Privacy policy

Last updated: September 19, 2026

1. Data controller #

This policy applies to the arckone.com website and to communications made through its forms and email addresses.

2. Principles #

ARCKONE SRL applies the following principles:

  • Data minimization
  • Purpose limitation
  • Limited retention periods
  • Access restricted to those who need it
  • Proportionate security measures
  • Transparency

3. Data collected #

Depending on your use of the website, we may process:

  • Data entered in the contact form (name, email, phone, company, message), saved automatically from the first entry even if the form is not submitted
  • Data sent by email
  • Public professional data used for targeted B2B outreach (name, role, company, professional email address, public source and business signal justifying the contact)
  • Technical browsing data strictly necessary for the website to function
  • The language of pages viewed

After you consent to audience analytics, audience statistics and aggregated interactions are collected through OpenPanel, self-hosted by ARCKONE on OVHcloud infrastructure located in France. No audience measurement cookie or persistent identifier in localStorage or sessionStorage is used. According to OpenPanel’s documented standard operation, the raw IP address is not retained in events: it is processed to derive an approximate country and city and, together with browser information and the project identifier, to create a derived visitor identifier that changes daily. The statistics are pseudonymised and are not described as anonymous. This processing occurs only after your consent. No session recording is performed. Events do not contain form fields or other personal data entered by the visitor.

With your explicit consent, Google Ads may use cookies and advertising identifiers to attribute a genuinely submitted enquiry to a campaign. No form content, email address or telephone number is sent to Google and enhanced conversions are disabled. The choice expires after no more than 180 days and can be withdrawn at any time through the “Manage cookies” link in the website footer, which reopens the consent panel.

ChatGPT Ads measurement: when a visit starts with a click on an ARCKONE ad shown in ChatGPT, the landing page address contains a click identifier provided by OpenAI. With your consent to advertising measurement, if that visit leads to a contact form submission, this identifier, the address of the form page and a timestamp are sent server-side to OpenAI so the enquiry is counted as a result of the ad. No cookie is placed, no OpenAI script is loaded on the site, and neither the form content nor the person’s identity is transmitted. Visits that do not come from a ChatGPT ad trigger no transmission at all.

  • Responding to contact or information requests (pre-contractual measures)
  • Preparing a business relationship (pre-contractual measures / legitimate interest)
  • Contacting professionals occasionally on behalf of their company when the message relates to their role and to an identified business need (legitimate interest, B2B outreach)
  • Ensuring the security and technical operation of the website (legitimate interest)
  • Measuring enquiries resulting from ChatGPT Ads only with consent (consent)
  • Measuring audience use through OpenPanel only with consent (consent)
  • Measuring enquiries resulting from Google Ads only with consent (consent)
  • Complying with legal and accounting obligations (legal obligation)

5. Retention periods #

  • Previously collected unsubmitted form drafts: automatic deletion no later than 30 days after their last update. The website no longer sends a new draft before explicit form submission.
  • Submitted contact requests that do not convert: 12 months
  • B2B outreach with no response: maximum 12 months, or immediate deletion in case of objection
  • Business communications: duration of the relationship + 3 years
  • Billing data and supporting tax documents: 10 years (Belgian tax obligation)
  • Technical logs: 6 months

6. Recipients #

Data access is limited to the managing director of ARCKONE SRL and to technical service providers necessary for the website to function:

  • Cloudflare, Inc. (hosting, form protection and temporary D1 storage restricted to the European Union)
  • Fastmail Pty Ltd (email service)
  • OVHcloud (infrastructure in France used for the OpenPanel instance self-hosted by ARCKONE)
  • OpenAI Ireland Ltd / OpenAI, L.L.C. (measurement of enquiries resulting from ChatGPT Ads, only for visits coming from an ad)
  • Google Ireland Limited (Google Ads attribution, only after consent)

7. Transfers outside the EEA #

Cloudflare, Fastmail and OpenAI may process data outside the European Economic Area. These transfers are governed by standard contractual clauses or adequacy decisions.

8. Cookies #

Cookies used on this website are detailed in the Cookie policy.

9. Your rights #

Under the GDPR, you may request:

  • Access to your data
  • Rectification
  • Erasure
  • Restriction of processing
  • Objection to processing
  • Data portability
  • Withdrawal of consent

To exercise your rights, write to hello@arckone.com.

10. Supervisory authority #

If you believe your rights are not being respected, you may file a complaint with the Belgian Data Protection Authority: dataprotectionauthority.be.

11. Security #

ARCKONE SRL implements reasonable security measures: access restrictions, encrypted connections, appropriate logging. No system is completely invulnerable, and absolute security cannot be guaranteed.