Effective Date: August 1st 2025
Last Updated: August 1st 2025
This Privacy Policy (“Policy”) sets out the basis upon which Curaspark Management Consultancy LLC, trading as Arcmedix (“Arcmedix”, “we”, “our” or “us”), a company incorporated in the United Arab Emirates, will collect, process, store, use, and disclose Personal Data (as defined below) obtained from users (“you” or “your”) of the Arcmedix website located at https://arcmedix.com (“Website”) and the Arcmedix software application (“Application”) (together, the “Services”).
By accessing or using our Services, you acknowledge that you have read, understood, and agree to the terms of this Policy. If you do not agree to this Policy, you must immediately discontinue your use of the Services.
1. Definitions
“Personal Data” means any data relating to an identified or identifiable natural person, as defined under applicable data protection legislation.
“Processing” means any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, organisation, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.
“Applicable Law” means all applicable data protection and privacy laws and regulations, including without limitation UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, the EU General Data Protection Regulation (GDPR), and any other relevant legislation.
2. Personal Data We Collect
Data Provided Directly by You:
– Identification Data: Full name, email address, phone number, organisation name, job title.
– Account Credentials: Username, password, security question responses.
– Communications: Information contained in enquiries, support requests, and feedback you submit to us.
– Billing and Transaction Data: Payment card information, billing addresses, invoices, and related payment records (where applicable).
Data Collected Automatically:
– Technical Data: IP address, browser type and version, operating system, device type, device identifiers, and system logs.
– Usage Data: Details of your visits to the Website or Application, including pages accessed, time spent, interaction patterns, and referral sources.
– Cookies and Tracking Technologies: Session cookies, persistent cookies, tracking pixels, and similar technologies.
Data Obtained from Third Parties: We may receive Personal Data from business partners, service providers, and publicly available sources, including for identity verification and fraud prevention.
3. Purposes of Processing
We process your Personal Data for the following purposes:
1. To operate, maintain, and improve the Services.
2. To establish and manage your account and authenticate your identity.
3. To respond to enquiries, support requests, and complaints.
4. To process payments and fulfil contractual obligations.
5. To send administrative notices, service updates, and legal notifications.
6. To personalise the Services and deliver relevant content.
7. To monitor and analyse usage for security, optimisation, and performance.
8. To comply with Applicable Law and enforce our Terms & Conditions.
4. Legal Basis for Processing
Where Applicable Law requires a lawful basis for Processing, Arcmedix relies on:
– Performance of a Contract: Processing necessary to deliver the Services to you.
– Legitimate Interests: Processing to maintain and improve our Services, ensure security, and prevent fraud.
– Consent: Where required for marketing communications or non-essential cookies.
– Legal Obligations: Processing necessary to comply with Applicable Law.
5. Disclosure of Personal Data
Arcmedix may disclose your Personal Data to:
– Service Providers engaged to perform services on our behalf, including hosting, payment processing, analytics, and customer support.
– Professional Advisors including lawyers, auditors, and consultants bound by confidentiality obligations.
– Business Partners where collaboration is necessary to provide the Services, subject to your consent where required.
– Regulatory and Governmental Authorities where disclosure is required by Applicable Law.
– Corporate Transactions in the event of a merger, acquisition, restructuring, or sale of assets.
Arcmedix does not sell Personal Data to third parties.
6. International Data Transfers
Your Personal Data may be transferred to and processed in jurisdictions outside your country of residence, including jurisdictions that may not provide the same level of data protection. Where such transfers occur, Arcmedix shall ensure that appropriate safeguards are implemented in accordance with Applicable Law.
7. Data Retention
We will retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required under Applicable Law. After this period, the data will be securely deleted or anonymised.
8. Data Security
We implement appropriate technical and organisational measures to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. While we take reasonable measures, we cannot guarantee absolute security of your data.
9. Your Rights
Under Applicable Law, you may have the following rights in relation to your Personal Data:
– Access to the Personal Data we hold about you.
– Rectification of inaccurate or incomplete data.
– Erasure (“right to be forgotten”).
– Restriction of Processing.
– Data Portability to another service provider.
– Objection to Processing based on legitimate interests.
– Withdrawal of Consent where Processing is based on consent.
Requests to exercise these rights should be submitted to support@arcmedix.com. We may require verification of your identity before responding to such requests.
10. Cookies
Our Website and Application use cookies and similar technologies to distinguish you from other users, enhance your user experience, and analyse usage. You may disable cookies through your browser settings; however, some features may not function correctly. Please refer to our Cookies Policy for more details.
11. Children’s Data
The Services are not intended for individuals under the age of 18, and we do not knowingly collect Personal Data from minors. If you believe a minor has provided us with Personal Data, please contact us immediately.
12. Changes to This Policy
Arcmedix reserves the right to amend this Policy at any time. Updated versions will be posted on the Website and/or Application, with the “Last Updated” date revised accordingly. Material changes will be communicated where required by Applicable Law.
13. Contact Information
If you have any questions, concerns, or complaints regarding this Policy or our Processing of Personal Data, please contact:
Arcmedix
Curaspark Management Consultancy LLC
Dubai, United Arab Emirates
Email: support@arcmedix.com