Arclumis Technologies

Privacy Policy

PRIVACY & COOKIE POLICY

Arclumis Technologies
Last Updated: 19 August 2026

1. Introduction

Arclumis Technologies (“Arclumis”, “we”, “us”, or “our”) provides managed network, secure access and communications services from Santa Clara, California, United States.

This Privacy & Cookie Policy explains how we collect, use, disclose, retain and protect personal data when you:

  • Visit arclumistechnologies.com

  • Contact or contract with us

  • Use services we provide directly

  • Interact with systems we operate for clients

A client-, partner- or product-specific notice may provide additional information. If that notice conflicts with this policy for a particular service, the more specific notice applies to that processing.

2. Company and Privacy Contact Details

Company: Arclumis Technologies
Headquarters: Santa Clara, California, United States
Privacy Email: privacy@arclumistechnologies.com

3. Our Role in Data Processing

We act as data controller for our own website and commercial records.

When managing client networks, secure access or communications services, we generally act as a data processor or service provider. Clients control user access policies and permitted monitoring.

If we process personal data for a client, requests concerning that data should normally be directed to the client. We will assist the client as required by contract and applicable law.

4. Personal Data We Collect

Depending on your relationship with us, the people concerned may include client users and administrators, remote workers, visitors to client networks, suppliers and business contacts.

We may collect:

  • Business and relationship data: names, organisation, role, work contact details, correspondence, meeting information, contracts and billing records.

  • User and administrator identities, work contact details, roles and authentication records.

  • Device, network, IP address, connection, traffic-flow, performance and security-event metadata.

  • Support communications, call or unified-communications metadata where enabled, configuration and audit records.

  • Website and technical data: IP address, browser and device details, pages viewed, referral source, approximate location derived from IP, cookie choices, timestamps and security logs.

  • Information you choose to provide in enquiries, support requests, applications, surveys or other communications.

Please do not provide sensitive or unnecessary personal data.

Where sensitive information is genuinely required, we limit its use to the stated purpose and apply any additional legal safeguards, including explicit consent where required.

5. How We Collect Personal Data

We may collect personal data:

  • Directly from you, your employer, a client, group organiser, authorised user or account administrator.

  • Automatically from the website, applications, devices, integrations and security systems you use.

  • From service providers and business partners involved in an authorised transaction or service.

  • From public or licensed sources where lawful and relevant to due diligence, research, professional services or business development.

6. Why We Process Personal Data

We may process personal data to:

  • Provide secure connectivity, access control, monitoring and communications services.

  • Diagnose performance, coordinate carriers and respond to outages or threats.

  • Administer accounts, provide support and demonstrate service activity.

  • Respond to enquiries, prepare proposals, contract with clients and manage suppliers.

  • Protect people, information, systems and services.

  • Prevent fraud, misuse and security incidents.

  • Comply with applicable laws and regulations.

  • Resolve disputes and establish or defend legal claims.

  • Maintain required business records.

Arclumis Technologies does not sell personal data for money.

We also do not use client-controlled data for our own unrelated advertising purposes.

7. Legal Bases

Where applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA), as amended, where applicable, and relevant laws in client jurisdictions require a legal basis, we rely, as appropriate, on:

  • Performance of a contract or steps requested before entering into a contract.

  • Legitimate interests, such as delivering and improving services, securing systems, administering our business and communicating with business contacts, balanced against individual rights.

  • Compliance with legal obligations.

  • Consent, including for non-essential cookies or sensitive data when the law requires consent.

  • Protection of vital interests in a genuine emergency, where applicable.

Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.

Where we rely on legitimate interests, you may request information about the relevant balancing assessment.

8. Sharing Personal Data

We disclose personal data only where reasonably necessary.

Recipients may include:

  • Hosting, cloud, connectivity, security, analytics, communications, customer-support and professional-service providers.

  • Payment, identity, logistics, travel, marketplace, platform, research or other operational partners relevant to the requested service.

  • Our clients or their authorised administrators when we process data on their behalf.

  • Professional advisers, insurers, auditors, potential transaction counterparties and successors, subject to appropriate confidentiality requirements.

  • Courts, regulators, law-enforcement bodies or other recipients where disclosure is legally required or necessary to protect rights and safety.

Service providers are selected with regard to confidentiality, security and data-protection obligations.

Third parties acting for their own purposes are responsible for their own privacy practices and privacy notices.

9. International Transfers

Because our clients, users, suppliers and infrastructure may be located in different countries, personal data may be transferred outside the United States.

