Privacy policy

Version effective from 1 January 2025

1. Who We Are

The data controller responsible for your personal data is Arcana Club — Contact: contact@arcana-plan.com

2. Applicable Legal Framework

As a company established in the United Arab Emirates, Arcana Club processes your personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL). Where members reside in the European Union, we also ensure compliance with the principles of the General Data Protection Regulation (GDPR).

3. Data We Collect

Identification and contact data: first name, surname, e-mail address, telephone number.

Membership data: membership tier, subscription date, renewal history, billing information.

Payment data: transaction references. Card payment data is processed directly by our secure payment provider and is not stored on our servers.

Browsing data: IP address, browser type, pages visited, cookie data.

Event data: event attendance, dietary requirements where applicable.

4. Purposes of Processing

• Managing your membership and access to Club services
• Billing and payment tracking
• Communication relating to events and Club activities
• Sending newsletters (with your consent)
• Improving the website and services
• Compliance with legal obligations

5. Recipients of Data

Your data may be shared with our technical service providers (website host, payment provider, e-mail platform) acting as processors, and with competent authorities where required by law.

We never sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes.

6. Data Retention

• Membership and billing data: 7 years from the end of membership
• Communication data: 3 years from the last contact
• Browsing data and analytical cookies: maximum 13 months
• Application data (declined applications): 6 months from the date of refusal

7. Your Rights

Under applicable data protection law, you have the following rights:

• Right of access: to obtain a copy of your data
• Right of rectification: to correct inaccurate data
• Right to erasure: to request deletion of your data
• Right to restriction of processing
• Right to data portability: to receive your data in a structured format
• Right to object: to object to processing based on legitimate interests
• Right to withdraw consent: at any time

To exercise any of these rights: contact@arcana-plan.com. We will respond within one month.

You also have the right to lodge a complaint with the competent data protection authority of the United Arab Emirates (UAE Data Office).

8. Cookies

A cookie is a small text file placed on your device when you visit our website.

• Strictly necessary cookies: website functionality, security, authentication
• Analytical cookies: anonymised audience measurement (13 months)
• Preference cookies: saving your preferences (language, etc.)

You may configure your browser to block or delete cookies.

9. Data Security

Arcana Club implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration.

10. Contact

Arcana Club
contact@arcana-plan.com