ARBOREUM
Back to main page
Sign up for updates
Privacy

Privacy notice

This notice explains how Arboreum Pensions Ltd collects and uses personal data through this website. Last updated 9 September 2026.

It covers only the website. Once the scheme is operating, members and participating employers will receive separate privacy information covering the scheme itself.

Who we are

Arboreum Pensions Ltd is the data controller for the information described here. We are registered in England & Wales, company number 16536067, at 3rd Floor, 7 Howick Place, London SW1P 1BB.

For anything about this notice or your personal data, contact us at enquiries@arboreumpensions.com.

What we collect, and why

When you contact us

Our contact form asks for your name, email address and message. We use them to read and reply to your enquiry, and we send you an acknowledgement confirming what you sent. Our lawful basis is legitimate interests: responding to someone who has chosen to contact us.

When you sign up for updates

Our sign-up form asks for your email address. We use it to send you occasional updates about the scheme as it moves towards launch. Our lawful basis is consent. We ask you to confirm your address by clicking a link before we add you, and every email includes an unsubscribe link. You can withdraw consent at any time, and doing so does not affect anything we did beforehand.

When you apply for a role

If you send us a speculative application we collect your name, email address, the note you write and your CV. We use them to consider you for current or future roles. Our lawful basis is legitimate interests (considering candidates who approach us) and, where you are being considered for a specific role, taking steps at your request before entering a contract.

When you simply visit

Our hosting provider records standard technical information, including your IP address, browser type and the pages you request. This is used to keep the site running and secure. Our lawful basis is legitimate interests: operating and protecting our website.

We also use Plausible to understand how the site is used: which pages are visited, roughly where visitors come from, and which sites link to us. Plausible is privacy-focused analytics: it sets no cookies, does not follow you across websites, does not build a profile of you, and stores no personal data. We see counts and trends, never individuals. Our lawful basis is legitimate interests: understanding whether our website is useful. We do not use advertising trackers of any kind.

Who we share it with

We do not sell your personal data or share it for marketing. We use the following providers, who process data on our behalf:

  • Brevo (Sendinblue SAS, France): sends the email from our forms and manages the mailing list. This includes job applications, so a CV you upload passes through Brevo on its way to us. Data is held in the EU.
  • Microsoft: our email and business systems, where enquiries and applications are read and stored.
  • 20i: our website hosting, in a UK datacentre.
  • Cloudflare: provides the anti-bot check on our forms, which processes technical information about your browser and IP address to distinguish people from automated scripts. It runs only when you use a form, not when you simply read the site.
  • Plausible Insights OÜ (Estonia): our website analytics. Data is held in the EU. Plausible uses your IP address momentarily to work out roughly where a visit came from, and does not store it.

Fonts and icons are served from our own website rather than from a third-party network, so viewing this site does not disclose your visit to anyone else.

We may also share information where we are required to by law, or with our professional advisers where necessary.

Where your data is held

Our hosting is in the UK and Brevo holds data in the EU. Some of our providers are based outside the UK, or may process data outside it. Where that happens, we rely on the safeguards those providers have in place, such as UK international data transfer agreements or adequacy regulations.

How long we keep it

  • Enquiries: 24 months after our last correspondence with you.
  • Mailing list: until you unsubscribe, or until we stop sending updates.
  • Speculative applications: 12 months from when you send them, unless you ask us to remove yours sooner.
  • Server logs: for the short period our hosting provider retains them.

Cookies

This site does not use cookies for analytics, advertising or tracking. Our analytics deliberately work without them. The anti-bot check on our contact form may set a cookie strictly necessary for it to work. Because we set no non-essential cookies, we do not show a cookie banner.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;
  • have inaccurate data corrected;
  • ask us to delete it, in some circumstances;
  • ask us to restrict how we use it, in some circumstances;
  • object to processing we carry out on the basis of legitimate interests;
  • receive data you gave us in a portable form, in some circumstances; and
  • withdraw consent at any time, where we rely on consent.

To exercise any of these, contact us at enquiries@arboreumpensions.com. We will respond within one month.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.

Changes to this notice

We will update this notice as the scheme develops. The date at the top shows when it last changed.

Directors: Adrian Boulding, Ben Fowler.Arboreum Pensions Ltd is registered in England & Wales, company number 16536067. Arboreum is preparing an application for authorisation as a collective defined contribution scheme with The Pensions Regulator. Nothing on this page is financial advice. CDC incomes are targets, not guarantees, and may be adjusted up or down. Capital at risk.

Privacy LinkedIn © 2026 Arboreum Pensions