Privacy Policy
Last updated: 17 April 2026
This Privacy Policy explains how ARFA ("ARFA," "we," "us," or "our") collects, uses, stores, and protects personal data when you visit https://arfa.markets/ or otherwise interact with us through the website, contact forms, newsletter sign-up, email communications, or related services (together, the "Site").
We are committed to handling personal data in a transparent and responsible manner.
1. Who we are
ARFA is an independent analytical platform and founder-led project focused on market intelligence, portfolio thinking, and strategic perspectives on capital and asset allocation.
For the purposes of applicable data protection law, ARFA is the data controller of the personal data described in this Privacy Policy, unless stated otherwise.
Controller details:
Website: https://arfa.markets/
Email: [email protected]
2. Scope of this Policy
This Privacy Policy applies to personal data that we collect when you visit the Site, when you contact us, when you submit an inquiry, when you subscribe to newsletters or updates, when you request information from us, or when you otherwise interact with ARFA through the Site.
It does not apply to third-party websites, platforms, or services that may be linked from the Site.
3. Personal data we may collect
a. Information you provide directly
Name, email address, location, company or role (if you provide it), the contents of your message or inquiry, and any other information you choose to provide through forms or email.
b. Technical and usage information
IP address, browser type and version, device type, operating system, referring pages, pages visited, dates and times of access, approximate geographic information derived from IP, and interactions with Site features.
c. Newsletter and communications data
If you sign up for updates or newsletters, we may collect your email address, subscription preferences, and delivery, open, or click data where supported by the email service provider.
d. Cookies and similar technologies
We may use cookies and similar technologies to operate the Site, understand usage, and improve functionality. A separate Cookie Notice may also apply.
4. How we use personal data
We may use personal data to operate and maintain the Site, to respond to inquiries and communicate with you, to provide newsletters, updates, or requested materials, to understand how the Site is used and improve it, to maintain security and prevent misuse, to comply with legal or regulatory obligations, to protect our rights, systems, and users, and to administer and document communications.
We do not use personal data for automated decision-making that produces legal or similarly significant effects, unless expressly stated otherwise.
5. Legal bases for processing
Where the GDPR applies, we rely on one or more of the following legal bases:
- Consent — for example when you subscribe to a newsletter or where consent is requested for optional cookies.
- Legitimate interests — including operating and improving the Site, responding to communications, maintaining security, understanding audience engagement, and supporting the legitimate operation of ARFA as an analytical platform.
- Legal obligation — where necessary to comply with applicable law, regulation, lawful request, or legal process.
- Pre-contractual steps — if you contact us in relation to a possible engagement.
6. Data minimisation and purpose limitation
We aim to collect only personal data that is relevant and reasonably necessary for the purposes described in this Privacy Policy, and to use it only for those purposes or compatible purposes.
7. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to respond to communications, maintain records, meet legal, tax, compliance, or dispute-resolution obligations, and protect our legitimate interests.
8. Sharing of personal data
We do not sell personal data. We may share personal data only where reasonably necessary and appropriate, including with website hosting providers, analytics providers, email/newsletter service providers, IT and security providers, legal, compliance, or professional advisers, payment processors if paid services are added, and public authorities or regulators where required by law.
9. International transfers
Some service providers may process personal data outside your country or outside the European Economic Area. Where personal data is transferred outside the EEA, the GDPR requires appropriate safeguards, which may include adequacy decisions, Standard Contractual Clauses, or other recognised transfer mechanisms.
10. Cookies and analytics
We may use cookies and similar tools for essential Site functionality, performance monitoring, analytics, and improving user experience. Where required by applicable law, we will request consent before placing non-essential cookies.
11. Data security
We take reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no internet transmission or storage system can be guaranteed to be completely secure.
12. Your rights
Where the GDPR applies, individuals may have the following rights: right to be informed, right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object, and the right not to be subject to a decision based solely on automated processing.
To exercise any of these rights, please contact us at: [email protected]
13. Complaints
If you believe your personal data has been processed in breach of applicable law, you may have the right to lodge a complaint with a supervisory authority in an EEA Member State. In Cyprus, the relevant authority is the Office of the Commissioner for Personal Data Protection.
14. Children's privacy
The Site is not intended for children, and we do not knowingly collect personal data from children through the Site.
15. Third-party links
The Site may contain links to third-party websites or services. We are not responsible for their privacy practices, content, or security.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.
17. Contact us
If you have questions about this Privacy Policy or about how ARFA handles personal data, please contact:
ARFA
Website: https://arfa.markets/
Email: [email protected]