Privacy Policy

Last Updated: April 1, 2026

Arcus Foundry LLC and its affiliates and subsidiaries (collectively, "Arcus Foundry," "we," "us," or "our") are committed to protecting the privacy of our customers and visitors. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of information that we collect through our website at https://arcusfoundry.com (the "Site"), as well as through all related websites, networks, applications, insurance products, and communication channels (including online chat and telephone) and other services provided by us (collectively, together with the Site, our "Services").

Arcus Foundry LLC complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Arcus Foundry LLC has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Arcus Foundry LLC has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.

Your use of our Services, and any dispute over privacy, is subject to this Policy and our Terms of Service, including its applicable limitations on damages and the resolution of disputes. Our Terms of Service are incorporated by reference into this Policy. By visiting the Site, you are accepting the practices described in this Policy.

1. Overview

The privacy of your personal data is of the utmost importance to Arcus Foundry LLC. This Privacy Policy outlines the types of information we collect, how it is used, and the steps we take to ensure your personal data is handled appropriately.

This Privacy Policy applies to all users of our Services, including visitors to our Site, registered account holders, and individuals who interact with us through other channels. If you do not agree with this Policy, you should not access or use our Services.

We may update this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website or sending you a notification). We encourage you to review the Privacy Policy whenever you access the Services or otherwise interact with us to stay informed about our information practices and the choices available to you.

2. Types of Information Collected

We collect information in the following ways:

Information You Provide to Us

We collect information you provide directly to us. For example, we collect information when you create an account, make a purchase, fill out a form, request customer support, or otherwise communicate with us. The types of information we may collect include:

Identity Data: First name, last name, username or similar identifier, title, date of birth
Contact Data: Billing address, delivery address, email address, telephone numbers
Financial Data: Payment card details, bank account information
Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us
Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Services
Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses
Usage Data: Information about how you use our website, products, and services
Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences

Information We Collect Automatically

When you access or use our Services, we automatically collect certain information, including:

Log Information: We collect log information about your use of the Services, including the type of browser you use, access times, pages viewed, your IP address, and the page you visited before navigating to our Services.
Device Information: We collect information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, unique device identifiers, and mobile network information.
Location Information: We may derive your approximate location from your IP address.
Information Collected by Cookies and Similar Tracking Technologies: We use various technologies to collect information, including cookies and web beacons. Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience, see which areas and features of our Services are popular, and count visits. Web beacons (also known as "pixel tags" or "clear GIFs") are electronic images that we use on our Services and in our emails to help deliver cookies, count visits, and understand usage and campaign effectiveness. For more information about cookies and how to disable them, see our Cookie Policy section below.

Information We Collect from Other Sources

We may also obtain information about you from other sources and combine that with information we collect about you. For example, we may collect information about you from third parties, including but not limited to identity verification services, credit bureaus, mailing list providers, and publicly available sources.

3. How We Use Personal Information

We use the information we collect for the following purposes:

Provide, maintain, and improve our Services
Process transactions and send you related information, including purchase confirmations and invoices
Send you technical notices, updates, security alerts, and support and administrative messages
Respond to your comments, questions, and requests and provide customer service
Communicate with you about products, services, offers, promotions, rewards, and events offered by Arcus Foundry and others, and provide news and information we think will be of interest to you
Monitor and analyze trends, usage, and activities in connection with our Services
Detect, investigate, and prevent fraudulent transactions and other illegal activities and protect the rights and property of Arcus Foundry and others
Personalize and improve the Services and provide advertisements, content, or features that match user profiles or interests
Facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards
Link or combine with information we get from others to help understand your needs and provide you with better service
Carry out any other purpose described to you at the time the information was collected

Legal Basis for Processing (EEA/UK)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we will only process your personal data when we have a valid legal basis to do so. Our legal bases for processing your personal data include:

Consent: You have given us your consent to process your personal data for one or more specific purposes.
Performance of a Contract: Processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data.

Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.

4. How We Protect Information

We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. These measures include:

Encryption of sensitive data in transit and at rest
Regular security assessments and penetration testing
Access controls and authentication mechanisms
Employee training on data protection and security practices
Incident response procedures
Regular backup procedures

However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please immediately contact us at hello@arcusfoundry.com.

5. When We Share Information

We may share the information we collect as follows or as otherwise described in this Privacy Policy:

With vendors, consultants, and other service providers who need access to such information to carry out work on our behalf
In response to a request for information if we believe disclosure is in accordance with, or required by, any applicable law, regulation, or legal process
If we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property, and safety of Arcus Foundry or others
In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company
Between and among Arcus Foundry and our current and future parents, affiliates, subsidiaries, and other companies under common control and ownership
With your consent or at your direction, including if we notify you through our Services that the information you provide will be shared in a particular manner and you provide such information

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

6. Information from Children

Our Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information of a child under 16, we will take steps to delete such information from our files as soon as possible. If you believe that a child under 16 may have provided us personal information, please contact us at hello@arcusfoundry.com.

7. Links to Other Websites

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. We encourage you to be aware when you leave our Services and to read the privacy statements of each website that collects personal information. This Privacy Policy does not apply to the privacy practices of these third-party websites or services.

8. Do Not Track

Some web browsers transmit "Do Not Track" signals to websites. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they are even aware of them. We currently do not take action in response to these signals.

9. Your Legal Rights

Under certain circumstances, you have the following rights under data protection laws in relation to your personal data:

Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
Object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact us at hello@arcusfoundry.com.

10. European Privacy Rights

If you are a resident of the European Economic Area (EEA), you have certain additional data protection rights. Arcus Foundry LLC aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data.

If you wish to be informed about what personal data we hold about you and if you want it to be removed from our systems, please contact us. In certain circumstances, you have the following data protection rights:

The right to access, update, or delete the information we have on you
The right of rectification — the right to have your information rectified if that information is inaccurate or incomplete
The right to object — the right to object to our processing of your personal data
The right of restriction — the right to request that we restrict the processing of your personal information
The right to data portability — the right to be provided with a copy of the information we have on you in a structured, machine-readable, and commonly used format
The right to withdraw consent — the right to withdraw your consent at any time where Arcus Foundry LLC relied on your consent to process your personal information

Please note that we may ask you to verify your identity before responding to such requests. You have the right to complain to a Data Protection Authority about our collection and use of your personal data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

11. International Compliance

Our Services are hosted in the United States and are intended for visitors located within the United States. If you choose to use the Services from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal data outside of those regions to the United States for storage and processing. By providing any information, including personal information, on or to the Services, you consent to such transfer, storage, and processing.

12. Data Privacy Framework

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Arcus Foundry LLC commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to an independent dispute resolution mechanism. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit the applicable dispute resolution provider for more information or to file a complaint. The services of the dispute resolution provider are provided at no cost to you.

In certain circumstances, the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF provide the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the DPF Principles.

Arcus Foundry LLC is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). We may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

If we transfer personal data received under the DPF to a third party, the third party's access, use, and disclosure of the personal data must also be in compliance with our DPF obligations, and we will remain liable under the DPF for any failure to do so by the third party unless we prove we are not responsible for the event giving rise to the damage.

13. California Privacy Rights

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. California's "Shine the Light" law (Civil Code Section 1798.83) permits users of our Services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.

