Privacy notice

London Arena PLC (“London Arena” or “the Company”) is the controller of the personal data described in this notice. The Company is a public limited company registered in England and Wales under company number 17214767, with its registered office at Unit 2 Brookmead Ind. Est., Jessops Way, Croydon, Surrey, CR0 4TS, United Kingdom. London Arena has offices in London, İstanbul and Ankara.

This notice is given under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 and, where they apply, the EU General Data Protection Regulation (EU GDPR) and Türkiye’s Law No. 6698 on the Protection of Personal Data. It covers the personal data that London Arena processes when you visit this website, when you send an enquiry through a form on the site or by email, when you correspond with any of its offices, and in any business relationship that follows.

For any question about this notice or about your personal data, email privacy@london-arena.com.

• Information you provide. When you send an enquiry through a form on this site or by email, London Arena collects the details you provide: typically your name, email address, organisation, role and country, the content of your message, and anything else you choose to include, such as a description of your project. Fields marked as required are needed for the Company to reply; all other fields are optional.
• Technical data. When you visit the site, the Company’s hosting provider processes the technical data needed to deliver pages and protect the service: your IP address, browser and device type, the pages you request and the time of each request.
• Information from other sources. Where a business relationship is under consideration, London Arena may obtain personal data about you from your organisation or from the person or organisation that introduced you; from public sources, such as company registers (for example, Companies House), official sanctions lists and published media; and, where used, from specialist due-diligence screening services. This typically comprises your name, role and company affiliations; your country of residence or nationality, where relevant to sanctions screening; your sanctions and politically-exposed-person status; and adverse media.

London Arena does not use cookies, analytics, advertising or any other tracking technology, and does not build profiles of visitors.

The Company does not ask for special category data (for example, information about health, religion or political opinions) or for information about criminal convictions; please do not include it in a message. Due-diligence and sanctions checks may nevertheless reveal information about criminal allegations or convictions, or about a person’s status as a politically exposed person. London Arena processes such information only where the Data Protection Act 2018 permits it — for example, to prevent or detect unlawful acts or to meet regulatory requirements — and limits access to it to those who need it.

This website is intended for business and professional audiences and is not directed at children.

• To reply to your enquiry, including sending you information you ask for, such as the Company’s capability statement — London Arena’s legitimate interests in handling business enquiries, or steps you ask the Company to take before entering into a contract.
• To manage a business relationship that follows from an enquiry, as an investor, partner, supplier or client — performance of a contract with you, or the Company’s legitimate interests in managing the relationship.
• To carry out due-diligence, identity and sanctions checks before and during a business relationship — compliance with the Company’s legal obligations, including sanctions law, and its legitimate interests in preventing fraud and financial crime.
• To operate and secure the website, including detecting and preventing misuse — the Company’s legitimate interests.
• To meet legal and regulatory obligations, and to establish, exercise or defend legal claims — legal obligation and the Company’s legitimate interests.

Where London Arena relies on legitimate interests, it has balanced them against your interests and rights and concluded that they are not overridden. You can ask for details of that assessment.

Providing personal data through the website is voluntary. Where information is needed for due-diligence and sanctions checks, or to enter into a contract, providing it is required; if it is not provided, London Arena may be unable to enter into or continue the relationship.

The Company does not use your personal data for marketing, and does not make decisions about you based solely on automated processing, including profiling.

London Arena shares personal data only with the people and organisations that help it run this website and its business, and only as far as they need it to do so:

• London Arena personnel in its London, İstanbul and Ankara offices, on a need-to-know basis.
• Service providers, acting as the Company’s processors: its website hosting provider (Vercel Inc.), its business email provider (Microsoft 365) and the delivery service that passes website form submissions to it. Each is bound by a written contract to process personal data only on the Company’s instructions and to keep it secure.
• Specialist screening services, where the Company uses them for due-diligence and sanctions checks, under contract.
• Professional advisers, such as lawyers, auditors and insurers, under a duty of confidentiality.
• Public authorities, such as courts, regulators or law enforcement, where the law requires it.
• A buyer or successor, if all or part of the Company’s business is sold or reorganised; the personal data would remain protected as described in this notice.

London Arena does not sell or rent personal data, and does not pass your details to prospective partners or investors without your agreement.

The Company’s hosting and email providers may process personal data in the United States and in other countries outside the United Kingdom. Where they do, the transfer is protected either by UK adequacy regulations — including the UK Extension to the EU–US Data Privacy Framework, for providers certified under it — or by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Personal data may also be accessed from London Arena’s offices in Türkiye. Any such transfer is protected by a safeguard recognised by UK data protection law, such as the UK International Data Transfer Agreement.

You can ask for a copy of the safeguards that apply.

• Enquiries that do not lead to a business relationship: 24 months from the last contact with you, after which they are deleted.
• Business relationship records: for the duration of the relationship and six years after it ends — the period within which legal claims may be brought and accounting records must be kept.
• Due-diligence and sanctions-check records: five years after the relationship ends, or longer where the law requires.
• Technical logs: kept by the Company’s hosting provider for a short period for security and fault-finding, and not used to identify individual visitors.

This site is served only over encrypted connections (HTTPS, enforced by HSTS) and loads nothing from third-party servers: its fonts, images and code are all served from the Company’s own domain. Within London Arena, access to personal data is limited to the people who need it, and the Company’s service providers are contractually bound to keep it secure.

Under the UK GDPR you have the right to:

• access the personal data London Arena holds about you and receive a copy of it;
• have inaccurate or incomplete personal data corrected;
• have your personal data erased;
• restrict how your personal data is used;
• object to processing based on the Company’s legitimate interests;
• receive personal data you provided to the Company in a portable format, where it is processed on the basis of a contract or consent;
• withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, email privacy@london-arena.com. London Arena may need to confirm your identity first. The Company will respond within one month; if a request is complex, it may extend this period by up to two further months and will tell you why. There is normally no charge.

If you are unhappy with the way London Arena has used your personal data, you may complain to the Company by email to privacy@london-arena.com or by post to its registered office at Unit 2 Brookmead Ind. Est., Jessops Way, Croydon, Surrey, CR0 4TS, United Kingdom. London Arena acknowledges a complaint within 30 days of receiving it, looks into it without undue delay, keeps you informed of its progress and tells you the outcome.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. If you live in the European Economic Area, you may also contact the data protection authority in your country.

Where Law No. 6698 on the Protection of Personal Data (KVKK) applies to London Arena’s processing, you also have the following rights under Article 11 of that Law:

• to learn whether your personal data is processed;
• to request information about the processing, if it is;
• to learn the purpose of the processing and whether your personal data is used in accordance with that purpose;
• to know the third parties, in Türkiye or abroad, to whom your personal data is transferred;
• to request the rectification of incomplete or inaccurate personal data;
• to request the erasure or destruction of your personal data under the conditions set out in Article 7 of the Law;
• to request that any rectification, erasure or destruction be notified to the third parties to whom your personal data has been transferred;
• to object to a result against you that arises solely from the analysis of your personal data by automated systems;
• to claim compensation for damage arising from the unlawful processing of your personal data.

Applications should be made in writing to privacy@london-arena.com. London Arena concludes an application as soon as possible and within thirty days at the latest, free of charge, unless the action involves an additional cost, in which case a fee may be charged under the tariff set by the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

If your application is refused, if the response is insufficient or if no reply is given in time, you may complain to the Personal Data Protection Board within the periods set by Article 14 of the Law.

London Arena updates this notice whenever its processing of personal data changes. The date at the top shows when it was last revised; if a change is significant, this page will say so.