by applicable law, we will seek your consent. We will provide this notice by email or by posting notice of the changes on the ARL website or through any relevant Services.
GDPR Terms and Conditions:
1. Data Collection and Processing: a. We collect personal data from attendees for the purpose of organizing and managing this event. Personal data may include names, contact information, job titles, and any other information provided voluntarily. b. By registering for this event, attendees consent to the collection, processing, and storage of their personal data in accordance with these terms and our Privacy Policy.
2. Data Usage: a. Personal data collected will be used for the purpose of event registration, communication regarding the event, and related administrative tasks. b. We may also use personal data to send marketing communications. If you do not wish to receive communications from ARL you can unsubscribe using the link in our marketing emails or by contacting ARL.
3. Data Sharing: a. We may share personal data with third-party service providers and event delivery partner organisations involved in organising and managing the event, such as venue staff, event coordinators, or marketing partners. b. Personal data will not be sold or shared with third parties for their marketing purposes without explicit consent. c. If you have your badge scanned at the event, this will be classed as granting explicit consent to sharing your contact details for their marketing purposes.
4. Data Security: a. We take appropriate technical and organizational measures to safeguard personal data against unauthorized access, disclosure, alteration, or destruction. b. However, no data transmission over the internet or storage system can be guaranteed to be 100% secure. Attendees acknowledge the inherent risks of providing personal data online.
5. Data Retention: a. Personal data will be retained only for as long as necessary to fulfil the purposes outlined in these terms, unless a longer retention period is required or permitted by law. b. Attendees may request the deletion of their personal data at any time by contacting ARL.
6. Rights of Data Subjects: a. Attendees have the right to request access to, correction of, or deletion of their personal data held by us. b. Attendees also have the right to withdraw consent for the processing of their personal data, where consent is the legal basis for processing.
7. Contact Information: a. For any inquiries regarding the processing of personal data or to exercise rights under GDPR, attendees may contact us.
8. Changes to Terms: a. We reserve the right to update or modify these GDPR terms and conditions at any time. Any changes will be posted on our website, and attendees will be notified accordingly.
By registering for this event, attendees acknowledge that they have read, understood, and agree to these GDPR terms and conditions.
Event Terms and Conditions
1. Ticket Purchase: By purchasing a ticket to an ARL event, you agree to comply with these terms and conditions. All bookings must be paid for in GBP and in advance of the event. Invoice Payment Terms: strictly 14 days from invoice date. To be eligible for any member rates, you must be a member at the time of booking and at the time of the event. ARL reserve the right to change the applicable rates for your booking where you or your organisation do not qualify for the discounted rate.
2. Admission: Admission to the event is subject to presentation of a valid ticket. ARL reserve the right to refuse admission or eject any person whose conduct is deemed disorderly or who fails to comply with these terms and conditions.
3. Ticket Validity: Tickets are valid only for the date and time specified. No refunds or exchanges will be provided for tickets that are lost, stolen, damaged, or destroyed.
4. Cancellation Policy: In the event of cancellation of the event, ticket holders will be notified via email and provided with information regarding refunds or rescheduling. ARL will not be responsible for any additional costs incurred by ticket holders. Should you be unable to attend an event we would welcome substitute delegates attending in your place at no extra charge. Please notify admin@theARL.org.uk no later than two working days prior to the event.
Cancellation charges will apply as follows:
More than 60 days before the event: full refund
Between 60 and 30 days before the event: 50% cancellation fee
Within 30 days of event: 100% cancellation fee
5. Program Changes: ARL reserve the right to make changes to the program, schedule, lineup, or venue without prior notice. No refunds will be provided in such cases.
6. Photography and Recording: By attending the event, you consent to being photographed, filmed, or recorded for promotional and marketing purposes. ARL retain all rights to use such materials without any further authorisation or compensation.
7. Liability: Attendees participate in the event at their own risk. ARL will not be liable for any loss, injury, damage, or expense incurred by attendees, except where such liability cannot be excluded by law.
8. Code of Conduct: All attendees are expected to behave in a respectful and courteous manner towards fellow attendees, performers, staff, and the venue. Any behaviour deemed disruptive or offensive by the organisers will result in ejection from the event without refund.
9. Health and Safety: Attendees are required to comply with all health and safety regulations and instructions provided by event staff. ARL will not be liable for any injury or illness arising from failure to comply with these regulations.
10. Seating and Standing: Seating arrangements are on a first-come, first-served basis unless otherwise specified. ARL reserve the right to allocate seating or change seating arrangements as necessary.
11. Accessibility: ARL strive to make the event accessible to all attendees. If you require special assistance or accommodations, please contact us prior to the event.
12. Governing Law: These terms and conditions are governed by the laws of England and Wales. Any disputes arising from or in connection with these terms and conditions shall be subject to the exclusive jurisdiction of the courts of England and Wales.
By purchasing a ticket and/or attending the event, you acknowledge that you have read, understood, and agreed to abide by these terms and conditions.
Contact Us / Further Information
If you have any questions regarding the collection, processing, or use of your Personal Information or if you wish to correct, block, rectify, object, access, revoke your consent to any applicable aspect of this Privacy Notice or delete any of your Personal Information, please contact us:
By mail:
ARL
Kinetic Business Centre,
Theobald Street, Borehamwood,
Herts WD6 4PJ
By email:
admin@theARL.org.uk