California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (CCPA) provides California residents with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

Under the CCPA, California residents have the right to:

Know what personal information is being collected about them
Know whether their personal information is sold or disclosed and to whom
Say no to the sale of personal information
Access their personal information
Request a business delete any personal information collected about them
Not be discriminated against for exercising their privacy rights

The following table describes the categories of personal information we collect and have collected in the preceding twelve (12) months, the sources of that information, and how we use it:

Category	Examples	Collected	Business Purpose
Identifiers	Name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name	Yes	To provide and improve our Services, communicate with you, process transactions
Personal Information (Cal. Civ. Code § 1798.80(e))	Name, address, telephone number, financial information	Yes	To process transactions, provide customer support
Protected Classification Characteristics	Age, gender	No	N/A
Commercial Information	Records of products or services purchased, purchasing histories or tendencies	Yes	To provide and improve our Services, analyze trends
Biometric Information	Fingerprints, voice recordings	No	N/A
Internet or Network Activity	Browsing history, search history, interaction with website or application	Yes	To improve our Services, analyze usage patterns, enhance security
Geolocation Data	Approximate physical location derived from IP address	Yes	To provide location-relevant content and comply with applicable laws
Sensory Data	Audio, electronic, visual information	No	N/A
Professional or Employment Information	Job title, employer name	Yes	To provide relevant services, communicate effectively
Non-Public Education Information	Education records	No	N/A
Inferences	Profiles reflecting preferences, characteristics, behavior	Yes	To personalize your experience and improve our Services

We do not sell your personal information. To exercise any of these rights, please submit a verifiable consumer request to us at hello@arcusfoundry.com.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period.

14. Colorado Privacy Rights

If you are a Colorado resident, the Colorado Privacy Act (CPA) provides you with specific rights regarding your personal data. Under the CPA, you have the right to:

Opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer
Access your personal data
Correct inaccuracies in your personal data
Delete your personal data
Obtain a portable copy of your personal data

To exercise these rights, please contact us at hello@arcusfoundry.com. If we decline to take action regarding your request, you may appeal our decision by contacting us at the same email address. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

15. Connecticut Privacy Rights

If you are a Connecticut resident, the Connecticut Data Privacy Act (CTDPA) provides you with specific rights regarding your personal data. Under the CTDPA, you have the right to:

Access your personal data
Correct inaccuracies in your personal data
Delete your personal data
Obtain a copy of your personal data in a portable and readily usable format
Opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects

To exercise these rights, please contact us at hello@arcusfoundry.com. If we decline to take action regarding your request, you may appeal our decision by contacting us at the same email address.

16. Utah Privacy Rights

If you are a Utah resident, the Utah Consumer Privacy Act (UCPA) provides you with specific rights regarding your personal data. Under the UCPA, you have the right to:

Access your personal data
Delete your personal data
Obtain a copy of your personal data in a portable format
Opt out of the processing of personal data for purposes of targeted advertising or the sale of personal data

To exercise these rights, please contact us at hello@arcusfoundry.com.

17. Virginia Privacy Rights

If you are a Virginia resident, the Virginia Consumer Data Protection Act (VCDPA) provides you with specific rights regarding your personal data. Under the VCDPA, you have the right to:

Access your personal data
Correct inaccuracies in your personal data
Delete your personal data
Obtain a copy of your personal data in a portable and readily usable format
Opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer

To exercise these rights, please contact us at hello@arcusfoundry.com. If we decline to take action regarding your request, you may appeal our decision by contacting us at the same email address. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

18. How to Contact Us

If you have any questions about this Privacy Policy, the data practices of Arcus Foundry, or your dealings with our Services, please contact us at:

Arcus Foundry LLC
Attn: Data Protection Contact
30 N Gould St STE 47825, Sheridan, WY 82801
Email: hello@arcusfoundry.com
Website: https://arcusfoundry.com

Cookie Policy

How we use cookies and similar technologies

What Are Cookies?

Cookies are small text files that are placed on your computer or mobile device when you visit a website. They are widely used to make websites work more efficiently, as well as to provide information to the owners of the site. Cookies allow a website to recognize your device and remember information about your visit, such as your preferred language, font size, and other settings.

How We Use Cookies

Arcus Foundry uses cookies and similar tracking technologies to collect and use personal information about you, including to serve interest-based advertising. Our use of cookies and similar technologies falls into the following general categories:

Essential Cookies: These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, or filling in forms.
Performance Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.
Functionality Cookies: These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.
Targeting Cookies: These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.

