PRIVACY POLICY

Revision: March 1, 2024

This Policy defines the procedure for processing information when using the site https://arcanelia.com/ (hereinafter referred to as the "Site").

1. GENERAL PRINCIPLES

1.1. The Administration adheres to the principle of data minimization: only information that is necessary to fulfill the User's request is requested.

1.2. The Site does not accept or process payment details and bank card data. Payment is processed by Payment Services.

2. WHAT DATA MAY BE PROCESSED

2.1. Data provided by the User voluntarily:

  • e-mail (if the User has provided it for receiving results/communication);
  • content of support requests (what the User sends).

2.2. Technical data (for Site operation and security):

  • IP address, user-agent, date/time of requests;
  • technical logs of errors and security events;
  • cookies/local identifiers necessary for the Site to function (for example, to remember settings or that a notification was closed).

2.3. Payment data:

  • The Administration may receive from the Payment Service only payment confirmation (status, identifier, amount, time), without card details.

3. PROCESSING PURPOSES

  • contract performance and service provision;
  • delivery of results (including digital materials), if the User has provided an e-mail;
  • support and responses to requests;
  • ensuring security and stable operation of the Site (protection against abuse, error diagnostics).

4. LEGAL BASIS

  • conclusion and performance of a contract (offer);
  • legitimate interests of the Administration (security, protection against abuse, stable operation);
  • User's consent — when required (for example, if the User voluntarily provides an e-mail for communication/receiving results).

5. STORAGE AND TERMS

5.1. E-mail and correspondence are stored only as long as necessary for order fulfillment, support, and resolution of possible disputes.

5.2. Technical logs are stored for a limited period for security and diagnostics: 30/60/90 DAYS.

5.3. Upon the User's request, the Administration deletes e-mail/correspondence, if there is no legal necessity to retain it (for example, for protection against claims).

6. DISCLOSURE TO THIRD PARTIES

6.1. The Administration does not sell or transfer personal data to third parties for marketing purposes.

6.2. Data may be disclosed only to:

  • Payment Services (the User interacts with them directly when paying);
  • infrastructure providers (hosting, DDoS protection, email service) — to the extent necessary for the Site to function and deliver messages;
  • upon lawful request of authorized bodies.

7. USER RIGHTS

The User has the right to:

  • request information about data processing;
  • demand correction/deletion of data;
  • withdraw consent where processing is based on consent.

8. CONTACTS

For privacy questions: ivsofte@inbox.ru.