Privacy Policy
1. Who we are
Arcanexus (OPC) Private Limited ("Arcanexus", "we", "us") is a company incorporated in India. We run the websites arcanexus.in and worldofarcane.com (World of Arcane is Arcanexus's research and development brand). Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described in this policy.
- Legal name
- Arcanexus (OPC) Private Limited
- CIN
- U72100WR2026OPC296064
- GSTIN
- 19ABGCA4459D1ZM
- Registered office
- 1st Floor, No. 2B, 11 Upendra Nath Chatterjee Lane, Batiatala, Bally Jagachha, Howrah, West Bengal 711103, India
- Privacy contact
- Souvik Manna, Director · info@arcanexus.in (subject: "Privacy")
2. What we collect, and why
We collect only what we need to answer you and to deliver work you ask us for.
| When | What we collect | Why we use it |
|---|---|---|
| You use our contact form | The form doesn't send or store anything on our website. It opens your own email app or WhatsApp with your message filled in; we receive your name, email address, phone number (optional), organisation (optional), area of work and message only if you press send there | To reply to your enquiry, assess feasibility and send you a quote |
| You message us on WhatsApp | Your WhatsApp name, phone number, profile photo (as shown by WhatsApp), your messages and any files you send | To answer your enquiry and discuss your project |
| You email us | Your email address, name, signature details, message and attachments | To answer your enquiry and discuss your project |
| You become a client | Contact details, billing name and address, GSTIN (if any), project briefs, drawings and design files, payment records | To carry out the project, invoice you, and meet our tax and company-law record-keeping duties |
| You visit our websites | Technical data your browser sends automatically (IP address, browser type, pages requested), held briefly by our hosting provider | To keep the sites secure and working |
We do not use advertising or tracking cookies. We do not sell your personal data or use it for advertising, and we do not knowingly collect sensitive personal data. Please don't send us anything you don't need to share.
3. Your consent
We process your personal data on the basis of your consent, which you give when you send us a message, and for the purpose you contacted us about. For clients, we also process data to meet legal obligations such as keeping tax and accounting records.
You can withdraw your consent at any time by writing to the privacy contact above. Withdrawing consent doesn't affect anything we lawfully did before, and we may still keep records that the law requires us to keep.
4. Who we share it with
We share personal data only with service providers that help us run the business, and only as far as they need it:
- Website hosting: Cloudflare, Inc.
- Email: Hostinger, which hosts our mailbox
- WhatsApp Business: provided by Meta Platforms. Messages you send on WhatsApp are also handled under WhatsApp's privacy policy
- Our accountants and compliance providers: for invoicing, tax filing and statutory audit
- Couriers: your name, address and phone number, only when we ship physical parts to you
- Authorities: when the law requires it
Some of these providers may store data outside India. Where they do, we rely on transfers that the DPDP Act permits, and we choose reputable providers with appropriate security.
5. How long we keep it
| Data | How long |
|---|---|
| Enquiries that don't become a project (form, WhatsApp, email) | 24 months after our last exchange, then deleted |
| Client project files and correspondence | For the project, plus 3 years for warranty and repeat work, unless you ask us to delete them sooner |
| Invoices, payment and accounting records | As long as Indian tax and company law requires (currently up to 8 years) |
6. Your rights
Under the DPDP Act, you can:
- Ask what personal data we hold about you and how we've used it
- Correct or complete inaccurate data
- Ask us to erase data we no longer need, subject to records we must keep by law
- Withdraw consent at any time
- Nominate another person to exercise these rights if you die or become incapacitated
- Complain to us (section 8) and, if you're not satisfied, to the Data Protection Board of India
To use any of these rights, write to info@arcanexus.in. We'll reply within 30 days.
7. Security
We protect personal data with reasonable safeguards: access limited to people who need it, two-factor authentication on our accounts, encrypted connections (HTTPS) on our websites, and secure storage of project files. No system is completely secure. If a personal data breach affects you, we'll notify you and the Data Protection Board as the law requires.
8. Complaints and grievance officer
- Name
- Souvik Manna, Director
- info@arcanexus.in (subject: "Privacy")
- Post
- Arcanexus (OPC) Private Limited, 1st Floor, No. 2B, 11 Upendra Nath Chatterjee Lane, Batiatala, Bally Jagachha, Howrah, West Bengal 711103
9. Children
Our services are for businesses, researchers and adults. We don't knowingly collect personal data from anyone under 18. If you're under 18, please ask a parent or guardian to contact us for you.
10. Changes to this policy
We'll update this policy when our practices or the law change. The effective date at the top shows the latest version. If a change significantly affects how we use your data, we'll tell clients directly.