Where transfer restrictions apply, we use recognised safeguards such as:

  • Adequacy decisions

  • Approved contractual clauses

  • Binding contractual commitments

  • Other lawful transfer mechanisms

  • Supplementary safeguards where appropriate

10. Retention

We retain personal data only for as long as necessary for the purpose for which it was collected.

We take into account contract duration, client instructions, account activity, security and backup cycles, dispute periods and applicable legal, tax, audit or regulatory requirements.

Typical Retention Periods

  • Website enquiries and unsuccessful proposals: generally up to 24 months after the last substantive contact.

  • Client, supplier, transaction and accounting records: for the duration of the engagement and any applicable statutory limitation or record-keeping period that follows.

  • Client-controlled service data: for the period specified in the relevant contract, after which it is deleted or returned in accordance with agreed instructions, subject to secure backup rotation and legal holds.

  • Security logs: for a proportionate period based on risk, unless required for an incident investigation, dispute or legal claim.

11. Security

We use proportionate technical and organisational measures designed to protect personal data.

These measures may include:

  • Role-based access controls

  • Authentication controls

  • Encryption where appropriate

  • Logging and monitoring

  • Secure development and change-management processes

  • Vulnerability management

  • Incident-management procedures

  • Backup and recovery controls

  • Confidentiality obligations

  • Supplier security reviews

No information system can be guaranteed to be completely secure. We therefore review and adapt our controls in light of identified risks, legal requirements and service needs.

12. Your Privacy Rights

Subject to applicable law, you may have the right to:

  • Request access to your personal data.

  • Request a copy of your personal data.

  • Correct inaccurate or incomplete personal data.

  • Request deletion of personal data.

  • Request restriction of processing.

  • Object to processing based on legitimate interests.

  • Object to direct marketing.

  • Request portability of personal data you provided in a structured, commonly used format.

  • Withdraw consent.

  • Change your cookie preferences.

  • Appeal the refusal of a privacy request where applicable law provides that right.

  • Exercise your privacy rights without unlawful discrimination.

To submit a request, contact:

privacy@arclumistechnologies.com

We may need to verify your identity and authority before responding to a request.

An authorised agent may act on your behalf where permitted by law and properly verified.

You may also complain to the California Privacy Protection Agency, California Attorney General, another state regulator or relevant data-protection authority.

If the relevant personal data is controlled by one of our clients, please contact that client first.

13. Cookies and Similar Technologies

Cookies are small files or similar technologies placed on or read from your device.

Our website may use the following categories of cookies:

Strictly Necessary Cookies

These cookies support essential website functionality, including:

  • Security

  • Network management

  • Website navigation

  • Forms

  • Remembering privacy and cookie choices

These cookies may operate without consent where permitted by law because they are necessary for the website to function properly.

Preference Cookies

Preference cookies remember settings or choices you make to improve your experience on the website.

Analytics Cookies

Analytics cookies help us understand aggregate website use and improve website pages and performance.

Where consent is required by law, analytics cookies operate only after you have provided consent.

Marketing Cookies

Marketing cookies are used only where clearly disclosed through our cookie banner or preference centre and where any consent required by law has been obtained.

We do not state that marketing cookies are active unless they are identified in the website’s cookie-management interface.

Managing Your Cookie Preferences

Our cookie banner or preference centre provides current information about:

  • Cookies in use

  • Their purposes

  • Cookie providers

  • Cookie durations

  • Your available choices

You can reject non-essential cookies or withdraw previously provided consent through the cookie preference centre.

You can also block or delete cookies through your browser settings.

Please note that disabling strictly necessary cookies may affect the operation or availability of some website functions.

14. Direct Marketing

We may send relevant business communications where permitted by applicable law.

You can opt out of marketing communications at any time by:

  • Using the unsubscribe option provided in the communication; or

  • Contacting us directly.

Service, security, administrative and transaction-related communications are not marketing communications and may still be sent where necessary.

15. Children

Our website and business services are not directed to children.

We do not knowingly collect personal data from children except where information is lawfully provided by a parent, guardian or authorised organisation and is necessary to provide a requested service.

16. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in:

  • Our services

  • Technology

  • Applicable laws or regulations

  • Our data-processing practices

The latest version will be published on our website with an updated revision date.

Where required, material changes may also be communicated using an appropriate additional method.

17. Contact Us

For questions about this Privacy & Cookie Policy or to exercise your privacy rights, please contact:

Arclumis Technologies
Santa Clara, California, United States
Email: privacy@arclumistechnologies.com