HomeSpaces Partnerships ApplyLogin
[legal]

Privacy Policy

Last updated — July 2026

1. Introduction

ARCA Community (“ARCA,” “we,” “us,” or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you interact with our website, application forms, and membership services.

We operate in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Spanish data protection legislation.

2. Data Controller

The data controller responsible for your personal information is:

3. What Data We Collect

We collect personal data that you voluntarily provide to us through our membership application form and other interactions. This may include:

  • Identity data: Full name
  • Contact data: Email address
  • Professional data: Profession and occupation
  • Social media data: Instagram handle
  • Application data: Responses to application questions, including your interests and motivations
  • Technical data: IP address, browser type, and device information collected automatically when you visit our website

4. How We Use Your Data

We process your personal data for the following purposes:

  • Membership evaluation: To review and assess your application for membership in the ARCA community
  • Communications: To contact you regarding your application status, membership details, events, and community updates
  • Service delivery: To provide membership benefits, event invitations, and concierge services
  • Community integrity: To maintain the quality and exclusivity of our membership collective
  • Legal compliance: To comply with applicable laws and regulatory requirements

The legal basis for processing your data is your consent (provided when submitting the application form) and our legitimate interest in operating the ARCA community.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. If your membership application is declined, we will retain your data for a maximum of 12 months before deletion, unless you request earlier removal. Active member data is retained for the duration of your membership and for a reasonable period thereafter.

6. Your Rights Under GDPR

Under the GDPR, you have the following rights concerning your personal data:

  • Right of access: You may request a copy of the personal data we hold about you
  • Right to rectification: You may request correction of inaccurate or incomplete data
  • Right to erasure: You may request deletion of your personal data (“right to be forgotten”)
  • Right to data portability: You may request your data in a structured, machine-readable format
  • Right to restrict processing: You may request that we limit our processing of your data
  • Right to object: You may object to the processing of your data for certain purposes
  • Right to withdraw consent: You may withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at membership@arcacommunity.com. We will respond to your request within 30 days.

7. Data Sharing

We do not sell your personal data. We may share your information with:

  • Service providers who assist in operating our website and membership platform (e.g., hosting, email services)
  • Legal authorities when required by law

All third-party service providers are required to process your data in compliance with GDPR and our data protection standards.

8. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how you interact with our site.

  • Essential cookies: Required for the website to function properly (e.g., session management)
  • Analytics cookies: Help us understand website traffic and usage patterns to improve our service

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect your experience on our website.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. International Transfers

Your data is primarily processed within the European Economic Area (EEA). If any data transfer occurs outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised “last updated” date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) if you believe your data protection rights have been violated.