Aarbi Back to site

Privacy Notice

Version 1.0 · Last updated 2 August 2026

This notice explains what personal data Aarbi collects, why we collect it, how long we keep it, who else handles it, and the rights you have over it. It is provided under Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679.

In short. We set no cookies and nothing on this site loads from a third party, so there is no tracking to consent to and no cookie banner to click.

The only personal data we ask you for is an email address, and only if you choose to give it so we can tell you when Aarbi launches. You can have it deleted at any time by emailing hello@aarbi.ie.

1. Who is responsible for your data

Aarbi is the data controller for the personal data described in this notice — meaning we decide why and how it is processed.

We have not appointed a Data Protection Officer. We are not required to under Article 37: we are not a public authority, and we do not carry out large-scale monitoring or large-scale processing of special category data.

2. What we collect, why, and for how long

We only process the three things below. We do not buy personal data, and we do not combine what we hold with data from other sources.

What Why Legal basis How long
Your email address To tell you when Aarbi launches. Nothing else — we do not use it for other marketing, and we do not sell or rent it. Consent — Article 6(1)(a). Given when you submit the form, withdrawable at any time. Until 30 days after launch, or until you unsubscribe or ask us to delete it — whichever comes first.
Anonymous usage statistics To know whether anyone is finding the site. Your IP address and browser type are processed briefly to work out whether a visit is new, then discarded. They are not stored and we never see them. Legitimate interests — Article 6(1)(f). Our interest is knowing whether the site works and is being found. The impact on you is minimal: nothing is stored on your device and you are not identified or tracked across other sites. Aggregate counts only, retained for up to 12 months. No individual-level records are created.
Server logs To keep the site running, diagnose faults, and block abuse. Includes IP address, time of request, and page requested. Legitimate interests — Article 6(1)(f). Our interest is the security and availability of the service. This is standard for any website. Up to 30 days, then deleted automatically.

Giving us your email address is entirely voluntary. It is not a statutory or contractual requirement, and nothing on this site is withheld if you choose not to.

3. Cookies and similar technologies

We use none. This site stores nothing on your device — no cookies, no local storage, no session storage, no tracking pixels or fingerprinting. Our analytics provider is cookieless by design.

Because nothing is stored on or read from your device, the consent requirement in Regulation 5 of the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 (S.I. 336/2011) does not arise. That is why you are not asked to accept cookies here.

4. Who else handles your data

We keep this list as short as we can. Each of these acts as a processor on our documented instructions under a data processing agreement meeting Article 28.

We do not disclose your personal data to anyone else, except where we are required to by law or where it is necessary to establish, exercise or defend a legal claim.

5. Transfers outside the EEA

MailerLite processes your email address within the European Union, so no transfer arises.

Vercel is established in the United States, so hosting and analytics involve a transfer outside the EEA. That transfer is made under the safeguards in Article 46 — the European Commission's Standard Contractual Clauses, incorporated into Vercel's data processing agreement, together with its certification under the EU–US Data Privacy Framework. You can request a copy of the relevant safeguards by emailing us.

6. Your rights

Under the GDPR you have the right to:

To exercise any of these, email hello@aarbi.ie. There is no charge, and we will respond within one month as required by Article 12(3). If a request is complex we may extend that by up to two further months, and we will tell you within the first month if we do.

In practice the only thing we are likely to hold about you is an email address, and we will delete it on request without asking why. Every email we send also contains a one-click unsubscribe link.

7. Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to lodge a complaint with the Irish supervisory authority at any time:

8. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you, within the meaning of Article 22.

9. Changes to this notice

Aarbi is in development, so this notice will change as the product does — particularly once there are user accounts and a live application handling customer documents. We will update the version number and date above whenever it does. If a change materially affects how we use data you have already given us, we will contact you directly before it takes effect.

10. Contact

Aarbi, Ireland — hello@aarbi.ie