Privacy Policy

1. Who We Are

Arclign Ltd ("Arclign", "we", "us", "our") is a specialist Generative Engine Optimisation agency registered in England and Wales. We are the data controller for personal data collected through our website and services.

When you visit arclign.ai, submit a form, or engage us as a client, we may collect and process personal data as described in this policy, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We collect personal data in the following ways:

Information you provide directly:

• Enquiry and contact forms: name, work email address, company name, website URL, marketing budget range, and any message you include
• Demo bookings: name, email, company, preferred meeting time
• Resource downloads: name, email, company, phone number (optional), newsletter opt-in preference
• Email communications: content of messages you send to us

Information collected automatically:

• IP address and approximate location (country/city level)
• Browser type, operating system, and device information
• Pages visited, time on site, and referring URL
• Cookie identifiers (see Section 8)

We do not collect sensitive personal data (such as health information, financial details, or political opinions) through our website.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Service delivery: to respond to enquiries, provide GEO audits, deliver agreed services, and manage client relationships
• Communications: to send you information you have requested, including reports, resources, and service updates
• Marketing (with consent): to send newsletters, GEO insights, and relevant product information to those who have opted in
• Analytics and improvement: to understand how visitors use our website and improve our content and services
• Legal and compliance: to comply with applicable laws and regulations, and to enforce our Terms of Service

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that has significant legal or similarly significant effects.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases for processing:

• Contractual necessity: processing required to fulfil a service agreement with you as a client
• Legitimate interests: responding to enquiries, improving our services, and communicating about our offerings to prospects who have expressed interest — where this does not override your rights
• Consent: sending marketing emails and newsletters to those who have explicitly opted in; setting non-essential cookies
• Legal obligation: retaining records as required by law (e.g., financial and tax records)

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

5. Data Sharing and Third Parties

We may share your personal data with:

• Supabase: our database provider, used to store form submissions securely. Supabase processes data in accordance with EU/UK GDPR standards
• Modal.com: our backend API host, used to process form submissions. Data is in transit only and not stored by Modal
• Email and calendar tools: used to manage client communications and scheduling (e.g., Google Workspace)
• Analytics providers: we may use anonymised analytics tools to understand website usage
• Professional advisers: legal, financial, or accounting advisers where necessary, under strict confidentiality obligations

All third-party processors are subject to data processing agreements and must maintain appropriate security measures. We do not share your data with AI platforms or other third parties for their own purposes.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Enquiry and form data: 24 months from the date of submission, unless an ongoing client relationship is established
• Client data: for the duration of the engagement and 6 years thereafter (for legal and financial record-keeping purposes)
• Marketing data: until you unsubscribe or withdraw consent
• Website analytics: 26 months maximum, in anonymised or aggregated form

When data is no longer required, it is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, email us at privacy@arclign.ai. We will respond within 30 days. We may need to verify your identity before processing your request.

8. Cookies and Tracking

Our website uses the following types of cookies:

• Essential cookies: required for the website to function correctly. These cannot be disabled.
• Analytics cookies: used to understand visitor behaviour in aggregate. We use anonymised analytics only. You can opt out via your browser settings.
• Marketing cookies: only set with your explicit consent, used to measure the effectiveness of our campaigns.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. We do not use third-party advertising cookies or tracking pixels by default.

9. International Transfers

Some of our third-party processors (including Supabase and Modal.com) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including:

• UK adequacy decisions where applicable
• Standard Contractual Clauses (SCCs) approved by the ICO
• Binding Corporate Rules where relevant

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. This includes:

• Encrypted data transmission (HTTPS/TLS) on all web communications
• Encrypted storage of form submissions in our database
• Role-based access controls limiting who can access personal data
• Regular review of data security practices

No method of transmission over the internet is 100% secure. If you have concerns about the security of your data, please contact us immediately at privacy@arclign.ai.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website and, where appropriate, via email to active subscribers. The "last updated" date at the top of this page reflects the most recent revision.

We encourage you to review this policy periodically to stay informed about how we protect your data.

12. Contact and Complaints

If you have any questions about this Privacy Policy or how we handle your personal data:

Arclign Ltd — Data Privacy
Email: privacy@arclign.ai
General: hello@arclign.ai

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

ico.org.uk · 0303 123 1113