Privacy policy.

Arrowbin LLC ("Arrowbin", "we", "us") runs arrowbin.com and is responsible for the personal information collected through it. This policy covers the website and the enquiries you send us through it. Work we do for clients is also covered by the agreement for that project.

Information you give us when you fill in a form or contact us:

• Project brief (contact page): your name, email address, and, if you add them, your company or website, the services you need, a rough budget, a timeline and your project details.
• Quote form (service pages): your name, email address, your project details and the service you were viewing.
• Anything you send us by email or phone, or share when you book a call.

Information collected automatically when you visit:

• Usage data through Google Analytics: pages viewed, how you arrived, approximate location (city or country), and device, browser and screen type.
• How you use our pages, through Microsoft Clarity: clicks, taps, scrolling and mouse movement, shown to us as heatmaps and session replays so we can see where the site is hard to use. Anything you type into a form is masked and never sent to Clarity.
• Technical data handled by Cloudflare, which delivers and protects the site: your IP address, browser details and the pages requested, used for security, performance and anonymous visit counts.
• Your IP address, kept briefly in memory to limit repeated form submissions and stop spam. It is not stored with your enquiry.

We don't take payments on this website, and we don't ask for sensitive information such as health or financial details. Please don't include it in a form.

• To reply to your enquiry, answer your questions and prepare a proposal.
• To deliver and support the work you engage us for.
• To understand how the website is used, so we can improve it.
• To keep the website secure and protect it from spam and abuse.
• To meet our legal, tax and accounting obligations.

We never sell or rent your personal information, and we don't use it for automated decisions about you.

Where laws such as the GDPR or UK GDPR apply, we rely on:

• Taking steps you ask for before a contract, and performing that contract, when you send an enquiry or become a client.
• Our legitimate interests in running, securing and improving the website and our business, balanced against your rights.
• Your consent where the law requires it, for example for analytics cookies in some countries. You can withdraw consent at any time.
• Legal obligations, for example keeping business records.

We share information only with the providers that help us run the website and reply to you, and only what they need:

• Resend

  What it does for us

  Delivers form submissions to our inbox

  Data involved

  Everything you enter in a form

• Google Analytics (Google)

  What it does for us

  Measures how the website is used

  Data involved

  Usage and device data, via cookies

• Microsoft Clarity (Microsoft)

  What it does for us

  Shows how pages are used, as heatmaps and session replays

  Data involved

  Usage and device data, via cookies

• Cloudflare

  What it does for us

  Delivers and secures the website, and counts visits

  Data involved

  IP address and request data

• Cal.com

  What it does for us

  Books calls, if you use our booking link

  Data involved

  What you enter when booking, under Cal.com's own policy

We also use a business email provider to receive and reply to messages. We may disclose information if the law requires it, or to protect our rights, and to a successor if our business is ever sold or merged.

The website itself doesn't set cookies. It only remembers your cookie choice in your browser's storage, if you make one. Google Analytics sets cookies (named _ga and _ga_*) to tell visits apart; they last up to two years. Microsoft Clarity sets cookies (named _clck and _clsk) to link the pages you view into one visit; they last up to a year, and Microsoft may set its own cookies, such as MUID, on its domains. Cloudflare may set a short-lived security cookie to filter out bots, and its visit counting doesn't use cookies.

If you visit from the EU, the EEA, the UK or Switzerland, we ask first. Until you accept, Google Analytics and Microsoft Clarity run without cookies and only count visits anonymously. Anyone can change their choice at any time with Cookie settings at the bottom of every page.

You can block or delete cookies in your browser settings, or opt out of Google Analytics with Google's opt-out browser add-on. The website works fully without them.

• Enquiries: for as long as we need them to reply and follow up, then deleted, unless they turn into a project.
• Client information: for the length of the engagement, then as long as our agreement and legal obligations require.
• Analytics data: for a limited period set in Google Analytics, no longer than 14 months.
• Microsoft Clarity data: session replays for 30 days, and heatmaps and other usage data for up to 13 months.

We work with clients around the world, and our providers may process data in the United States and other countries. Where the law requires it, these transfers are covered by safeguards such as the European Commission's standard contractual clauses.

The website is served only over encrypted HTTPS connections with strict security headers, and access to enquiries is limited to the people who need it to reply. No system is completely secure, but we take reasonable technical and organisational steps to protect your information.

Depending on where you live, you can ask us to:

• Give you a copy of the personal information we hold about you.
• Correct it if it's wrong, or delete it.
• Limit how we use it, or object to our use of it.
• Send it to you, or to another organisation, in a portable format.
• Withdraw any consent you've given.

Email hello@arrowbin.com and we'll respond within one month. You also have the right to complain to your local data protection authority.

This website is for businesses and isn't aimed at children under 16. We don't knowingly collect their information; if you think we have, contact us and we'll delete it.

We'll update this page when our practices change and show the new date at the top. This version was last updated on 17 October 2026.