Privacy Policy

Last updated: 30 October 2026

IPOArc Research ("we", "us", "our"), operating the website ipoarc.com (IPO Arc), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal data when you visit or use our website and related services. It is designed to comply with the EU General Data Protection Regulation (GDPR), the Dutch GDPR Implementation Act, and applicable US state privacy laws (including CCPA/CPRA where relevant).

Controller

IPOArc Research
Weteringschans 165, 1017 XD Amsterdam, Nederland
Email: info@ipoarc.com

What data we collect

Automatically collected: IP address, browser type and version, device information, referring URL, pages visited, time and date of access, and approximate location derived from IP. This is collected via the server logs of our hosting provider. We do not currently use analytics tools.
Cookies and similar technologies: The website currently sets no cookies and uses no similar tracking technologies. If we introduce cookies that are not strictly necessary, such as analytics or advertising cookies, we will ask for your consent first and update this policy.
Information you provide: Email address and any other details you submit when contacting us, signing up for digests or alerts, or creating an account (when these become available).

We do not collect special categories of personal data (health, political opinions, etc.) and do not intentionally collect data from children under 16.

To operate and improve the website (legitimate interest / performance of a contract).
To send service-related communications and, with consent where required, newsletters or product updates.
To detect and prevent abuse, fraud, or security issues (legitimate interest / legal obligation).
To comply with legal obligations.

We do not sell your personal data. We may share data with:

Service providers (website hosting and email delivery) who act as processors under GDPR-compliant agreements.
Authorities when required by law or to protect our rights.
In the event of a merger, acquisition, or asset sale (you will be notified).

International transfers

Data may be processed outside the EEA (e.g., US-based cloud providers). We use appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. You may withdraw consent at any time. To exercise these rights, email info@ipoarc.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

US residents

Depending on your state, you may have rights to know, delete, correct, or opt out of certain processing (including "sale" or "sharing" as defined under CCPA/CPRA). Contact us to exercise these rights. We do not sell personal information as that term is commonly understood.

Data retention

We retain personal data only as long as necessary for the purposes above or as required by law. Log data is typically retained for a limited period; account data is retained while your account is active and for a reasonable period thereafter.

Security

We implement appropriate technical and organizational measures to protect personal data. No method of transmission or storage is 100% secure.

Changes

We may update this Privacy Policy. Material changes will be posted on this page with an updated date. Continued use of the site after changes constitutes acceptance.

Contact

For privacy questions or requests: info@ipoarc.com
IPOArc Research, Weteringschans 165, 1017 XD Amsterdam, Nederland