Cookies We Use

The following table provides more information about the cookies we use and why:

Cookie Name	Type	Purpose	Duration
_ga	Performance	Google Analytics cookie used to distinguish users	2 years
_gid	Performance	Google Analytics cookie used to distinguish users	24 hours
_gat	Performance	Google Analytics cookie used to throttle request rate	1 minute
_fbp	Targeting	Facebook pixel cookie for tracking conversions and advertising	3 months
_gcl_au	Targeting	Google Ads cookie for conversion tracking	3 months
arcusfoundry.com session	Essential	Session management for logged-in users	Session
arcusfoundry.com preferences	Functionality	Stores user preferences and settings	1 year

Web Beacons and Tracking Technologies

In addition to cookies, we may use web beacons, pixel tags, and other tracking technologies on our Services to help customize and improve the Services. A web beacon (also known as a "tracking pixel" or "clear GIF") is a tiny graphic image on a web page, web-based document, or in an email message that is designed to allow the site owner or a third party to monitor who is visiting a page. Web beacons are often used in combination with cookies.

We may use web beacons to, among other things:

Count the number of visitors to our Services
Monitor how users navigate the Services
Count how many emails that we send are actually opened or how many particular articles or links are actually viewed

Flash Cookies

We may use local shared objects, also known as Flash cookies, to store your preferences such as volume control or to display content based upon what you view on our site to personalize your visit. Third-party partners provide certain features on our site and display advertising based upon your web browsing activity, using Flash cookies to collect and store information.

Flash cookies are different from browser cookies because of the amount of, type of, and way in which data is stored. Cookie management tools provided by your browser will not remove Flash cookies. To learn how to manage privacy and storage settings for Flash cookies, please visit the Adobe Flash Player help page or contact Adobe directly.

Targeted Advertising

Third parties may serve cookies on your computer or mobile device to serve advertising through our Services. These companies may use information about your visits to this and other websites in order to provide relevant advertisements about goods and services that you may be interested in. They may also employ technology that is used to measure the effectiveness of advertisements. They can accomplish this by using cookies or web beacons to collect information about your visits to this and other sites in order to provide relevant advertisements about goods and services of potential interest to you. The information collected through this process does not enable us or them to identify your name, contact details, or other details that directly identify you unless you choose to provide these.

Your Cookie Choices

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services.

You can control cookies through your browser settings. Here is how to manage cookies in the most common browsers:

Chrome: Settings > Privacy and security > Cookies and other site data
Firefox: Options > Privacy & Security > Cookies and Site Data
Safari: Preferences > Privacy > Manage Website Data
Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data

You can also opt out of interest-based advertising by visiting:

Network Advertising Initiative: https://optout.networkadvertising.org/
Digital Advertising Alliance: https://optout.aboutads.info/
European Interactive Digital Advertising Alliance: https://www.youronlinechoices.eu/

GDPR Compliance

General Data Protection Regulation Overview

Our Role Under GDPR

The General Data Protection Regulation (GDPR) distinguishes between organizations that process personal data for their own purposes (known as "controllers") and organizations that process personal data on behalf of other organizations (known as "processors"). Arcus Foundry LLC acts as both a controller and a processor, depending on the context in which personal data is processed.

As a Controller

When you visit our website, create an account, or otherwise interact with our Services directly, Arcus Foundry LLC acts as a controller of your personal data. This means we determine the purposes and means of processing your personal data and are responsible for complying with applicable data protection laws.

As a Processor

When our customers use Sparkforge to manage their own customer relationships, Arcus Foundry LLC acts as a processor of the personal data that our customers' end users provide. In this capacity, we process personal data on behalf of and under the instructions of our customers, who act as the controllers. Our customers are responsible for ensuring they have a valid legal basis for collecting and processing their end users' personal data.

