Privacy Policy

1. Who We Are

ARC AI ("we", "us", "our") is a digital agency registered in Sri Lanka (Registration Number: PV00352581) with operations in the United Kingdom and Sri Lanka. We provide web design, AI automation, branding, and digital marketing services.

Data Controller: ARC AI
Email: support@arcai.agency

2. Information We Collect

We may collect the following types of personal data:

• Contact information: name, phone number, email address, company name
• Usage data: pages visited, time on site, browser type, IP address (anonymised)
• Communication data: messages submitted via our contact form or AI chat widget
• Analytics data: collected via Google Analytics (GA4) for website improvement purposes

3. How We Use Your Information

We use your personal data to:

• Respond to enquiries submitted through our contact form
• Provide quotes, proposals, and service information
• Improve our website, services, and user experience
• Send relevant updates if you have subscribed to our newsletter
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Consent: when you submit a contact form or subscribe to our newsletter
• Legitimate interest: to improve our services and website performance
• Contractual necessity: to fulfil service agreements with clients

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Supabase (database), Google Analytics (analytics), Resend (email delivery), Make.com (workflow automation)
• Legal authorities: if required by law or to protect our rights

All third-party providers are contractually required to protect your data.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy. Contact form submissions are retained for up to 24 months. Analytics data is retained according to Google Analytics default settings.

7. Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Data portability — receive your data in a structured format
• Withdraw consent at any time

To exercise any of these rights, contact us at support@arcai.agency.

8. Cookies

Our website uses essential cookies for functionality and analytics cookies (Google Analytics) to understand how visitors interact with our site. You can control cookie preferences through your browser settings.

9. International Data Transfers

As we operate in both the UK and Sri Lanka, your data may be transferred between these jurisdictions. We ensure appropriate safeguards are in place for all international transfers in compliance with GDPR requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: support@arcai.agency
Phone (UK): +44 7466 368427
Phone (Sri Lanka): +94 771852522