Data controller
ARX Operating Group LLC, based in Plantation, Florida (United States), is the controlling entity. ARCA is its market brand. For anything related to your data: compliance@arca.industries.
What we collect
What you write in the contact form: first name, last name, company, email, country code and phone if you give them, sector, reason for the enquiry and your message.
If you request access to the private area we also hold the email of your invitation, the one-time codes we send you and a log of sign-ins — date, time and approximate origin — for security.
What we use it for
Solely to answer your enquiry and, where relevant, to continue the conversation about joining the group.
We send no unsolicited marketing and we neither sell nor transfer data to third parties.
Legal basis
Your express consent, given by ticking the box on the form, and our legitimate interest in responding to business enquiries.
How long we keep it
For as long as the conversation lasts and, afterwards, as long as legal or contractual obligations require. With no further relationship, it is deleted after twenty-four months.
Who we share it with
With the technology providers handling our email and hosting, under confidentiality agreements. Where relevant, with the group’s companies when your enquiry directly concerns them.
Your rights
You may request access, correction, deletion, restriction or objection to processing, and withdraw your consent at any time, by writing to compliance@arca.industries. We will respond within thirty days.
Security
We apply reasonable technical and organisational measures to protect the information. No system is infallible; if we detected a breach affecting you, we would tell you.
Confidentiality of your company information
What you tell us about your business is treated as confidential, shared only with those involved in the review, and used for no other purpose.
Cookies
We set no advertising cookies, no analytics cookies and no cross-site trackers. We do use four technical cookies — two from Cloudflare, two of our own — listed one by one, with what each does and how long it lasts, in the cookie policy.
Visits are counted with Umami on our own server, without cookies and without storing IP addresses. We only see aggregate figures, and they are not shared with anyone.
Cloudflare and bot protection
The contact form and the private area are protected by Cloudflare Turnstile, which replaces the usual puzzle tests. Cloudflare acts as our processor under a data processing agreement and receives the technical data of the request — IP address, browser, headers — to tell a person from a bot.
Turnstile checks the browser, not the person: it does not read your history and does not build a profile of you.
Where your data lives
ARX Operating Group LLC is based in the United States, and our email, hosting and protection providers operate servers in the United States and the European Union. If you write to us from the European Union, your data is transferred to the United States under the contractual safeguards our providers offer.
The private area
Access is nominal, personal and granted by invitation. We use your email solely to send the access code and to identify you inside; the codes expire in ten minutes and are not reused.
Everything published there is confidential and, where applicable, covered by the non-disclosure agreement signed by the recipient.
Changes
If we change this policy we will update the date above. Substantial changes will be communicated to anyone with an open conversation with us.