Privacy Policy
Last updated: 19 April 2026
Who ARC Nexus is
ARC Nexus Pty Limited provides independent cyber governance advisory to Boards of Directors, Audit and Risk Committees, and senior decision-makers. ARC Nexus is an Australian company.
What personal information ARC Nexus collects
When an individual submits an enquiry through the website contact form, ARC Nexus collects the following information: name, email address, organisation, role or title (optional), enquiry type, and any additional context the individual chooses to provide.
The website also collects limited technical information through privacy-preserving analytics (Cloudflare Web Analytics). This does not use cookies and does not track individuals across websites.
How ARC Nexus collects personal information
Personal information is collected directly from the individual through the website contact form. ARC Nexus may also receive personal information through direct email correspondence. ARC Nexus does not collect personal information from third-party sources through the website.
Why ARC Nexus collects, uses, and discloses personal information
ARC Nexus uses personal information to respond to the enquiry, to determine whether an engagement is appropriate, and to continue the conversation where there is mutual interest. ARC Nexus does not sell personal information.
ARC Nexus may disclose personal information to the service providers described in this policy in order to deliver and secure the website and process enquiries. ARC Nexus may also disclose personal information where required or authorised by law.
By submitting an enquiry through the contact form, the individual acknowledges that ARC Nexus will use the information provided for the purposes described in this policy.
Information ARC Nexus does not request
ARC Nexus does not request or solicit sensitive personal information through the website contact form. The form includes structural controls and explicit guidance directing individuals not to include incident details, board papers, regulatory notices, or sensitive organisational information. If sensitive details are required, ARC Nexus will establish a secure channel for that conversation.
If sensitive information is provided despite that guidance, ARC Nexus will assess the information and, where it is not required, take reasonable steps to delete or de-identify it in accordance with applicable requirements.
Website analytics, security, and service providers
ARC Nexus does not use cookies for analytics, tracking, or advertising, and does not enable cross-site tracking. The website uses Cloudflare Web Analytics, which is a privacy-preserving analytics service. No cookie consent banner is required.
Limited functional or security-related cookies may be set as part of normal website operation, including by security and bot protection services.
ARC Nexus uses third-party service providers to host the website, deliver security protections, and process email delivery. These providers include services for website hosting, DNS and web application security, transactional email delivery, and business email infrastructure.
These providers support ARC Nexus operations and process information on ARC Nexus's behalf, subject to their own terms and legal obligations.
Overseas processing or disclosure
ARC Nexus uses service providers that may process personal information outside Australia. Likely locations include the United States and Japan. These providers support website hosting, security, and email delivery.
ARC Nexus does not control all data routing or processing decisions made by these providers. Where practicable, ARC Nexus selects provider configurations that align with its data handling expectations.
How ARC Nexus stores and protects personal information
Personal information submitted through the contact form is delivered to a controlled business mailbox secured with multi-factor authentication. Access is limited to authorised personnel. The website contact form includes bot protection to prevent automated submissions.
ARC Nexus takes reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access or disclosure. No method of electronic transmission or storage is completely secure, and ARC Nexus cannot guarantee absolute security.
Data retention
Personal information is retained only for as long as necessary to respond to enquiries and manage potential or active engagements. Enquiries that do not progress to an engagement are reviewed within a defined retention period. ARC Nexus may retain contact details where reasonably necessary to follow up on the original enquiry or a potential engagement arising from it, unless the individual requests otherwise.
Where an enquiry has not progressed within a defined period and there is no reasonable basis for retention, the associated personal information is securely archived or deleted.
Where a formal engagement commences, personal information moves to client file governance and is retained in accordance with engagement and legal obligations.
Data breach notification
In the event of a data breach involving personal information that is likely to result in serious harm, ARC Nexus will take reasonable steps to notify affected individuals and, where applicable, the Office of the Australian Information Commissioner, in accordance with applicable legal requirements.
Access and correction
An individual may request access to the personal information ARC Nexus holds about them, or request correction of that information, by contacting ARC Nexus using the details below. ARC Nexus will respond to access and correction requests within a reasonable timeframe.
Complaints
If an individual believes that ARC Nexus has not handled their personal information appropriately, they may contact ARC Nexus using the details below. ARC Nexus will acknowledge the complaint and investigate it within a reasonable timeframe.
If the individual is not satisfied with the outcome, they may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.
Changes to this policy
ARC Nexus may update this policy from time to time to reflect changes in practices, services, or legal requirements. The current version will be available on this page with the date of last update.
Contact
For privacy-related enquiries, access or correction requests, or complaints, contact ARC Nexus at [email protected].