Privacy Policy

Last updated: 15/06/2025

At Arc Dev Pty Ltd ("Arc Dev", "we", "us", or "our"), we believe that privacy is not just a checkbox — it’s a right. This Privacy Policy outlines how we handle your personal information, in full compliance with:

  • South Africa’s Protection of Personal Information Act (POPIA)
  • EU General Data Protection Regulation (GDPR) (where applicable)

By using our services, you consent to this policy.

1. What We Collect

a. Information You Provide

  • Name, surname, email address
  • Company details (if business account)
  • Account credentials (hashed passwords)
  • Support messages or form submissions

Note: We do not collect or store your card or banking details. Payments are processed via trusted third-party gateways like Payfast or Stripe.

b. Automatically Collected

  • IP address and browser info
  • Cookies and device fingerprinting
  • Usage patterns (analytics)

c. Sensitive Information

Only collected with explicit consent, and only when necessary for platform functionality or compliance.

2. Why We Use It

We process your information to:

  • Provide and secure our services
  • Create and manage your account
  • Respond to queries and support requests
  • Comply with legal and billing requirements
  • Improve user experience through analytics

We never sell your data. Full stop.

3. Legal Grounds for Processing

We rely on the following legal bases:

  • Your consent (e.g., marketing opt-ins)
  • Contractual necessity (e.g., to provide services)
  • Legal obligation (e.g., tax or audit requirements)
  • Our legitimate interest (e.g., fraud prevention, usage analytics)

4. Cookies

We use cookies to:

  • Keep your session active
  • Understand how people use our services
  • Improve performance and UX

You can manage cookies in your browser settings. If you’re in the EU/EEA, we request explicit cookie consent before placing non-essential cookies.

5. Sharing Your Data

We only share your data with:

  • Hosting and infrastructure partners
  • Payment providers (e.g., Payfast, Stripe)
  • Legal or regulatory bodies (if compelled by law)
  • Employees or consultants (under NDA)

All third parties are bound by strict confidentiality and data processing agreements.

6. International Data Transfers

Some data may be stored or processed outside your country. When this happens:

  • We apply Standard Contractual Clauses (SCCs) for GDPR compliance
  • We ensure your rights are enforceable regardless of location

7. Data Retention

We retain data:

  • While your account is active
  • We do not retain your data after account deletion if your account is in good standing.
  • If required by law or for legal defense, we may retain minimal records strictly as required.

You may request deletion at any time (see Section 10).

8. Your Privacy Rights

You may:

  • Access your personal data
  • Request corrections or updates
  • Object to certain types of processing
  • Withdraw consent where previously given
  • Request deletion of your data
  • File a complaint with a regulator

To exercise these rights, email: support@arcdev.co.za
Subject line: “Privacy Request – Arc Dev Pty Ltd”
We respond within 7 business days.

9. Security

We implement safeguards such as:

  • Encrypted communications (SSL/TLS)
  • Access control and permissions
  • Password hashing and session protection
  • Regular audits and security monitoring

No system is flawless — but we treat your data like we treat our own.

10. Data Access & Deletion Requests

To request access to or deletion of your data:

  • Email us at support@arcdev.co.za
  • Include enough info to verify your identity
  • We'll respond in accordance with POPIA or GDPR (usually within 7–30 days)

11. POPIA Information Officer

In line with Section 55 of POPIA, our appointed Information Officer is:

  • Name: M.L. Traut
  • Role: Information Officer, Arc Dev Pty Ltd
  • Email: support@arcdev.co.za
  • Phone: +27695408363

They oversee compliance, respond to privacy requests, and interface with the Information Regulator of South Africa.

12. GDPR Rights for EU/EEA Users

If you are based in the European Union or EEA, you have additional rights under the GDPR, including:

  • The right to be informed about how your data is used
  • The right to access, correct, or delete your data
  • The right to object to or restrict processing
  • The right to data portability (receive your data in a structured format)
  • The right to withdraw consent at any time
  • The right not to be subject to fully automated decisions

To exercise these rights, contact support@arcdev.co.za. We will respond within 30 days.

13. Policy Updates

We may revise this policy from time to time. If there are material changes, we will notify you via our platform or email. Continued use implies acceptance of the updated terms.

14. Contact Us

Have questions or concerns?

Arc Dev Pty Ltd
Email: support@arcdev.co.za
Phone: +27695408363

By using our services, you agree to this Privacy Policy and give us permission to handle your personal data as described.