Arrow Guild Privacy & Cookie Policy

Effective Date: July 3, 2026

Last Updated: July 3, 2026

Welcome to the website of Arrow Guild ("we," "us," or "our"). We are committed to protecting your privacy and handling your personal data with absolute transparency.

Unlike many modern websites, Arrow Guild operates on a strict privacy-first data model. We do not track you across the web, we do not profile your behavior, and we do not collect personal identifiers for marketing or commercialization. This policy outlines the absolute minimum data required to securely serve our website to you.

1. Information We Collect and Process

Because our website is informational and does not feature account registration, interactive forms, payment processors, or third-party tracking scripts, the only data processed during your visit is Technical Log Data generated automatically by your web browser and our hosting infrastructure.

What We Collect Automatically:

When you navigate our website, our servers temporarily log the following network and system metadata:

• IP Address (Anonymized or truncated where required by law, used strictly to route the website data to your device).
• Browser Type and Version (e.g., Chrome, Safari, Firefox).
• Operating System (e.g., Windows, macOS, iOS, Android).
• Referrer URL (The website page you arrived from).
• Date and Time Stamp of your visit.
• Pages Viewed on our site and the volume of data transferred.

What We Do NOT Collect:

• We do not collect names, email addresses, phone numbers, or physical addresses via this website.
• We do not collect financial, billing, or transaction data.
• We do not collect "Special Category Data" or sensitive information (such as health, biometric, political, or religious data).
• We do not track or collect precise geographical location details.

2. Lawful Basis for Data Processing

To comply with the EU/UK GDPR, South Africa's POPIA, and global regulations, we must establish our legal ground for processing your technical log data:

• Legitimate Interests (GDPR Art. 6(1)(f) / POPIA Sec. 11): Processing your IP address and browser metadata is standard technical necessity. We have a legitimate, vital interest in maintaining the security, structural integrity, and stable performance of our website, as well as preventing malicious cyber activity (such as DDoS attacks).

3. How We Use Your Data

The minimal technical data we capture is used exclusively for the following operational purposes:

• To deliver the website files properly and optimize display configurations for your specific device.
• To monitor server performance, ensure network stability, and debug technical errors.
• To protect our infrastructure against cyber threats, unauthorized access, and fraudulent behavior.

We do not use this data to profile individuals, compile marketing lists, or match anonymous visitors with offline identities.

4. Data Retention Limits

Technical server log data is stored securely and transiently.

• Standard security logs are automatically overwritten or permanently deleted within 30 days, unless a specific cyber-security incident requires extended investigation.
• Any aggregated system metrics used to measure general traffic volume are completely anonymized and contain no individual network identifiers.

5. Third-Party Disclosures & Transfers

Arrow Guild enforces a rigid zero-sharing policy:

• No Third-Party Tools: We do not host code, analytics tags, or advertising pixels from third parties (e.g., Google, Meta, HubSpot, or automated advertising networks).
• No Commercial Selling or Sharing: Your data is never sold, leased, or shared with data brokers, advertisers, or corporate partners.
• Legal Disclosures: We will only disclose server logs to external parties if compelled by a binding court order, valid subpoena, or clear statutory obligation from global law enforcement.

Cross-Border Data Transfers

As our network infrastructure may utilize secure hosting environments globally, your transient server-level data may cross international borders. We ensure that our infrastructure partners utilize top-tier encryption and structural safeguards compliant with international standards, ensuring your data remains protected under equivalent GDPR, UK, and POPIA frameworks.

6. Data Security

We employ robust technical and organizational security measures to protect our website environment. Our site mandates the use of encrypted HTTPS (Transport Layer Security - TLS) protocols, ensuring that the connection between your browser and our server cannot be intercepted or modified by unauthorized third parties.

7. Global Privacy Rights

Depending on your physical residency (e.g., United Kingdom, European Union, South Africa, Australia, UAE, or specific states within the USA), you are granted distinct legal statutory rights regarding your data.

Because we do not store identifiable personal data, names, or accounts, we cannot index data by your name. However, to the extent that an IP address constitutes personal information under your domestic laws, you hold the following rights:

• Right of Access / Transparency: The right to know what data we hold (satisfied completely by this transparent policy).
• Right to Erasure / Objection: The right to request the deletion or cessation of processing of your data.
• Right to Complain: The right to lodge a grievance with your local data protection authority.

Global Supervisory Authorities:

• United Kingdom: Information Commissioner’s Office (ICO). Per the Data (Use and Access) Act, you may formalize a complaint directly through our contact channel, which we will formally acknowledge within 30 days.
  Waterfront Law
• European Union: Your domestic National Data Protection Authority (DPA).
• South Africa: The Information Regulator (POPIA compliance).
• Australia: Office of the Australian Information Commissioner (OAIC).
• United States: State-level Attorneys General or privacy enforcement bodies.

To exercise any data rights, please contact our privacy representative using the details provided below.

8. Cookie Policy

A cookie is a micro-text file placed on your hardware by a website. Arrow Guild does not use tracking cookies, targeting cookies, profiling cookies, or third-party marketing cookies.

Summary of Cookie Deployment:

Controlling Cookies

Because we do not utilize non-essential cookies, there is no requirement for a cookie consent banner on our site. If you wish to block all automated technical cookies across the internet completely, you can configure your browser preferences directly (e.g., via Safari, Chrome, or Firefox settings) to reject all cookie writes. Note that blocking essential session handling may degrade basic website loading mechanisms.

9. Contact Information

If you have questions regarding this Privacy and Cookie Policy, or wish to query our data security practices, please contact our designated privacy team at:

Arrow Guild Legal & Compliance Dept. Email: adrianarrowguild.com

Postal Address: The Pavillion, Dock Road, V&A Waterfront, Cape Town, South Africa