Privacy & Cookie Notice
Effective 29 June 2026 · v1.0
Arlo helps veterinary teams transcribe consults, draft notes, and find trustworthy answers. Here is what we collect, why, who helps us deliver the service, and our short cookie policy, in plain English.
1. What we collect & why
| Your account | Email and sign-in credentials (to give you access and keep it secure). |
|---|---|
| Consultations | Audio you record, its transcript, and the notes Arlo drafts (to provide the scribe service). |
| Practice data | Only if you connect a practice-management system: owner and patient details, appointments, invoices (to sync your records). |
| Research | The literature you search and save (to build your reference library). |
| Uploads | Images you attach to notes or templates. |
Animal health information is not special-category personal data under UK GDPR, but pet-owner identifiers (name, contact details) are personal data and are treated accordingly.
2. How we act: controller & processor
For the practice and clinical data you enter or sync, your clinic is the controller and Arlo (Raidical Ltd) is the processor, acting on your documented instructions. For account, authentication, and service-administration data, Arlo is the controller. Lawful bases: account data, contract (Art. 6(1)(b)); clinical and practice data, processed on your clinic's instructions; usage and service logs, legitimate interests (Art. 6(1)(f)).
3. Cookies & similar storage
Our own footprint is deliberately small. Essential storage keeps you signed in and remembers your cookie choice - this needs no consent and cannot be turned off. Anything beyond that waits for your consent via the cookie banner, which groups cookies into four categories: Essential, Performance and Functionality (our demo scheduler, Calendly), Analytical (site and product analytics - Google Analytics and Amplitude), and Advertising (none today). You can review or change your choice at any time from the Cookie preferences link in the footer.
| askarlo_token | Essential · browser localStorage · keeps you securely signed in · lasts until you sign out. |
|---|---|
| askarlo_cookie_consent | Essential · browser localStorage · remembers your cookie preferences · until you clear it. |
| askarlo:learn-template | Performance and Functionality · browser sessionStorage · carries a template between pages · current tab only. |
Full detail - the four consent categories and the cookies behind each - is in our Cookie Policy.
4. Who helps us run Arlo (sub-processors)
| Anthropic (Claude) | Drafts your notes and powers chat answers (USA). |
|---|---|
| Deepgram | Turns consultation audio into text (USA; EU option). |
| OpenAI | Powers search relevance via text embeddings (USA). |
| Supabase | Securely stores your data & images. |
| Qdrant | Powers fast, meaning-based search. |
| Vercel · Railway / Render | Host and run the app. |
| Calendly | Runs the demo scheduler on our site (USA). Loaded only if you allow Performance and Functionality cookies. |
| Google Analytics | Measures site usage to improve Arlo (USA). Loads only if you allow Analytical cookies (Consent Mode). |
| Amplitude | Product analytics and Session Replay (anonymised, text masked; EU data region). Loaded only if you allow Analytical cookies. |
| OpenAlex · Europe PMC · Crossref | Find published, peer-reviewed research (search terms & DOIs only). |
| EzyVet / Provet Cloud | Connect your practice system (only if you choose). |
We never sell your data, and our AI providers do not use it to train their models. Sub-processor agreements and safeguards are confirmed before each is relied upon.
5. International transfers
Some providers are based in the USA. Where data leaves the UK/EU, it is protected by standard data-protection clauses (UK International Data Transfer Agreement / Addendum or EU Standard Contractual Clauses) and appropriate supplementary safeguards.
6. Retention & deletion
Personal data is retained for the life of the account and deleted on verified request or within 30 days of termination, including an instruction to our sub-processors to delete.
7. Your rights & choices
You can ask us to access, correct, export, restrict, or delete your data, and to object to certain processing, at any time. Requests for clinic-held data are routed to your clinic as the controller. Email privacy@askarlo.co.uk and we will respond within statutory timeframes.
8. Contact
Data protection contact: privacy@askarlo.co.uk. Arlo is provided by Raidical Ltd, a company registered in England and Wales (company number 16694183), with its registered office at 3 Wimpole Street, London, W1G 9SQ. Arlo · www.askarlo.co.uk.