Privacy notice

Introduction

This privacy notice explains how we use your data, how you can control the way in which we use that data, and what actions you can take if you would like to change the way in which your personal data is being used. When we refer to “personal data” in this privacy notice, we are referring to any information that relates to an individual (note that this does not include information where the identity of the individual has been fully and effectively removed (anonymous data)).

Who are we?

We are the Alliance for Responsible Citizenship Limited, a limited company, incorporated in England and Wales (company number 10519995). For the purposes of this Privacy Notice we refer to ourselves as “ARC”, “we”, “us”, or “our”.

Why do we collect your data?

Our mission is to convene and foster a community of changemakers and high-level leaders that are committed to formulating and advocating a positive and hope-filled vision in response to life’s most fundamental social, economic, philosophical, and cultural questions.

We hold personal data on people who do, or might do, the following:

• Attend events, held both at ARC and at external venues.
• Ask about or apply for tickets to our events.
• Take part as a speaker or panelist in one of our events and activities.
• Contribute to the research we carry out.
• Attend meetings with members of staff.
• Support ARC financially and in other ways.
• Sign up to ARC Ideas, our newsletters or other updates by email.
• Purchase access to our livestream or on-demand content.

What personal data we collect?

We collect the following classes of personal data:

• Name(s) and address, email, phone number(s) and other relevant contact details and preferences.
• Information on event attendance.
• Use of social media relating to ARC (e.g. following our X feed).
• Records of donations (donor details and amount).
• Photographs, recordings (audio and video) and associated information produced at our events.
• Information about our relationship with you and any correspondence.
• Occupation, skills and professional activity, network(s) and interests where relevant to our needs.
• Records of purchases, including livestream access and event tickets.
• The ARC Ideas topics you have chosen, and your email preferences.
• Which of our emails you open, and which links in them you click.
• If you have accepted cookies: the pages of our website you have visited, linked to your record when you sign up or fill in one of our forms.
• If you ask about or apply for tickets: the ticket you asked about, the IP address you used, and what you tell us in your application.

What we do with your personal data?

The core activities we carry out with your personal data enable us to:

• Send information to you about ARC.
• Send you ARC Ideas, with pieces chosen according to the topics you have picked.
• See which of our emails are opened and which links are clicked, so that we can measure our emails and send fewer that are not wanted.
• Recognise readers who have already signed up, so that we do not ask them to sign up again.
• Check whether you are on our invitation list when you ask about tickets, and review applications to attend our events.
• Provide information for events.
• Administer donations and sponsorships.
• Build support for ARC through various fundraising and marketing activities.
• Promote the aims and objectives of ARC, including as part of our marketing materials.
• Deliver, measure, and improve our digital advertising campaigns.
• Process purchases of event tickets, livestream access, and other products.

How we obtain data

From you

Most of the information we hold about you will have been provided directly by you when you have taken part in one or more of the activities outlined above.

From someone other than you

In some cases, we may supplement the information you have given us with personal data from elsewhere. Examples include adding social, economic, or demographic data to our delegate or fundraising information, improving, or correcting contact details or conducting appropriate due diligence to safeguard the assets and reputation of ARC in the case of significant financial transactions. Sources of data could include information gathered from a news article or on-line media (including social media), publicly available directories and similar information such as the telephone directory, Royal Mail’s National Change of Address database and Companies’ House.

We may also obtain information about people entirely new to us. Examples include (but are not limited to):

• If an existing supporter or contributor suggests, we get in touch to see if you might be interested in becoming involved with us.

ARC Ideas and our emails

ARC Ideas is a series of short pieces, each on one question. We publish them on our website and send them by email.

When you sign up, we ask for your first name, last name and email address. You can also tell us where you are based. You can then choose one or more of our five topics, which we call streams. They are named after the streams of the ARC Conference:

• Our Civilisational Story
• Strengthening the Social Fabric
• Free Enterprise and Good Governance
• Energy, Resources, and Our Environment
• Technology and Human Flourishing

If you choose streams, we send you pieces from those streams. If you do not choose any, we send you ARC Picks, a selection of pieces from all five streams. We also send the occasional note to everyone who reads ARC Ideas.

We also send emails about the ARC Conference to people who have subscribed to updates from us, and to people who have attended an ARC event or are connected with ARC in other ways.

You can change your streams, unsubscribe from ARC Ideas, or unsubscribe from all our emails at any time. Use the links at the foot of every email, or contact us.

Topic links in our emails. Some of our emails contain one link for each stream. Tapping a link opens a page on our website where you can add that stream to your topics with one press. You do not need to log in: each link contains a code that tells us which email address it was sent to. When you press the button, we record your choice on your record in HubSpot. You can add or remove streams on that page, or through the preferences link at the foot of any email.

How we measure our emails. We send our emails through HubSpot, which records when an email is opened and which links are clicked. We use this to measure our emails, to avoid sending a reminder to someone who has already responded, and to recognise you on our website when you arrive from one of our emails.

Tickets for our events

The ARC Conference is by invitation. When you ask about tickets on our website, we ask for your email address and check it against our list of people we have invited. If you are on it, the website shows you the ticket options and prices open to you. If you are not, you can apply.

We keep a record of each enquiry: the email address you entered, the ticket you asked about, the date and time, and your IP address. We use it to manage invitations and to protect our website from misuse.

