Privacy Policy

Arvy Hospitality Solutions Ltd ("we", "us", "our") is committed to protecting the privacy of clients, workers, job applicants and website visitors. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Arvy Hospitality Solutions Ltd is the data controller for personal data we collect. Company No. 10899903. Registered office: 6th Floor, First Central 200, 2 Lakeside Drive, Park Royal, London NW10 7FQ.

2. Data we collect

Clients (hotels and venues)

• Company name, billing address and site address
• Contact name, role, phone and email
• Staff request details (departments, dates, locations, notes)
• Invoicing, payment and account history

Workers and job applicants

• Identity and contact details (name, address, DOB, phone, email)
• Right-to-work documents, National Insurance number, bank details for payroll
• Employment history, references, qualifications, training records
• DBS / background-check results where required for the role
• Shift, attendance and performance data

Website visitors

• IP address, device, browser, pages visited (analytics)
• Information you submit through contact or enquiry forms

3. Legal bases for processing

• Contract — to provide staffing, housekeeping and payroll services.
• Legal obligation — right-to-work checks, tax, HMRC reporting, health & safety.
• Legitimate interests — operating, securing and improving our services.
• Consent — marketing communications and non-essential cookies (you can withdraw at any time).

4. How we use your data

• Match workers to client shifts and manage assignments
• Process payroll, invoices and payments
• Verify right to work, references and qualifications
• Communicate about bookings, shifts, quotations and support
• Comply with employment, tax and immigration law
• Prevent fraud and secure our systems

5. Sharing your data

We share personal data only where necessary, with: client hotels (for confirmed assignments), HMRC and statutory bodies, payroll and accounting providers, background-check providers, cloud hosting and IT processors, and professional advisors. We require all processors to meet UK GDPR standards.

6. International transfers

Where data is transferred outside the UK, we rely on adequacy decisions or the UK International Data Transfer Agreement / Addendum and apply appropriate safeguards.

7. Retention

• Worker payroll records — 6 years after end of engagement (HMRC).
• Right-to-work documents — 2 years after employment ends.
• Client contracts and invoices — 6 years.
• Job applications (unsuccessful) — 12 months.
• Marketing data — until consent is withdrawn.

8. Your rights

You have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. Contact booking@arvy24.co.uk to exercise any right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We use encrypted storage, access controls, secure authentication and regular reviews to protect personal data. If a personal data breach affects your rights, we will notify you and the ICO as required.

10. Contact

Data Protection enquiries: booking@arvy24.co.uk.