Legal Basis for Processing

Under GDPR, we must have a valid legal basis for processing personal data. The legal bases we rely on include:

Consent: Where you have given clear consent for us to process your personal data for a specific purpose. You have the right to withdraw consent at any time.
Contract: Where the processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
Legal Obligation: Where the processing is necessary for us to comply with the law (not including contractual obligations).
Legitimate Interests: Where the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

Data Subject Rights

Under the GDPR, data subjects (individuals whose personal data is processed) have the following rights:

Right to be Informed: You have the right to be informed about the collection and use of your personal data. This Privacy Policy serves as our primary method of providing this information.
Right of Access: You have the right to request access to your personal data and supplementary information. This allows you to be aware of and verify the lawfulness of the processing.
Right to Rectification: You have the right to have inaccurate personal data rectified, or completed if it is incomplete.
Right to Erasure: You have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
Right to Restrict Processing: You have the right to request the restriction or suppression of your personal data. When processing is restricted, we are permitted to store the personal data but not further process it.
Right to Data Portability: You have the right to obtain and reuse your personal data for your own purposes across different services. This allows you to move, copy, or transfer personal data easily from one IT environment to another.
Right to Object: You have the right to object to processing based on legitimate interests or the performance of a task in the public interest, direct marketing, and processing for purposes of scientific or historical research and statistics.
Rights Related to Automated Decision-Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

To exercise any of these rights, please contact us at hello@arcusfoundry.com. We will respond to your request within one month. In certain circumstances, we may extend this period by two further months where necessary, taking into account the complexity and number of the requests.

Data Transfers

As Arcus Foundry LLC is based in the United States, any personal data we collect from individuals in the EEA, UK, or Switzerland will be transferred to the United States. We ensure that appropriate safeguards are in place for such transfers, including:

EU-U.S. Data Privacy Framework: Arcus Foundry LLC is certified under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework, ensuring that personal data transferred from the EEA, UK, and Switzerland to the U.S. is protected by adequate safeguards.
Standard Contractual Clauses: Where applicable, we use Standard Contractual Clauses approved by the European Commission to ensure adequate protection for personal data transferred outside the EEA.
Data Processing Agreements: We enter into data processing agreements with our customers and service providers that include appropriate safeguards for cross-border data transfers.

Security Measures

In compliance with GDPR requirements, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

Encryption of personal data in transit (TLS/SSL) and at rest
The ability to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services
The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
A process for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing
Regular employee training on data protection and information security
Access controls limiting access to personal data on a need-to-know basis
Incident response procedures for detecting, reporting, and investigating personal data breaches

Steps Taken for GDPR Compliance

Arcus Foundry LLC has taken the following steps to ensure GDPR compliance:

Data Mapping: We have conducted thorough data mapping exercises to understand what personal data we collect, where it is stored, and how it flows through our systems.
Privacy by Design: We have integrated data protection into our development processes and business practices, ensuring that privacy is considered at every stage of product development and service delivery.
Data Protection Impact Assessments: We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in a high risk to the rights and freedoms of individuals.
Vendor Management: We have implemented a vendor management program to ensure that our third-party service providers comply with GDPR requirements and provide adequate protection for personal data.
Breach Notification: We have established procedures for detecting, reporting, and investigating personal data breaches. In the event of a breach that is likely to result in a risk to individuals' rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay.
Data Retention: We have implemented data retention policies to ensure that personal data is not kept for longer than necessary for the purposes for which it is processed.
Employee Training: We provide regular training to our employees on data protection and GDPR compliance.
Data Subject Requests: We have established processes for handling data subject requests, including requests for access, rectification, erasure, restriction of processing, data portability, and objection.

If you have any questions about our GDPR compliance or wish to exercise any of your rights, please contact:

Data Protection Contact
Arcus Foundry LLC
30 N Gould St STE 47825, Sheridan, WY 82801
Email: hello@arcusfoundry.com