Legal

Privacy Policy.

What Arkana Web LLC collects, why, and how you can control it. Effective August 16, 2026.

1. Overview

Arkana Web LLC (“Arkana Web,” “we,” “us”) respects your privacy. This policy explains what personal information we collect when you visit arkanaweb.co or purchase Services from us, how we use it, and the choices you have.

We don’t sell personal data. We don’t share it with third parties for their marketing. We only collect what we need to run the site and support the engagement.

2. Information we collect

Information you give us directly

  • Contact info — name, business name, email address, phone number, and message content when you fill out the contact form or send us an email.
  • Project details — anything you share during discovery calls, intake questionnaires, or working sessions.
  • Payment details — billing name, billing address, and card details, collected and processed by Stripe. We receive the transaction result and the last four digits, never the full card number.

Information collected automatically

  • Traffic logs — our host (Cloudflare) logs IP address, user agent, referrer, and requested URL for each request. These logs are retained for up to 30 days for security and abuse prevention.
  • Analytics — we use privacy-respecting analytics (Cloudflare Web Analytics) that do not use cookies or fingerprint visitors. We do not use Google Analytics on this site.
  • Anti-spam — the contact form is protected by Cloudflare Turnstile, which uses non-invasive challenges to distinguish humans from bots. Turnstile does not use cookies for tracking.

Cookies

Our site uses two lightweight cookies: one to remember your color-theme preference (light or dark) and one to remember your billing-cycle preference (monthly or annual) on the pricing pages. Both are strictly functional and are not used for advertising or cross-site tracking.

3. How we use information

  • To respond to your inquiries and deliver the Services you requested.
  • To send transactional emails (invoices, receipts, project updates).
  • To bill you and process payments through Stripe.
  • To secure the site and prevent abuse.
  • To comply with legal obligations.

We do not use your information to train AI models. We do not sell it, and we do not share it with third parties for their own marketing purposes.

4. Legal bases (for EU/UK visitors)

If you’re located in the EU, UK, or EEA, we process your data under the following GDPR bases:

  • Contract — to provide the Services you purchased.
  • Legitimate interest — to run our site, respond to inquiries, and prevent abuse.
  • Legal obligation — to comply with tax, accounting, and law enforcement obligations.
  • Consent — where you’ve given it (for example, opting into a newsletter, which we don’t currently run).

5. Who we share with

We use a small set of trusted service providers to run our business. Each is bound by its own data-protection commitments:

  • Cloudflare, Inc. — DNS, DDoS protection, and static hosting.
  • Stripe, Inc. — payment processing.
  • Google LLC (Google Workspace) — business email at arkanaweb.co.
  • Cal.com or Calendly (whichever we use at the time) — discovery-call scheduling.

We may disclose information if required by law, subpoena, or valid legal request; to protect the rights, property, or safety of Arkana Web, our clients, or others; or in connection with a merger, acquisition, or sale of assets.

6. Data retention

  • Contact-form submissions: up to 3 years after last correspondence.
  • Client project files and correspondence: 7 years after project completion (US tax retention).
  • Payment records: 7 years (US tax retention).
  • Traffic logs: up to 30 days.

7. Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your information (subject to legal retention requirements).
  • Object to or restrict certain processing.
  • Receive a portable copy of your information.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email [email protected]. We’ll respond within 30 days.

8. California residents (CCPA/CPRA)

We do not “sell” or “share” personal information as those terms are defined under the CCPA/CPRA. California residents have the rights described in Section 7, plus the right to non-discrimination for exercising them. To submit a request, email [email protected].

9. Children’s privacy

The Site and Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we’ve collected such information, we’ll delete it promptly.

10. Security

We use TLS 1.3 in transit, strong passwords with 2FA on all business accounts, and least-privilege access controls. We describe the full baseline on our Trust page. No system is perfectly secure, but we work to make ours as secure as feasible for a small studio.

11. International transfers

Arkana Web is based in the United States. If you contact us from outside the U.S., your information will be transferred to and processed in the U.S. Where required by law, our sub-processors (Cloudflare, Stripe, Google) implement Standard Contractual Clauses or equivalent safeguards.

12. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email to active clients and by an updated effective date at the top of this page.

13. Contact

Privacy questions? Email [email protected] or call (479) 831-9482. Written correspondence can be sent to Arkana Web LLC, care of the registered agent on file with the Arkansas Secretary of State.