We care about your privacy

We operate with clear data practices designed to respect users and protect their information.

Arch Capital Group Ltd │ Privacy Policy │ Applies to the Arch mobile application and website

Privacy Policy – Arch App and Website

This Privacy Policy applies to the Arch mobile application and the Arch website operated by

Arch Capital Group Ltd ("we", "us", "our"). It explains how we collect, use and protect your

personal data.

1. Controller

Arch Capital Group Ltd

167–169 Great Portland Street

London, W1W 5PF

United Kingdom

2. Scope

This Privacy Policy applies to your use of the Arch mobile application and the Arch Capital

Group website.

3. Personal data we collect

We may collect and process the following categories of personal data:

Category of data Examples

Identity and profile data Name, university affiliation, profile

information

Contact data Email address, telephone number

Account data Login credentials and account identifiers

Communications Messages you send to us and support requests

Technical and device data IP address, device identifiers, operating

system, app version

Usage data Information about how you use the App and

website

We do not store your payment card details. Payments are processed by third‑party payment

providers.

4. Google account and Google Calendar integration

If you choose to connect your Google account, we process the following information:

Data accessed from Google Purpose

Basic Google account information (such as To authenticate you and link your Google

Arch Capital Group Ltd │ Privacy Policy │ Applies to the Arch mobile application and website

email address and unique account identifier) account to your Arch account

Google Calendar data and event metadata To enable calendar synchronisation and

event‑related features within the App

Arch Capital Group Ltd’s use and transfer of information received from Google APIs adheres to

the Google API Services User Data Policy, including the Limited Use requirements.

5. How we use your personal data

Purpose Explanation

Account creation and management To create, administer and maintain your user

account

Provision of services To operate and provide the features of the

App and website

Integrations and personalisation To enable connected services such as Google

Calendar and tailored features

Communications To contact you about your account, support

requests and important service notices

Service improvement To analyse usage and improve our products

and services

Legal and regulatory compliance To meet our legal obligations

6. Lawful bases for processing

Lawful basis When it applies

Performance of a contract Where processing is necessary to provide the

App and website services

Consent For Google integrations and certain

communications

Legitimate interests For operating and improving the service,

where your interests do not override ours

Legal obligation Where we must process data to comply with

the law

7. Sharing your data

We may share your personal data with service providers supporting the operation of the App and

website (including hosting, analytics, customer support and infrastructure providers), Google

Arch Capital Group Ltd │ Privacy Policy │ Applies to the Arch mobile application and website

LLC where you choose to connect your Google account, payment processors, and professional

advisers or regulators where required by law.

8. International transfers

Some of our service providers are located outside the United Kingdom and the European

Economic Area. Where personal data is transferred internationally, we use appropriate safeguards

such as standard contractual clauses.

9. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy or

as required by law.

10. Security

We apply appropriate technical and organisational measures to protect your personal data against

unauthorised access, loss or misuse.

11. Your rights

You have the right to access your personal data, request correction or deletion, restrict or object to

processing, request data portability, and withdraw your consent at any time.

You may exercise your rights by contacting us via www.archcapitalgroup.co.uk.

12. Complaints

You may lodge a complaint with the Information Commissioner’s Office in the United Kingdom.

13. Cookies and tracking

Our website uses cookies and similar technologies. Further information is provided in our Cookie

Policy.

14. Changes to this policy

We may update this Privacy Policy from time to time. Updated versions will be published on our

website and within the App.

15. Governing law

This Privacy Policy is governed by the laws of England and Wales.