Privacy Policy.

This page is maintained by Arka FZE ("Arka", "we", "us") to explain what personal data we collect through this website, why we collect it, how long we keep it, and the rights you have over it.

1. Who we are

Arka FZE is a technology and cyber security consulting company registered in the United Arab Emirates. For any privacy-related request, write to info@arka.plus.

2. What we collect

We only collect what you actively send us:

• Contact form / email enquiries. Name, business email address, company (optional), and the contents of the message you submit.
• Connection metadata. Standard server/CDN log data (IP address, user agent, timestamp) retained briefly for security and abuse prevention.

We do not knowingly collect special category data, payment data, or data from children. We do not run advertising trackers.

3. Why we use it (lawful basis)

• To respond to your enquiry — legitimate interest (GDPR Art. 6(1)(f)) / consent (PDPL Art. 5) when you initiate contact.
• To operate and secure the site — legitimate interest in preventing abuse and keeping the service available.
• To comply with law — where we are required to retain or disclose information.

We do not sell your data and we do not use it for automated decision making or profiling.

4. How long we keep it

Enquiry correspondence is kept for as long as needed to serve you and, where applicable, for a reasonable follow-up period (typically up to 24 months from last contact), after which it is deleted or anonymised. Server logs are rotated on a short cycle.

5. Who can see it

Access is limited to Arka personnel who need it to respond to you. We share data with infrastructure providers acting as processors on our behalf — currently our website hosting / CDN provider and email provider. These providers are bound by their own confidentiality and security commitments. We do not transfer your data to third parties for marketing.

6. International transfers

Arka operates from the UAE and our processors may host data inside and outside the EEA/UK and the GCC. Where personal data of EEA or UK residents is transferred outside those regions, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision where available.

7. Your rights

Subject to applicable law, you have the right to access, rectify, delete, restrict or object to the processing of your personal data, to withdraw consent, and to data portability. EU/UK residents have the right to lodge a complaint with their supervisory authority. UAE residents may contact the UAE Data Office.

To exercise any right, email info@arka.plus. We respond within 30 days.

8. Security

Traffic to arka.plus is encrypted in transit with TLS. We apply access controls, logging and least-privilege practices consistent with our SOC 2 Type II program. No system is perfectly secure; please don't send confidential material through a public contact form.

9. Cookies

See our Cookie Notice for what is set and how to control it.

10. Changes

We may update this policy as our practices evolve. Material changes will be reflected in the "Last updated" date above.

11. Contact

Arka FZE — info@arka.plus