PRIVACY POLICY
Arcayia™ is committed to protecting the privacy and personal data of all visitors, prospective investors, and R&D partners. This policy explains what information we collect, why we collect it, and how it is processed in accordance with the UK GDPR and EU GDPR.
Data Controller
The data controller responsible for this website and all associated data processing is Arcayia (full registered company details will be added once incorporation is complete). For any data enquiries, please contact us directly via the details on this website.
What Data We Collect
We collect personal data only when it is voluntarily provided, including:
• information submitted through the Expression of Interest (EOI) form
• contact details provided through email correspondence or other enquiry channels
• basic usage data automatically collected by standard analytics tools (browser type, pages visited, time spent, etc., with no direct identifiers unless you consent)
Purpose and Legal Basis for Processing
We process personal data for the following purposes:
• assessing Expressions of Interest
• evaluating suitability for further dialogue or access to materials under NDA
• responding to enquiries and maintaining relevant communication
• improving website performance and ensuring secure functionality
Processing is based on either:
• consent (when you submit an EOI or contact form)
• legitimate interest (for essential website functionality and communication)
• legal obligation (where disclosure is required by law)
Data Sharing
We do not sell or rent personal data.
Data may be shared only with:
• third-party service providers supporting website hosting, analytics, or communication tools
• legal or regulatory bodies if required by law
These providers process data on our behalf under appropriate data-protection agreements.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined above.
• EOI submissions are retained for assessment and follow-up, then reviewed annually for relevance.
• Enquiry correspondence is retained as long as it remains necessary for ongoing communication.
You may request deletion at any time.
Data Storage and Transfers
Where data is processed or stored by third-party providers outside the UK or EEA, it is protected under appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
Your Rights
You have the right to:
• access your personal data
• request correction or deletion
• withdraw consent at any time (this does not affect the lawfulness of previous processing)
• object to processing based on legitimate interest
• request restriction of processing
• lodge a complaint with the Information Commissioner’s Office (ICO) or your local supervisory authority
Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.
Changes to This Policy
This policy may be updated periodically. Any significant changes will be reflected on this page.
Contact
For questions, access requests, or data-related enquiries, please contact us using the information provided on this website.
​