Privacy Policy

1. Introduction

ArcNova Innovations ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, in compliance with the General Data Protection Regulation (GDPR), ePrivacy Directive, and applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

• Company: ArcNova Innovations
• Email: info@arcnovain.com
• Address: ArcNova Innovations, Opposite Kachary Chowk near Gym Khana, Jhang

For data protection inquiries, contact us at: info@arcnovain.com

3. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

• Contractual necessity (Art. 6(1)(b)): To provide our services, process orders, and manage your account
• Consent (Art. 6(1)(a)): For marketing communications, non-essential cookies, and affiliate tracking
• Legitimate interest (Art. 6(1)(f)): For fraud prevention, security monitoring, and service improvement
• Legal obligation (Art. 6(1)(c)): To comply with tax, accounting, and regulatory requirements

4. Information We Collect

Personal Information (provided by you):

• Full name and company name
• Email address and phone number
• Billing address
• Payment information (processed securely by third-party payment processors — we do not store card details)
• Account credentials (passwords stored using bcrypt hashing)
• Support ticket content and file attachments

Automatically Collected Information:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referral source (including affiliate referral codes)

5. How We Use Your Information

• To provide, maintain, and improve our services
• To process transactions and send billing information
• To communicate with you about your account and services
• To send important updates, security alerts, and support messages
• To track affiliate referrals (only with your cookie consent)
• To comply with legal obligations

6. Cookies and Tracking

We use the following types of cookies:

Cookie	Type	Purpose	Duration
PHPSESSID	Essential	Session management	Session
af_ref	Marketing	Affiliate referral tracking	30 days
cookie_consent	Essential	Remember your cookie preference	Persistent

Non-essential cookies (marketing/analytics) are only set after you provide explicit consent via our cookie banner. You can withdraw consent at any time by clearing your browser cookies or clicking "Essential Only" on the cookie banner.

7. Data Sharing

We do NOT sell, trade, or rent your personal information. We may share your data only with:

• Payment processors — to complete transactions securely
• Hosting providers — our servers are hosted by Namecheap (US-based infrastructure)
• Law enforcement — if required by law or valid legal process

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including:

• United States — where our hosting infrastructure is located (Namecheap servers)
• Pakistan — where our company is based and operations are managed

For transfers from the EU/EEA, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission to ensure adequate protection of your data. By using our services, you acknowledge this transfer.

9. Data Security

We implement appropriate technical and organizational measures including:

• SSL/TLS encryption for all data transmission
• Encrypted password storage (bcrypt hashing)
• CSRF protection on all forms
• Regular security updates and monitoring
• Isolated database per client (for SaaS deployments)
• File upload type validation and size restrictions

10. Data Retention

• Account data: Retained while your account is active, deleted within 30 days of account deletion request
• Order/transaction data: Retained for 7 years (legal/tax obligation)
• Support tickets: Retained for 2 years after resolution, then anonymized
• Chat messages: Retained for 1 year, then automatically purged
• Server logs: Retained for 90 days

11. Your Rights (GDPR Articles 15-22)

If you are in the EU/EEA, you have the following rights:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate data
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing (Art. 18): Limit how we use your data
• Right to Data Portability (Art. 20): Receive your data in a machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interest
• Right to Withdraw Consent (Art. 7): Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at info@arcnovain.com. We will respond within 30 days. You may also delete your account directly from your Customer Dashboard.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach
• Notify affected individuals without undue delay if the breach is likely to result in a high risk
• Document all breaches, including their effects and remedial actions taken

13. Children's Privacy

Our services are business-oriented and open to all audiences. We do not knowingly collect personal information from children under 16 without parental consent. If we become aware that we have collected data from a child under 16 without appropriate consent, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will send an email notification to registered users.

15. Supervisory Authority

If you are in the EU/EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local Data Protection Authority (DPA).

16. Contact Us

For any questions about this Privacy Policy or to exercise your data rights:

• Email: info@arcnovain.com
• Phone: 03-111-153-553
• Address: ArcNova Innovations, Opposite Kachary Chowk near Gym Khana, Jhang