1. Who we are
Arkionix (“we”, “us”) is a trading name of Wajid Bashir, a sole trader based in the United Kingdom, who is the data controller for this website. We operate arkionix.com and AlwaysVault (alwaysvault.com). Our contact address for privacy matters is [email protected].
2. What data we collect on this website
This website (arkionix.com) does not collect personal data beyond what is strictly necessary. Specifically:
- We use Umami, a privacy-friendly analytics tool that we host ourselves, to count page visits. It does not use cookies and does not identify you. We do not use advertising pixels.
- We do not use cookies beyond those required for site function.
- If you contact us by email or through our contact form, we receive and process your name, email address and any information you include in the message. Contact form messages are sent to our inbox by our own form handler on our web hosting in the EU; they are not stored on the website. To protect the form from abuse, we temporarily store a hash of the submitting IP address and submission times, outside the public website, for up to 10 minutes. This record is not used for marketing.
- Standard web server logs (IP address, browser, page requested, timestamp) may be retained for up to 30 days for security and diagnostic purposes only.
3. AlwaysVault data handling
AlwaysVault is designed with a zero-knowledge architecture. This means:
- Your vault contents are encrypted on your device before transmission. We do not receive, store, or have access to unencrypted vault data.
- We cannot read the contents of your vault, even if compelled to by a third party.
- Account metadata (email address, check-in schedule configuration) is stored to operate the service. This is the minimum required.
AlwaysVault’s full privacy terms are available on alwaysvault.com.
4. Legal basis for processing
Where we process personal data, we do so under the following legal bases under UK GDPR:
- Legitimate interests: responding to email and contact-form enquiries you initiate, and operating website security and diagnostics.
- Consent: where you have explicitly provided it (e.g. waitlist sign-up on AlwaysVault).
5. Data sharing & Sub-Processors
We do not sell, rent, or license your personal data to any third party. We do not share data with advertisers. We use the following third-party service providers (sub-processors) to operate this website, under strict data processing agreements.
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Hostinger | Web hosting & server logs | IP addresses, server logs | European Union |
| Cloudflare | Content delivery & security | IP address, request details | Global (US company) |
| Google Fonts | Typefaces | IP address, browser details | United States |
| cdnjs (Cloudflare) | Delivery of page code libraries | IP address, browser details | Global (US company) |
| Umami (hosted by us) | Cookie-free page visit counts | Anonymous usage data | United Kingdom |
| Our own form handler (on Hostinger) | Sends contact form messages to our inbox | Name, email, message you submit | European Union |
Legal basis: we reply to messages on the basis of our legitimate interest in answering enquiries you start. Hosting, security, fonts, code libraries and cookie-free analytics are based on our legitimate interest in running a secure, working website. Cloudflare is covered by the UK-US Data Bridge and the UK International Data Transfer Addendum; Google participates in the UK Extension to the EU-US Data Privacy Framework for the relevant personal information; Hostinger stores data in the EU, which the UK recognises as providing adequate protection.
6. Your rights under UK GDPR
Where they apply, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Receive your data in a commonly used, machine-readable format where the right to data portability applies
- Object to processing or request restriction
- Lodge a complaint with the ICO (ico.org.uk)
To exercise any of these rights, email [email protected]. We will respond within one month.
Complaints about how we use your data
If you are unhappy with how we have handled your personal data, please email [email protected]. We acknowledge receipt within 30 days, take appropriate steps to investigate without undue delay, keep you informed, and tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), but we would appreciate the chance to put things right first.
7. Data retention
Web server logs are retained for up to 30 days. Email correspondence is retained as long as reasonably necessary for the purpose it was received. We do not retain data longer than required.
8. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Material changes will be communicated where we have contact information for you.
9. Contact
For any privacy-related questions, contact us at [email protected].