Privacy Policy

Arcla Ltd is the operator of the Arcla platform — an online marketplace connecting skilled contractors with companies across Aotearoa New Zealand.

Privacy enquiries can be directed to our Privacy Officer at: info@arcla.co.nz

We collect information you provide directly, including:

• Account information: name, email address, and password when you register;
• Profile information: trade type, skills, location, availability, and other details you add to your profile;
• Qualification documents: copies of licences, certificates, and other credentials uploaded for Arcla Passport verification;
• Company information: business name, location, industry, and job listings;
• Communications: messages sent through the platform between contractors and companies; and
• Plan information: your current plan tier and, where paid plans are activated in future, associated billing records. Payment card details are handled by our payment processor and are not stored by Arcla.

We also collect information automatically, including:

• Usage data: pages visited, features used, and time spent on the platform;
• Device and technical data: IP address, browser type, and operating system; and
• Cookies and similar technologies: see our Cookie Policy for details.

We use your information to:

• Operate and provide the Arcla platform;
• Verify contractor credentials for the Arcla Passport;
• Match contractors with relevant job opportunities and companies with relevant contractors;
• Send transactional communications (account confirmation, password resets, verification updates);
• Send platform notifications (new job listings, messages, application updates);
• Administer plan records and, where applicable, process payments;
• Improve and develop the platform; and
• Comply with legal obligations.

We do not sell your personal information to third parties.

We share your information only as necessary to operate the platform:

• Between users: Worker profiles and Arcla Passports are visible to eligible companies, subject to your privacy settings. Workers may opt into a basic public profile; Premium adds selected rich content. Workers and companies choose which supported contact details appear on their profiles. These details follow the selected profile visibility settings. Login email addresses, ID files and original certificates are not published on public profiles. Subscription expiry does not delete stored information, originals or legitimate review history. Company profiles and job listings are visible to contractors and job seekers.
• Service providers: We use trusted third-party services to operate the platform, including Supabase (database and authentication) and Resend (email delivery). Where paid plans are introduced, a payment processor will also be used. These providers process data on our behalf and are bound by appropriate data processing agreements.
• Legal obligations: We may disclose information if required to do so by law, court order, or government authority.

[Legal review recommended] — Review whether a formal data processing agreement is required with each sub-processor under New Zealand law or any applicable overseas privacy regime (e.g., Australian Privacy Act, GDPR if you have EU users).

Premium workers may download a Passport PDF containing their chosen sections and records, including explicitly selected private records and an optional insurance-certificate copy. Exporting does not change online visibility. Downloaded copies may be forwarded and cannot be withdrawn by later privacy or subscription changes. ID files and original qualification certificates are excluded from the generated Passport; owners retain separate access to their original uploads.

When saved PDF selections are enabled, they store an owner-only name and selected sections and record identifiers, rather than copies of documents or generated PDFs. They do not store sharing consent. Each new export uses current information and requires confirmation. Saved choices are retained after Premium expires, and their owner may view or delete them.

We retain your personal information for as long as your account is active or as necessary to provide you with the platform. If you close your account, we will delete or anonymise your personal information within a reasonable period, unless we are required to retain it by law (for example, for tax or legal compliance purposes).

Qualification documents submitted for Arcla Passport verification may be retained for a reasonable period after verification to resolve disputes.

Under the New Zealand Privacy Act 2020, you have the right to:

• Access the personal information we hold about you;
• Correct any information that is inaccurate or out of date;
• Request deletion of your personal information, subject to any legal retention obligations; and
• Complain to the Office of the Privacy Commissioner if you believe we have breached your privacy rights.

To exercise any of these rights, contact us at: info@arcla.co.nz

You may request deletion of your account and associated personal information at any time by contacting us at: support@arcla.co.nz

Please include your registered email address and a brief description of your request. We will acknowledge your request promptly and process it within a reasonable timeframe, typically within 30 days.

Please note that some records may be retained where required or permitted by law, including for:

• Tax and financial reporting obligations;
• Fraud prevention and security purposes;
• Resolving outstanding disputes or complaints; and
• Complying with legal holds or court orders.

Where records are retained following a deletion request, we will inform you of the specific legal basis for retention and the expected retention period.

We take reasonable steps to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Our platform uses industry-standard encryption (TLS/HTTPS) and row-level security on our database.

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at support@arcla.co.nz.

We use cookies and similar technologies to operate the platform and improve your experience. See our Cookie Policy for full details.

Some of our service providers may process your data outside New Zealand. Where this occurs, we take steps to ensure appropriate safeguards are in place consistent with the New Zealand Privacy Act 2020.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Continued use of the platform after changes are published constitutes acceptance of the updated policy.

For all privacy enquiries, data requests, or to exercise your rights, contact us at: info@arcla.co.nz

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at www.privacy.org.nz.