Arca Privacy Policy
Effective Date: January 16th, 2025
Last Updated: April 18th, 2025
Introduction
Arca Global Health Inc. ("Arca," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy describes how we collect, use, disclose, and protect the personal information of individuals ("Users," "you," or "your") who access or use the Arca platform, including our website, mobile applications, and any related services (collectively, the "Platform").
This Privacy Policy applies to all Users of the Arca Platform, including patients seeking elective medical procedures ("Patients") and healthcare providers ("Providers") who offer their services through the Platform.
By accessing or using the Platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Platform.
Information We Collect
We may collect the following categories of information from and about you:
a) Information You Provide Directly:
Account and Profile Information: When you create an account on the Platform, we collect your name, email address, password, date of birth, country, and phone number. If you are a Patient, we will also collect information related to your medical history, procedure of interest, desired timeframe, and other information relevant to the elective procedure you are seeking. If you are a Provider, we will collect information about your clinic, qualifications, licenses, certifications, procedures offered, pricing, and availability.
Communications: When you contact us or communicate with Providers through the Platform, we collect the content of those communications.
Payment Information: If you make payments through the Platform, we collect your payment card details or other financial account information. This information is processed by our third-party payment processors.
Survey Responses: If you participate in surveys or provide feedback, we collect the information you provide.
Other Information: You may choose to provide other information to us, such as when you contact customer support, participate in promotions, or otherwise interact with the Platform.
b) Information We Collect Automatically:
Usage Data: We collect information about your use of the Platform, such as the pages you visit, the features you use, the Providers you view, the searches you conduct, your bookings, and the dates and times of your interactions.
Device Information: We collect information about the device you use to access the Platform, including the device type, operating system, browser type, IP address, and unique device identifiers.
Location Information: With your consent, we may collect your precise location information to help you find Providers near you or in your desired location.
Cookies and Similar Technologies: We use cookies, web beacons, and other tracking technologies to collect information about your browsing activities on the Platform. Please refer to our Cookie Policy [Link to Cookie Policy] for more details.
c) Information We Receive from Third Parties:
Providers: Providers may share information about you with us, such as your medical records (with your explicit consent), appointment details, and treatment plans.
Third-Party Partners: We may receive information about you from our partners, such as medical tourism agencies, insurance companies, or financing providers, if you choose to use their services in connection with the Platform.
Publicly Available Sources: We may collect information about Providers from publicly available sources, such as licensing databases and professional directories.
Social Media: If you choose to connect your social media accounts to your Arca account, we may collect information from those accounts according to their terms and your privacy settings.
How We Use Your Information
We may use your information for the following purposes:
a) To Provide and Improve the Platform:
To operate, maintain, and improve the Platform and its features.
To personalize your experience on the Platform.
To develop new features and services.
To provide customer support.
To troubleshoot technical issues and prevent fraud or abuse.
b) To Connect Patients and Providers:
To facilitate communication between Patients and Providers.
To enable the matching of Patients with suitable Providers based on their needs and preferences.
To process bookings and payments for Procedures.
c) To Communicate with You:
To send you important notices about the Platform, such as updates to our Terms of Service or Privacy Policy.
To respond to your inquiries and requests.
To send you marketing and promotional communications (you can opt out of these communications at any time).
d) For Research and Development:
To analyze user behavior and trends to improve the Platform.
To develop and train our AI algorithms (e.g., for matching, personalization, and outcome prediction).
To conduct research on the elective procedure market (using anonymized and aggregated data).
e) For Legal and Compliance Purposes:
To comply with applicable laws and regulations.
To enforce our Terms of Service and other agreements.
To protect the rights, property, or safety of Arca, our Users, or others.
Data Retention and Deletion
We retain your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention period depends on the nature of the information and the purposes for which it was collected.
When you request deletion of your personal information, we will promptly mark your data for deletion. Data is deleted from our active systems within 30 days, and from backup systems within six months. During this period, data may be retained in encrypted backups for disaster recovery and legal compliance purposes. After this period, your data will be permanently deleted or fully anonymized.
You may request access to, correction of, or deletion of your personal information at any time by contacting us at contact@joinarca.com. We will respond to your request within a reasonable timeframe, typically within 30 days, and in accordance with applicable law.
We do not use Google user data for targeted advertising, resale to data brokers, creating databases for resale, or training AI models beyond providing or improving user-facing features. Our use of Google user data is strictly limited to providing or improving your experience on the Platform, in compliance with Google’s policies.
Use of Google Workspace API Data and AI/ML Models
We do not use data obtained through Google Workspace APIs (including Gmail, Drive, Calendar, and other Workspace products) to develop, improve, or train generalized or non-personalized artificial intelligence (AI) or machine learning (ML) models. Our application does not retain, transfer, or use Google Workspace user data for any purpose related to the development, improvement, or training of generalized AI or ML models.
If we use Google Workspace user data for any AI or ML functionality, it is strictly limited to providing or improving user-facing features that are visible and prominent in our application, and only as necessary for the benefit of the user. We do not transfer Google Workspace user data to any third-party AI tools or services for the purpose of developing, improving, or training generalized or non-personalized AI/ML models.
The use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How We Share Your Information
We may share your information in the following circumstances:
a) With Providers: We share your information with Providers to facilitate communication, matching, booking, and the provision of medical services. Patients control what information is shared with which provider.
b) With Your Consent: We may share your information with third parties if you have given us your explicit consent to do so.
c) With Third-Party Service Providers: We may share your information with third-party service providers who assist us in operating the Platform, such as payment processors, cloud storage providers, data analytics providers, and AI vendors. These service providers are contractually obligated to protect your information and only use it for the purpose of providing services to Arca.
d) For Legal Reasons: We may disclose your information if required to do so by law or in response to a valid legal request, such as a subpoena or court order. We may also disclose your information to protect the rights, property, or safety of Arca, our Users, or others.
e) Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.
f) Anonymized and Aggregated Data: We may share anonymized and aggregated data with third parties for research, marketing, or other purposes. This data cannot be used to identify you personally.
Data Security
We take reasonable measures to protect your information from unauthorized access, use, or disclosure. These measures include encryption, access controls, data security policies, and regular security assessments. However, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your information.
Your Data Rights
Depending on your location and applicable data privacy laws, you may have certain rights regarding your personal information, including:
Right to Access: You may request access to the personal information we hold about you.
Right to Rectification: You may request that we correct any inaccurate or incomplete personal information we hold about you.
Right to Erasure: You may request that we delete your personal information, subject to certain exceptions.
Right to Restrict Processing: You may request that we restrict the processing of your personal information under certain circumstances.
Right to Data Portability: You may request that we provide you with a copy of your personal information in a structured, commonly used, and machine-readable format.
Right to Object: You may object to the processing of your personal information under certain circumstances, including for direct marketing purposes.
Right to Withdraw Consent: If we are processing your personal information based on your consent, you may withdraw your consent at any time.
To exercise any of these rights, please contact us at contact@joinarca.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.
International Data Transfers
Arca is a global platform, and your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.
When we transfer your information to other countries, we will take appropriate measures to protect your information in accordance with this Privacy Policy and applicable law. This may include transferring your information to countries that have been deemed to provide an adequate level of data protection by the European Commission, or implementing Standard Contractual Clauses approved by the European Commission.
Children's Privacy
The Platform is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on the Platform and update the "Last Updated" date above. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Platform after the posting of any changes constitutes your acceptance of such changes.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
169 Madison Ave STE 11636 New York, NY 10016