Privacy Policy

A.R.C Technology ("we," "us," or "our") is an IT consulting firm operating in Nassau, New Providence, The Commonwealth of the Bahamas. We are committed to protecting the privacy and security of personal information we handle. This Privacy Policy explains how we collect, use, share, and protect information when you visit arctechnologyhq.com or engage us for services. It is prepared in accordance with the Data Protection (Privacy of Personal Information) Act, 2003 of The Bahamas (Chapter 324A) and other applicable laws.

1. Information We Collect

Information You Provide Directly

We collect personal information that you voluntarily submit when you:

• Complete our website contact or quote request form
• Email us at info@arctechnologyhq.com
• Engage us for professional IT services under a service agreement
• Communicate with us by telephone or in person

This information may include your full name, email address, telephone number, company name, job title, and any details you choose to include in your message or service brief.

Information Collected Automatically

When you visit our website, certain technical information may be collected automatically through cookies and similar technologies, subject to your consent where required:

• IP address (anonymized where possible)
• Browser type, version, and language
• Operating system and device type
• Pages visited, time spent on each page, and navigation paths
• Referring website or search terms that led you to our site
• General geographic location at the country or region level

Analytics data is only collected with your explicit consent via our cookie consent banner. See our Cookie Policy for full details.

Information From Service Engagements

When you retain our services, we may also collect professional and business information necessary to deliver those services — such as network credentials (held securely and only for the duration required), system configurations, and relevant business process details. We collect only what is necessary for the specific service engaged.

2. Legal Basis for Processing

Under the Data Protection (Privacy of Personal Information) Act, 2003, we process personal information on the following grounds:

• Consent — for analytics cookies and marketing communications, where you have given clear, informed consent
• Contract — to fulfil our obligations under a service agreement you have entered into with us
• Legitimate interests — to respond to general enquiries, improve our website, and operate our business securely, where these interests are not overridden by your rights
• Legal obligation — where we are required to process information to comply with applicable Bahamian law

3. How We Use Your Information

We use the personal information we collect to:

• Respond to enquiries, quote requests, and support requests in a timely manner
• Deliver, manage, and support the IT services you have engaged us for
• Issue invoices, process payments, and maintain financial records as required by law
• Send service-related communications such as project updates or scheduled maintenance notices
• Analyze website usage (with your consent) to improve our content and user experience
• Protect the security and integrity of our systems and services
• Comply with our legal and regulatory obligations

We do not use your personal information for unsolicited marketing, nor do we sell or rent it to any third party for commercial purposes.

4. Sharing & Disclosure

We treat your personal information with strict confidentiality. We do not sell, trade, or rent your information to third parties. We may share information only in the following limited circumstances:

Service Providers

We may engage trusted third-party providers to support our website operations and business, including:

• Hostinger — website hosting (data processed under their data processing agreements)
• Google Analytics — website analytics (anonymized usage data, only with your consent)
• Cloudflare — security and bot protection via Turnstile (no personally identifiable data stored)

All service providers are contractually required to protect your information and use it only for the purpose for which it was shared.

Legal Requirements

We may disclose personal information if required to do so by law, court order, or governmental authority, or if we reasonably believe such disclosure is necessary to protect our rights, the safety of any person, or to investigate fraud or a security breach.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and your information will remain subject to this Privacy Policy.

5. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Enquiry and contact data — retained for up to 2 years from last contact
• Client service records — retained for 7 years following the end of a service engagement, in accordance with financial record-keeping obligations under Bahamian law
• Analytics data — retained by Google Analytics for up to 14 months (our configured retention period)
• Cookie consent preferences — stored locally on your device for 1 year

When personal information is no longer required, we securely delete or anonymize it.

6. International Data Transfers

A.R.C Technology is based in Nassau, The Bahamas. Some of our service providers — including Hostinger and Google Analytics — may process data outside of The Bahamas, including in the United States and the European Economic Area.

When personal information is transferred internationally, we ensure that appropriate protections are in place, including contractual safeguards consistent with applicable data protection requirements. By submitting information through our website, you acknowledge that your information may be processed internationally in accordance with this policy.

Where we provide IT services to healthcare or other clients who operate in or serve individuals in other countries (for example, US patients whose data is processed by a Bahamian healthcare client), such data may be subject to the laws of those jurisdictions in addition to Bahamian law. We process such data in accordance with our service agreements and applicable legal requirements.

7. Cookies & Tracking Technologies

We use cookies and similar technologies on our website. Essential cookies — required for the site to function — are placed automatically. Analytics cookies (Google Analytics) are only placed after you provide explicit consent via our cookie consent banner.

For full details on each cookie, its purpose, duration, and your opt-out options, please see our Cookie Policy.

8. Data Security

We implement appropriate technical and organizational security measures proportionate to the risks involved, including:

• HTTPS (TLS) encryption for all data transmitted to and from our website
• Server-side form validation and bot protection (Cloudflare Turnstile)
• Access controls limiting who within our organization can access personal data
• Secure, access-controlled systems with regular security reviews

While we take all reasonable steps to protect your information, no internet transmission or electronic storage method is 100% secure. If we become aware of a security breach affecting your personal information, we will notify you in accordance with applicable law.

9. Your Rights

Under the Data Protection (Privacy of Personal Information) Act, 2003, and general privacy best practices, you have the right to:

• Access — request a copy of the personal information we hold about you
• Rectification — request correction of any inaccurate or incomplete information
• Erasure — request deletion of your personal information, subject to our legal retention obligations
• Restriction — request that we limit how we use your information in certain circumstances
• Objection — object to processing based on our legitimate interests
• Portability — where applicable, request a machine-readable copy of data you provided to us
• Withdraw consent — at any time, where processing is based on your consent (e.g. analytics cookies)

To exercise any of these rights, please contact us at info@arctechnologyhq.com. We will respond within 30 days and may need to verify your identity before fulfilling a request.

10. Children's Privacy

Our website and services are intended for adults and business professionals. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete it.

11. Healthcare Client Data

A.R.C Technology provides IT services to healthcare organizations. When performing services such as EHR implementation, data migration, or HIPAA compliance consulting, we may encounter patient health information (PHI) or similarly sensitive data.

In such engagements, we operate as a service provider to our healthcare clients, who remain the data controllers. We process such data strictly under written service agreements that include confidentiality obligations consistent with applicable healthcare privacy standards. We do not retain, use, or disclose healthcare client data beyond what is necessary to deliver the contracted service.

Where our healthcare clients serve patients or data subjects in other countries (for example, the United States), the data we process on our clients' behalf may be subject to the privacy laws of those jurisdictions (such as HIPAA in the US). We support our clients' compliance with such requirements in accordance with our service agreements.

12. Third-Party Links

Our website may contain links to external websites and resources for convenience and informational purposes. We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policy of any external site you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website after any changes are posted constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us:

We take all privacy concerns seriously and will respond promptly to your enquiry.