Draft. Prepared from how this website actually works. It must be reviewed by a qualified lawyer, and the marked details confirmed, before launch.
This policy explains what personal data the Arcaisys website collects, why, who receives it, how long it is kept, and the rights you have. It is written for India's Digital Personal Data Protection Act, 2023.
Who we are
This website, arcaisys.com, is operated by Arcaisys Private Limited (“Arcaisys”, “we”, “us”), G1603, Samarth Garden, Bhandup (W), Mumbai 400078, Maharashtra, India. For anything in this policy, contact us at pm.teams@arcaisys.com.
This policy covers this website only. Our products (Hospio, Meridian, PACS and RestoQR) are governed by their own agreements and policies.
What we collect, and why
- When you use the enquiry form: your name, business email, company (optional), the topic you choose and your message. We use these only to read and reply to your enquiry. You provide them voluntarily for that purpose.
- When you email, phone or message us on WhatsApp: the details you send, used only to reply.
- When you visit any page: like every website, our hosting provider receives your IP address and basic browser information in order to deliver pages and protect the service. To stop abuse of the enquiry form, we keep your IP address in server memory for up to 10 minutes.
To understand how the website is used, we use Vercel Web Analytics and Vercel Speed Insights. They count page visits and measure how fast pages load, without cookies and without identifying you; we see only aggregated figures.
If you reach us through a link carrying campaign tags (for example from one of our LinkedIn posts), those tags are added to your enquiry so we know which campaign brought you. They describe the link, not you.
We do not use cookies, advertising or cross-site tracking, and you do not need an account. If you switch to the dark theme, that choice is kept in your browser for your current visit only and is never sent to us.
We do not sell your data, and we do not add you to any mailing list.
Who receives it
- Resend, which delivers enquiry-form messages to our inbox on our behalf.
- Vercel, which runs this website and provides the analytics described above.
- Hostinger, which hosts the inbox where we read and answer your messages.
- WhatsApp (Meta), if you choose to contact us there — under WhatsApp's own privacy policy.
Each processes your data only to provide its service to us. We will disclose data to authorities only where the law requires it.
Where it is processed
Some of these providers process data outside India, including in the United States. We use them only where such transfers are permitted under Indian law.
How long we keep it
We keep enquiries and our replies for 24 months after our last correspondence with you, then delete them — unless the law requires us to keep them longer, or your enquiry leads to a business relationship, in which case the relevant agreement applies.
How we protect it
The website is served only over encrypted connections (HTTPS). Form submissions are validated and rate-limited, and access to enquiries is limited to the people who handle them. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct, complete or update it;
- erase it;
- withdraw your consent — as easily as you gave it;
- address a grievance about how we handle your data;
- and you may nominate someone to exercise these rights for you if you are unable to.
How to make a request
Email pm.teams@arcaisys.com with the subject “Data request”. We may ask you to confirm your identity so that we never disclose someone else's data. We aim to respond within 30 days.
Grievances are handled by the Arcaisys team at the email address above. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Children
This website is intended for businesses and is not directed at children. We do not knowingly collect data from anyone under 18; if you believe we have, contact us and we will delete it.
Changes to this policy
If we change how we handle personal data, we will update this policy first and change the “last updated” date above.