Privacy policy

1. Who is responsible for your data?

The controller is ARES RESPONSE GROUP LTD (A.R.E.S), 128 City Road, London EC1V 2NX, United Kingdom, company number 17579606.

For any question about your data: [email protected].

This policy covers aresgroup.uk, our forms and our exchanges by email, WhatsApp and Signal. It complies with the UK GDPR, the Data Protection Act 2018 and, for people located in the European Union, the EU GDPR.

2. What data do we collect?

• Assignment requests: your need, location or destination, dates, number of people, perceived risk level, options requested and any free-text details; your name, telephone, email, company and role; where relevant, the decision-maker’s name, role and contact details.
• Applications: specialism, certifications, languages, availability, experience, town, country, right to work, gender (optional, used only to adapt the illustration on your profile card), contact details and CV.
• App waiting list: email and, if you provide them, telephone, country and profile.
• Messages: the content of your emails, WhatsApp or Signal messages.
• Technical data: IP address and browsing information passed to the technical services the website needs to run (hosting, fonts, map).

We do not ask for any sensitive data (health, opinions, criminal records) through the website. Please do not send us sensitive information unless we have asked for it through a secure channel.

3. Why, and on what legal basis?

• Assessing your request and sending you a proposal: steps taken at your request before a contract.
• Delivering the service, invoicing and follow-up: performance of the contract and legal obligations (accounting, tax).
• Assessing an application and checking qualifications: pre-contractual steps and our legitimate interest in building a network of qualified operatives; checks required by private security regulations where they apply.
• Telling you when the app launches and sending you our news: your consent, which you can withdraw at any time.
• Securing the website and preventing fraud or misuse: legitimate interest.

4. Who has access to your data?

Your data is never sold. It is only available to the people who need it:

• the A.R.E.S operations team and, for a given assignment, only the operatives or partners involved, all bound by confidentiality;
• our technical providers, under contract and acting on our instructions: website hosting and request database (Cloudflare), business email (Zoho Mail, European data centre), follow-up emails (Zoho ZeptoMail), WhatsApp (Meta) and Signal when you use them, Mapbox when you use the coverage map, Google Fonts;
• public authorities, where the law requires it.

5. Transfers outside the UK and the European Union

Some providers may process data outside the UK or the European Union, in particular in the United States. These transfers rely on an adequacy decision or on appropriate safeguards (standard contractual clauses, UK addendum).

6. How long do we keep it?

• Request not followed up: 3 years after the last contact.
• Client: for the duration of the relationship, then 6 years for accounting, tax and evidential purposes.
• Application: 2 years after the last contact, unless you ask us to delete it sooner or you join our network.
• Waiting list: until you unsubscribe or, at the latest, 3 years after the app launches.
• WhatsApp and Signal messages: deleted from our devices no later than 12 months after the request is closed, unless needed for a contract.

7. Automated replies

Some first messages (acknowledgement, request for details) may be automated replies, clearly identified as such. No decision with legal effects for you is taken solely by automated means: a member of the team reviews every request and every application.

8. Security

We apply appropriate measures: access limited to the people who need it, two-factor authentication on our tools, end-to-end encryption when you use Signal, carefully selected providers. As no system is infallible, we will notify you of a data breach where the law requires it.

9. Your rights

You can ask to access your data, correct it, erase it or restrict its use, object to processing based on our legitimate interest, ask for data portability and withdraw your consent at any time. Write to [email protected]: we reply within one month.

You can also complain to the supervisory authority: the Information Commissioner’s Office in the UK (ico.org.uk) or, if you live in France, the CNIL (cnil.fr).

10. Children

Our services and forms are intended for adults. Requests concerning a child are made by their legal guardian.

11. Changes

This policy may change. The date of the last update is shown at the top of this page.