1) Who we are (Site Owner & Data Controller)

Arckipel OÜ ("we", "us", the Site Owner) operates this website and acts as the data controller for all personal data processed via the site (browsing, contact/enquiry forms, installer/partner enquiries). Email: privacy@arckipel.com

2) What this policy covers

This policy explains how we process personal data only in connection with this website (browsing, contact/enquiry forms, partner enquiries). Contracts, installation/service work and partner accreditation are covered by separate terms provided off-site.

3) What data we collect and why

• Enquiries / contact forms (incl. project or partner interest): name, email, phone, message; optionally property/project details (e.g., pipe size, photos) - to respond to your enquiry, prepare information/quotation.
• Installer/partner enquiry form: business name, contact details, role, basic capability info - to assess suitability and respond.
• Website logs & security: IP address, timestamp, URL, user-agent (standard server logs) - to operate the site, prevent abuse, ensure security.
• Cookies & analytics (optional): Non-essential cookies/analytics run only with your consent via the banner. Details appear in our Cookie Policy and Cookie Settings (links in banner/footer).
• Marketing (optional): If you sign up for updates, we process your email - to send you communications.

4) How long we keep data (retention)

Enquiry/quote records: up to 24 months after last contact. Installer/partner enquiries: up to 24 months after decision or last contact. Server logs: up to 12 months (security/diagnostics). Marketing emails: until you unsubscribe or withdraw consent. We delete or anonymise data once the retention period ends.

5) Who receives the data (recipients/processors)

We use a small set of trusted providers to operate this website and handle enquiries. Where a third party acts on our behalf, we have a data-processing agreement in place (GDPR Art. 28).

• Hosting & infrastructure: Hosting & infrastructure: Cloudflare, Inc. (content delivery network, DNS, DDoS protection, edge caching) and/or OVHcloud (OVH SAS) (web hosting/VPS). These providers process technical logs (IP address, user agent, timestamps) to keep the site secure and available.
• Web/CMS & email delivery: Web/CMS & email delivery (our own stack): Our website/CMS and outbound email are operated by Arckipel OÜ on our own infrastructure (hosted on Cloudflare/OVHcloud as above). We do not use a separate third-party email SaaS for website enquiries.
• CRM/helpdesk: CRM/helpdesk (our own system): Our internal CRM/helpdesk used to manage enquiries and follow-ups is equally owned and operated by Arckipel OÜ; only authorised staff can access it.
• Analytics: Analytics (only if you consent): Google Analytics (Google Ireland Limited) — used if you opt in via the cookie banner; IP anonymisation is enabled and data retention is limited (see Cookie Policy). Matomo (self-hosted by us) — may be used with your consent; data stays on our infrastructure.

We share data with installers/logistics only if needed to handle your request (e.g., to confirm availability or lead times) and only after you ask us to proceed.

6) International transfers

Some providers are headquartered outside the EEA (e.g., Cloudflare, Inc., Google LLC). Where personal data is transferred internationally, we rely on the EU Standard Contractual Clauses (SCCs) and apply supplementary measures where required. You can request details at privacy@arckipel.com.

7) Your rights (GDPR)

You have the right to access, rectify, erase, restrict processing, object to processing (incl. direct marketing), and port your data, and the right to withdraw consent at any time (without affecting past processing). To exercise rights, contact privacy@arckipel.com. We aim to respond within one month.

8) Complaints (supervisory authority)

9) Security

We apply appropriate technical and organisational measures (encrypted transport, access controls, backups, least-privilege). No method is 100% secure, but we continuously review and improve.

10) Children

This website is not directed to children under 16. We do not knowingly collect their data.

11) Links to other sites

Our site may include links to third-party sites/apps (e.g., app stores). Their privacy practices are their own; please review their policies.

12) Cookies

Essential cookies are used to run the site. Non-essential cookies/analytics operate only with your consent. Manage choices anytime in Cookie Settings (banner/footer). See our Cookie Policy for details on tools, purposes, and lifetimes.

13) Changes to this notice

We may update this Privacy Policy from time to time. The latest version will always be posted here with a new "Last updated" date.