Privacy
What we do with your personal data when you contact us, and who else handles it. Last updated 3 September 2026.
Who this is about
Arca Brands runs a group of consumer brands. This notice covers the personal data we hold about people who contact our customer service — by email or on WhatsApp — and about visitors to this website.
Buying from one of our brands’ online shops is covered by that shop’s own notice at the checkout. This page is about the correspondence.
What we hold when you write to us
When you email a support address or message a brand’s WhatsApp number, we keep the conversation so we can answer it and so the next person who picks it up knows what was already said. That is:
- Your name as you gave it, or the name on your WhatsApp profile.
- Your email address, or your phone number on WhatsApp.
- What you wrote, including any photos, voice messages or files you sent.
- The order number, where you quoted one or we could match it.
- The replies we sent, and when they were delivered and read.
We do not ask for, and have no use for, payment card details. If you send them anyway we will delete them and answer without them.
Why, and on what basis
To answer your question, and to handle anything that follows from it — a return, a warranty claim, a delivery that went missing. Under the GDPR our basis is the performance of our contract with you where you have bought something, and our legitimate interest in answering enquiries where you have not.
We do not use support correspondence to market to you, and we do not sell it.
Who else handles it
We use other companies to run the systems this correspondence passes through. Each one only processes it on our instruction, and this is all of them:
| Who | What for | Where |
|---|---|---|
| Supabase | Stores the conversations and order data | Ireland (EU) |
| Vercel | Runs this website and the tool our team answers you from | Ireland (EU) |
| The mailboxes our support addresses receive into | EU and United States | |
| Meta | The WhatsApp Business platform, when you message us there | EU and United States |
| Anthropic | Drafts a suggested reply and translates the conversation for the person answering | United States |
| Shopify | The shops, and the order your question is about | EU and United States |
On the fifth of those. Our support tool sends the text of a conversation to Anthropic’s API so that a reply can be drafted in your own language and so the person answering can read the thread in theirs. A person at Arca Brands reads and approves every reply before it is sent — nothing answers you automatically. Anthropic processes the text on our instruction under its commercial terms, which it publishes at anthropic.com/legal/commercial-terms.
Where a company above processes data outside the EU it does so under the European Commission’s standard contractual clauses.
How long we keep it
Support correspondence is kept for 24 months after the conversation ends, which is long enough to deal with a warranty question about something bought a year ago. After that it is deleted. Where an order is involved, the order record itself is kept for as long as tax law requires us to.
What you can ask us to do
Under the GDPR you can ask us to:
- Give you a copy of what we hold about you.
- Correct it, if it is wrong.
- Delete it, where we have no continuing reason to keep it.
- Stop using it, where our basis was our own legitimate interest.
Write to privacy@arca-brands.com and we will answer within a month. If we get it wrong you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
This website
This page and the front page set no advertising or analytics cookies, and neither asks you for anything. The workspace our team signs into sets a session cookie, which is what keeps them signed in and nothing else.
Changes
If we change how any of this works we will change this page and move the date at the top. Questions about it go to privacy@arca-brands.com.