Privacy policy.

Last updated: July 17, 2026

Who we are

ARC & Company ("we", "us") operates this website at arcand.co. We are the data controller for the personal information described on this page. For anything privacy related, contact us at hello@arcand.co.

What we collect and why

We keep it minimal.

• Contact form. When you send a message we collect your name, email address, and whatever you write about your business. We use it only to respond to your inquiry. Legal basis: your consent, given by ticking the box before sending.
• Booking a call. Scheduling runs on Calendly, a third party service with its own privacy policy. We receive the details you enter there (name, email, meeting time).
• Server logs. Our hosting provider keeps standard technical logs (IP address, browser type, pages requested) for security and reliability. Legal basis: legitimate interest in running a secure website.

We do not run advertising trackers, we do not use analytics cookies at this time, and we never sell or rent personal information to anyone.

Cookies

The public website sets no tracking cookies. One functional session cookie exists only for administrators logging into the content dashboard; regular visitors never receive it. Fonts and all assets are served from our own domain, so your visit is not shared with font or CDN providers.

How long we keep information

Contact messages are kept for as long as needed to handle your inquiry and any follow up, and no longer than 24 months, unless we enter a business relationship. You can ask us to delete your messages at any time.

Who we share it with

Only the service providers needed to run this site: our hosting provider (Hostinger) and, if you book a call, Calendly. Each processes data on our instructions or under their own privacy terms. We do not share personal information with advertisers or data brokers.

International transfers

We work with clients internationally, so your information may be processed outside your country, including in India and the United States. Where EU or UK data is transferred, we rely on appropriate safeguards such as standard contractual clauses used by our providers.

Your rights

Depending on where you live, you have some or all of these rights:

• EU and UK (GDPR). Access, rectification, erasure, restriction of processing, data portability, objection, and the right to withdraw consent at any time. You can also lodge a complaint with your local supervisory authority.
• California (CCPA/CPRA). The right to know what we collect, to request deletion, to correct inaccurate information, and to opt out of sale or sharing. We do not sell or share personal information as defined by the CCPA, and we do not use sensitive personal information beyond what this page describes.
• Everyone. Email hello@arcand.co and we will honor any reasonable request about your data, wherever you live. We respond within 30 days.

We do not discriminate against anyone for exercising their privacy rights, and we do not knowingly collect information from children under 16.

Security

The site runs over HTTPS, admin access is password protected with hashed credentials and rate limited logins, and stored messages are not publicly accessible.

Changes to this policy

If this policy changes, the date at the top changes with it. Material changes will be noted clearly on this page.