The short version
- We don’t require an account and we don’t sell your personal data — ever.
- Non-essential cookies (analytics and advertising) only run if you consent via our cookie banner. You can change your mind any time.
- If you email us or use the contact form, we use your details only to reply.
Who we are
AviosArcana (“we”, “us”, “our”) is an independent UK publication about the British Airways Executive Club and the Avios programme, published at aviosarcana.com. For the purposes of UK data protection law we are the data controller for the personal data described in this policy. You can reach us at [email protected].
What data we collect
We deliberately collect as little as possible:
- Contact details you give us. If you use our contact form or email us, we receive your name, email address and the content of your message.
- Usage and device data. If you consent to analytics, we collect anonymised information such as pages visited, approximate location (country/region), device and browser type, and how you found us.
- Advertising data. If you consent to advertising cookies, our advertising partners may collect data to show and measure ads (see below).
- Your cookie choice. We store your consent preference in your browser so we don’t keep asking.
Why we’re allowed to use your data
Our legal bases under UK GDPR are:
- Consent — for analytics and advertising cookies. You can withdraw it any time.
- Legitimate interests — to respond to your enquiries and to keep the site secure and working.
Who we share data with
We don’t sell your personal data. We use a small number of trusted providers who process data on our behalf:
- Google — for analytics (Google Analytics) and, where enabled, advertising (Google AdSense). Google’s use of data is governed by its own privacy policy. You can control ad personalisation at adssettings.google.com.
- Our hosting and email provider — to serve the website and deliver messages you send us through the contact form.
- Affiliate networks — if you click an affiliate link, the network may set a cookie to attribute a referral. See our Affiliate Disclosure.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data (where we have no overriding reason to keep it).
- Object to, or ask us to restrict, certain processing.
- Withdraw consent for cookies at any time.
To exercise any of these, email [email protected]. You also have the right to complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk.
How long we keep data
We keep contact messages only as long as needed to deal with your enquiry and any follow-up, then delete them. Analytics data is retained according to Google Analytics’ standard retention settings. Your cookie preference stays in your browser until it expires or you clear it.
Changes to this policy
We may update this policy as the site evolves — for example when we add advertising. We’ll always change the “last updated” date at the top, and for significant changes we’ll make it clear on the site.
Contact us
Any questions about privacy or this policy? Email [email protected] or use our contact form.