Privacy policy

This website presents ARB-FLO, tree inspection software for UK arborists. It is operated by AUCTOADMIN LTD, a company registered in Scotland (company number SC858317) that trades as ARB-FLO, which decides how the information described here is used (the “controller” under UK data protection law). “We” and “us” in this policy mean that operator.

For anything about this policy or your information, email hello@arbflo.com. You can also write to us at AUCTOADMIN LTD, Third Floor, 3 Hill Street, New Town, Edinburgh, EH2 3JP, United Kingdom.

Only what you send us through the request form:

• your name and email address (required, so that we can reply);
• your organisation, if you give it;
• what you are interested in: a demo, the pilot or a question;
• anything you write in the message box about how you survey and report today. Please do not include sensitive information, such as details about health, or personal details about other people.

With these, the form sends a subject line for our notification email, made from your name and what you are interested in. Netlify, which hosts this website and receives the form for us (see below), also records with each submission: your IP address, details of your web browser (its “user agent”), the address of the page the form was sent from, and the date and time you sent it.

The form contains a hidden field that people never see. If something fills it in, which only automated spam tools do, the request is thrown away and not kept.

This website sets no cookies and stores nothing on your device. It has no analytics, advertising or tracking scripts, no social media plug-ins, and no embedded content from other websites: its fonts, images and code are all served from this website itself. Browsing the site sends nothing about you to anyone other than our hosting provider, described below.

Like any website, it is delivered by a hosting provider: this one is hosted by Netlify. To send you each page, Netlify’s servers receive the technical details your web browser sends with every request, including your IP address, the address of the page you asked for and the type of browser you use. In detail: Netlify’s data processing agreement lists the visitors to websites it hosts among the people whose personal data it processes for its customers, and lists IP addresses among that data. It handles these details on our behalf, under that agreement. Netlify does not publish how long it keeps records of visits to the websites it hosts, so we cannot give a period here. When we checked a copy of this website deployed on Netlify, on 15 October 2026 before it went live, it set no cookies, stored nothing in the browser and loaded no scripts from other websites.

We use the details you send only to reply to you: to arrange a demo, to discuss the pilot, or to answer your question.

When you ask for a demo or to join the pilot, we use your details to take the steps you have asked for before any agreement with us (UK GDPR Article 6(1)(b)). When you ask a question, we rely on our legitimate interest in answering enquiries about our product (Article 6(1)(f)); replying to a message you chose to send us is what you would expect, and it has little impact on your privacy.

We do not add you to a mailing list, sell or rent your details, or use them for advertising. No decisions about you are made by automated means.

• Netlify, which hosts this website, receives the form when you press send, stores the submission in our Netlify account, and emails it to us. It handles your details on our behalf, as our processor. Netlify’s data processing agreement names Netlify, Inc., of San Francisco in the United States, as the company that processes this data. Netlify’s documentation does not name the country where form submissions are stored; the infrastructure providers on its published sub-processor list are all listed as located in the United States.
• Akismet, a spam-filtering service run by Automattic, Inc. in the United States. Netlify filters every form submission through Akismet, and lists it as one of the sub-processors it uses to provide its service. Netlify places any submission Akismet flags as spam in the Spam submissions list of our Netlify account, which we review and delete in the same way as other enquiries.
• Our email provider, Google (Google Workspace), holds the inbox where those emails arrive and where we reply from.

We do not share your details with anyone else, unless the law requires us to (for example, a valid request from a court or the police).

Netlify, Akismet and our email provider may store or access your details outside the UK, including in the United States. Netlify and Google each rely on their own safeguards for these transfers, set out in their own terms. Neither provider’s safeguards cover the other.

Netlify. Netlify’s data processing agreement says that its transfers rely on the UK Extension to the EU–US Data Privacy Framework, under which Netlify, Inc. states it is certified. If that stops applying, the EU standard contractual clauses, with the UK’s International Data Transfer Addendum, apply instead. Under the same agreement, Netlify remains responsible to us for the providers it uses, such as Akismet. These safeguards are Netlify’s and do not cover our email provider.

Google Workspace. We have accepted Google’s Cloud Data Processing Addendum for our Google Workspace account. Google’s transfer documentation says that transfers of UK personal data to, and onwards from, the United States rely on Google LLC’s certification under the UK Extension to the EU–US Data Privacy Framework. For other international transfers, Google says its Cloud Data Processing Addendum provides contractual safeguards where they are required. These safeguards are Google’s and do not cover Netlify or Akismet.

Checking those certifications: when we checked the official Data Privacy Framework List on 15 October 2026, it showed Netlify, Inc. and Google LLC each as an active participant under the UK Extension. Each company’s certification covers only its own transfers.

We keep an enquiry for six months after our last meaningful contact with you about it: for example, our last reply to you, or your last message about a demo, the pilot or your question.

We review the enquiries we hold by hand once a month. At the first monthly review after an enquiry’s six months have passed, we delete it from Netlify Forms, including its spam list, and from our Google Workspace inbox, together with the email conversation that followed. An enquiry may therefore be kept for up to about a month beyond the six months. You can ask us to delete your enquiry sooner at any time.

Deleting an enquiry removes it from our Netlify account and our inbox. Netlify and Google may keep backup copies for a period afterwards, under their own deletion processes; we cannot remove those ourselves.

Who carries out the review, and when: the operator of this website is responsible for the review and carries it out once a month, prompted by a recurring monthly reminder. At each review, any enquiry whose six months since our last meaningful contact have ended is deleted, by hand, as described above.

The form sends your details to Netlify over an encrypted (HTTPS) connection. Access to the Netlify account and to the inbox: the Netlify team that owns this website has one member, and our Google Workspace account has one active user, who operates the hello@arbflo.com inbox, with mail delegation switched off. Each of those accounts has two-step sign-in switched on individually; neither Netlify nor Google Workspace is set to require it for every user.

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you;
• have it corrected if it is wrong or incomplete;
• have it deleted;
• ask us to limit how we use it;
• object to our using it, where we rely on legitimate interests;
• in some circumstances, receive it in a format you can pass to someone else.

To use any of these rights, email hello@arbflo.com. There is normally no charge. We will reply within one month, and tell you if we need longer for a complex request, as the law allows.

If you are unhappy with how we have handled your information, please tell us first so that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

If what this website collects or how we use it changes, we will update this page and the date at the top. We will not use details you have already sent for a new purpose without telling you first.