Privacy Policy

1. Introduction & Overview

Arc Limited ("ARC", "we", "us", or "our") is dedicated to safeguarding your privacy and protecting the sensitive corporate and personal information entrusted to us. This Privacy Policy details how we collect, process, disclose, and secure your information across our digital platforms, sourcing portal, customer management systems, and client communications.

By engaging with ARC, accessing our portal, or submitting trade inquiries, you acknowledge the terms outlined in this Policy, which complies with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and applicable international data protection standards.

2. Information We Collect

In facilitating end-to-end procurement, supply chain vetting, and cargo consolidation, we collect information necessary to fulfill our service commitments:

• Direct Business & Contact Details: Name, corporate email, job title, company name, business registration information, telephone number, and physical billing/shipping addresses.
• Sourcing & Trade Specifications: Bills of materials (BOM), CAD drawings, technical product requirements, target purchase pricing, sample requests, and regulatory compliance targets.
• Transactional & Financial Records: Proforma invoices, payment verification details, LC references, and credit facility documentation. We do not store raw credit card credentials on our servers.
• Digital & Technical Data: IP addresses, browser types, device information, session identifiers, and portal navigation logs collected via security-hardened cookies and server telemetry.

3. Purpose and Legal Grounds for Processing

Your data is processed strictly for legitimate commercial and operational purposes, including:

• Evaluating supplier capabilities, conducting factory audits, and managing production lifecycles.
• Coordinating freight forwarding, customs clearance, and container consolidation across Hong Kong, Shenzhen, Guangzhou, and destination ports.
• Maintaining access controls and authentication for our proprietary client portal.
• Ensuring statutory compliance with Anti-Money Laundering (AML) regulations, export control regimes, and customs documentation mandates.
• Providing timely status updates regarding pending orders, inspection defect logs, and shipment tracking.

4. Data Sharing & Third-Party Disclosure

ARC maintains a strict policy: we never sell, rent, or monetize your confidential data or intellectual property. Data sharing is limited strictly to operational necessity under binding non-disclosure agreements:

• Vetted Manufacturing Partners: Technical specifications, drawings, and quality standards provided solely to execute prototyping and volume production.
• Accredited Inspection Labs: Product samples and compliance criteria provided to certified third-party testing laboratories (e.g., SGS, TÜV, Intertek).
• Logistics & Customs Authorities: Commercial invoices, packing lists, and export manifests delivered to shipping lines, freight handlers, and government customs officials.
• Legal & Regulatory Authorities: Where mandated by court orders, statutory law enforcement, or national security regulations.

5. Cross-Border Data Transfers & Security

Given the global nature of supply chain logistics, data may be transferred, stored, and processed across facilities located in Hong Kong, Mainland China, and international server nodes. All transfers employ enterprise-grade TLS 1.3 encryption in transit and AES-256 encryption at rest.

We implement role-based access restrictions (RBAC), multi-factor authentication for internal systems, regular third-party penetration testing, and continuous audit logging to mitigate security threats.

6. Data Retention & Your Legal Rights

We retain transaction and sourcing records for the duration of our commercial relationship and as required by Hong Kong statutory accounting and commercial statutes (typically 7 years following transaction completion).

Under applicable data privacy laws, you possess the right to:

• Request confirmation and a copy of the personal data held about you.
• Request the correction of erroneous or outdated corporate contact information.
• Request deletion or restriction of processing, subject to statutory retention obligations.
• Opt out of marketing publications and industry intelligence digests at any time.

7. Inquiries & Data Protection Contact

For inquiries, access requests, or privacy concerns, please contact our Data Protection Office:

• Email: [email protected]
• Hong Kong Corporate Office: Arc Limited, Two International Finance Centre, Central, Hong Kong
• Operations Hub: Office 1614, Sangda Building, 46 Huafa North Road, Futian District, Shenzhen, Guangdong, China