Privacy policy & terms of use

Scope

This policy applies to arcanlabs.in (the "Site"), operated by Arcan Labs ("we", "us", "our"). It explains what personal data we collect, why, how we protect it, and what rights you have. By submitting information through any form on this Site, you agree to the practices described here.

What we collect

We collect only what you provide through our forms: your name, work email address, primary contact number, designation, company name, country or region, LinkedIn profile (optional), the challenge(s) you select, and the services or products you express interest in.

If you take a product quiz, we also collect your quiz responses to personalise our follow-up.

This Site sets no cookies, deploys no advertising trackers, and runs no analytics that collect personal data. If that changes, this policy will be updated before any new collection begins.

Legal basis for processing

We process your personal data on the basis of your explicit consent, given when you check the consent box before submitting a form. You may withdraw consent at any time by contacting us (see Contact below), after which we will cease processing and delete your data within 30 days.

Purpose and use

Your data is used solely to respond to your enquiry and prepare for the working session you requested. We do not sell, rent, license, or share your personal information with third parties for marketing purposes. We do not add you to mailing lists, newsletters, or automated marketing campaigns unless you separately and explicitly opt in to one.

Sub-processors and third-party services

Form submissions are transmitted via Google Apps Script and stored in a private Google Workspace spreadsheet. The Site is hosted on Cloudflare Pages. Both providers act as data processors under their respective data processing agreements. No other third-party service receives your personal data.

Data storage and security

Submissions are stored in a private Google Sheet accessible only to authorised Arcan Labs personnel, protected by two-factor authentication and Google Workspace's enterprise-grade encryption. All data transmitted between your browser and the Site, and between the Site and Google's servers, travels over HTTPS (TLS 1.2+). We apply the principle of least privilege: only team members who need access to respond to your enquiry can see submissions.

International data transfers

Your data may be processed in jurisdictions outside your country of residence, including India (where Arcan Labs is based) and the United States (where Google and Cloudflare maintain infrastructure). These transfers rely on the providers' standard contractual clauses and data processing agreements.

Retention

We retain your personal data for as long as our business relationship is active, and for up to 24 months after our last contact, whichever is later. After that period, your data is permanently deleted. You may request earlier deletion at any time.

Your rights

You have the right to: (a) access the personal data we hold about you, (b) request correction of inaccurate data, (c) request deletion of your data, (d) withdraw consent to processing, and (e) lodge a complaint with a supervisory authority. We will respond to any such request within 30 days. All requests are free of charge.

Children's privacy

This Site is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have inadvertently collected data from a minor, we will delete it promptly.

Data breach notification

In the unlikely event of a data breach that poses a risk to your rights, we will notify affected individuals and, where required, the relevant supervisory authority within 72 hours of becoming aware of the breach.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the version number and date shown at the top. Continued use of the Site after a change constitutes acceptance of the revised policy.