Privacy Policy (GDPR)
Last updated: July 26, 2025
This Privacy Policy describes how arranalyticsblog ("we", "us", or "our") collects, uses, stores, and protects personal data when you access or use our website and services available at arranalyticsblog.com. We are committed to handling your personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR).
By using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms described here, please discontinue use of our services.
1. Data Controller
The data controller responsible for your personal data is:
| Detail | Information |
|---|---|
| Company name | arranalyticsblog |
| Website | arranalyticsblog.com |
| Address | 5144 Victoria Ave, Niagara Falls, ON L2E 4E3, Canada |
| help@arranalyticsblog.com | |
| Phone | +1 403 291 7700 |
For all privacy-related enquiries, including requests to exercise your rights, please contact us using the details above.
2. Personal Data We Collect
We collect personal data only to the extent necessary to provide and improve our services. The categories of personal data we may collect include:
2.1 Data You Provide Directly
- Full name and username
- Email address
- Password (stored in encrypted form)
- Profile information you choose to add
- Messages and communications you send to us
- Responses to quizzes, tests, and interactive assignments
- Feedback and survey responses
2.2 Data Collected Automatically
- IP address and approximate geographic location
- Browser type, version, and operating system
- Device type and screen resolution
- Pages visited, time spent, and navigation paths
- Referring URLs and exit pages
- Session identifiers and timestamps
- Performance and error logs
2.3 Data From Third Parties
- Authentication data if you log in via a third-party provider (such as Google or similar services)
- Aggregated analytics data from analytics providers
3. Legal Basis for Processing
We process your personal data only when we have a valid legal basis to do so. The legal bases we rely on are:
| Processing Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Performance of a contract (Article 6(1)(b) GDPR) |
| Delivering quiz and learning features | Performance of a contract (Article 6(1)(b) GDPR) |
| Sending service-related communications | Performance of a contract (Article 6(1)(b) GDPR) |
| Improving and securing our services | Legitimate interests (Article 6(1)(f) GDPR) |
| Analytics and usage monitoring | Legitimate interests (Article 6(1)(f) GDPR) |
| Sending marketing or promotional content | Consent (Article 6(1)(a) GDPR) |
| Compliance with legal obligations | Legal obligation (Article 6(1)(c) GDPR) |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may request information about this balancing assessment by contacting us.
4. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
- To register and maintain your user account
- To provide access to quizzes, tests, learning content, and gamified features
- To track and display your progress, scores, and achievements
- To personalise your experience and adapt content to your learning level
- To respond to your enquiries and provide customer support
- To send transactional emails such as account confirmations and password resets
- To send newsletters or promotional messages where you have given consent
- To detect, investigate, and prevent fraudulent or unauthorised activity
- To analyse usage patterns and improve the functionality of our platform
- To comply with applicable legal and regulatory obligations
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and improve our services. Cookies are small text files stored on your device when you visit our website.
5.1 Types of Cookies We Use
- Strictly necessary cookies: Required for the website to function. These cannot be disabled.
- Functional cookies: Remember your preferences and settings to improve your experience.
- Analytics cookies: Help us understand how visitors interact with our platform so we can improve it.
- Marketing cookies: Used to deliver relevant content and measure the effectiveness of communications, where you have consented.
5.2 Managing Cookies
You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our services. For more information on managing cookies, refer to your browser's help documentation.
6. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data. We may share your data with trusted third parties only in the following circumstances:
- Service providers: Companies that assist us in operating our platform, such as hosting providers, email delivery services, and analytics tools. These parties process data only on our behalf and under strict contractual obligations.
- Authentication providers: If you use a third-party login method, the relevant provider may share limited profile data with us in accordance with their own privacy policy.
- Legal authorities: Where required by applicable law, court order, or governmental authority, we may disclose personal data to the extent legally required.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
All third-party service providers are selected carefully and are required to implement appropriate technical and organisational measures to protect your data.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home country. When such transfers occur, we ensure that appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by relevant data protection authorities
- Adequacy decisions recognising the destination country's level of data protection
- Binding corporate rules where applicable
You may request information about the specific safeguards applied to international transfers by contacting us at help@arranalyticsblog.com.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The criteria used to determine retention periods include:
- The duration of your active account and use of our services
- Legal, regulatory, or contractual obligations requiring retention
- The resolution of any disputes or enforcement of our agreements
When your personal data is no longer required, we will securely delete or anonymise it. If you request deletion of your account, we will process this request within a reasonable timeframe, subject to any overriding legal obligations.
9. Your Rights Under GDPR
If you are located in the European Economic Area or another region with applicable data protection legislation, you have the following rights regarding your personal data:
9.1 Right of Access
You have the right to request a copy of the personal data we hold about you and information about how it is processed.
9.2 Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
9.3 Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful.
9.4 Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being verified.
9.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
9.6 Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately.
9.7 Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
9.8 Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe your personal data has been processed in violation of applicable law.
To exercise any of the above rights, please contact us at help@arranalyticsblog.com. We will respond to your request within 30 days. In complex cases, we may extend this period by a further two months and will notify you accordingly.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Encryption of data in transit using TLS (Transport Layer Security)
- Secure storage of passwords using industry-standard hashing algorithms
- Access controls limiting data access to authorised personnel only
- Regular security assessments and vulnerability testing
- Incident response procedures for detecting and responding to data breaches
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.
11. Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from individuals under this age. If you believe we have inadvertently collected data from a child, please contact us immediately at help@arranalyticsblog.com and we will take prompt steps to delete such data.
Where our services are used in an educational context involving minors, parental or guardian consent must be obtained prior to registration. The organisation or institution facilitating such use is responsible for ensuring appropriate consent is in place.
12. Automated Decision-Making and Profiling
We may use automated processing to evaluate quiz and test performance, generate progress reports, and personalise learning recommendations. These automated processes do not produce legal or similarly significant effects on you.
If we introduce any automated decision-making that does produce significant effects, we will inform you, explain the logic involved, and provide you with the right to request human review of the decision.
13. Links to Third-Party Websites
Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We are not responsible for the privacy practices or content of third-party websites and encourage you to review their privacy policies before providing any personal data.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website.
We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes have been posted constitutes your acceptance of the updated policy.
15. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:
- Email: help@arranalyticsblog.com
- Phone: +1 403 291 7700
- Postal address: 5144 Victoria Ave, Niagara Falls, ON L2E 4E3, Canada
We are committed to resolving any concerns you may have about our data handling practices in a timely and transparent manner.