Protecting our forms

To stop automated programs misusing our forms, we use Cloudflare Turnstile, a check that runs in your browser. For this check, Cloudflare processes your IP address and technical information about your browser and device. We also limit how many ticket enquiries can come from one IP address and one browser. To do this we keep a scrambled form of your IP address, which cannot be turned back into the address, and delete it one day after it was last used.

Cookies, Tracking Technologies, and Analytics

Our website uses cookies and similar tracking technologies to help us understand how visitors use our site, to improve your experience, and to support our marketing activities.

We use the following categories of cookies and tracking technologies:

Essential cookies: These are necessary for the website to function properly and cannot be switched off. They include cookies that enable you to navigate the site and use its features. Our website sets these essential cookies for ticket enquiries and topic links. They are never used for advertising:

• arc_tickets: remembers for 30 days that you are on our invitation list, so that you can see the ticket options and prices open to you. It holds only a reference number for your record and a security code.
• arc_known: for the same 30 days, it lets our pages show “Book now” instead of “Enquire”. It holds no information about you.
• arc_gate_n: counts ticket enquiries from your browser, to stop misuse. It lasts one day.
• arc_gate_prompt: for two minutes after a personal link in one of our emails could not be checked, it tells our tickets page to ask for your email address instead. It holds no information about you.
• arc_topics: for one hour after you open a topic link in one of our emails, it remembers whose topics the page is showing, so that you can change them. It holds only the code from the link and a security code.

We also save a few small items in your browser that are not cookies but work in a similar way. We save them because the site needs them, and they are never used for advertising:

• Your cookie choice, so we do not ask again. We keep it for 12 months.
• A marker that you are an ARC Ideas reader. We save it when you sign up on that device, or when you arrive from a link in one of our emails. It means we do not ask you to sign up again when you move from one ARC Ideas piece to another. The marker records only that this browser belongs to a reader. Your email address is kept in our contact records in HubSpot, not in the marker. We keep the marker for 12 months.
• Whether you left the page index open, until you close the browser tab.

You can remove these at any time by clearing your browser’s data for our site.

Analytics cookies: We use Google Analytics (GA4) to understand how visitors interact with our website. This helps us measure and improve the performance of our site. Google Analytics collects information such as which pages you visit, how long you spend on the site, and how you arrived at the site. This data is aggregated and anonymised where possible.

Advertising cookies: We use the Meta Pixel (Facebook and Instagram) to measure our advertising and to show our advertisements to people who have visited our site. We do not place a separate Google Ads tag. Our Google Ads account is linked to Google Analytics, and Google Analytics tells Google Ads when a visit led to an action on our site.

HubSpot tracking cookies: HubSpot is the system we use for email and for our contact records. Its tracking code records which pages of our site a browser visits. If you later sign up or fill in one of our forms, those visits are added to your record. Our HubSpot account uses HubSpot’s EU data region.

We measure three actions on our site: pressing a Book or Get the pass button, an enquiry about the ARC Circles, and signing up to ARC Ideas. Tickets and the Livestream Pass are bought on Swapcard and HubSpot, which measure purchases on their own pages.

Your choice: When you first visit our site, a banner asks whether you accept these cookies. Accept and Reject are equally easy to choose. None of the analytics, advertising or HubSpot tracking code loads until you press Accept. We remember your choice for 12 months, then ask again. You can change your choice at any time through “Cookie settings” at the foot of every page. If you withdraw your consent, we delete the cookies these tools have set on our site and stop loading them.

Films: Our films are hosted on YouTube. We use YouTube’s privacy-enhanced mode, and nothing loads from YouTube until you press play. Once you press play, YouTube, which is owned by Google, may set cookies under Google’s privacy policy.

Livestream: Our livestream and recordings of past sessions are provided by Dacast. Dacast’s player, which runs on Dacast’s InPlayer service, loads when you open the page. It may collect technical information about your device and viewing, under Dacast’s privacy policy.

Forms: Our ARC Ideas sign-up and ticket forms are our own. Our press form is provided by HubSpot and loads with the page. Our donation forms are provided by Givingtech and HubSpot, and load when you choose the country you are giving from. Anything you enter in our own forms, our press form or our HubSpot donation form is sent to our contact records in HubSpot.

Fonts: The typefaces on our website are loaded from Google Fonts. To deliver them, Google receives your IP address and technical information about your browser.

For more information about cookies and how to manage them, you can visit www.allaboutcookies.org.

Digital Advertising

We use digital advertising platforms, including Meta (Facebook and Instagram) and Google (including YouTube), to promote ARC’s events, activities, and content to relevant audiences.

As part of our advertising activities, we may:

• Share hashed (encrypted) personal data, such as email addresses, with advertising platforms for the purpose of audience matching. This allows us to show relevant advertisements to people who have an existing relationship with ARC, and to find new audiences with similar characteristics. The advertising platforms cannot reverse the hashing process to obtain the original data, and the data is used solely for audience matching and ad delivery.
• Use tracking technologies on our website (as described in the Cookies section above) to measure the effectiveness of our advertising campaigns, including tracking whether an advertisement led to a purchase or other action on our site.
• Create audience segments based on interactions with our website or advertising content, such as people who have visited a particular page or watched a certain percentage of a video advertisement.

We share hashed email addresses with advertising platforms on the basis of our legitimate interest in promoting ARC’s events and activities and measuring the effectiveness of our marketing spend. The tracking technologies on our website are only used if you accept them in our cookie banner. You may opt out of personalised advertising by adjusting your privacy settings on the advertising platforms (such as your Facebook Ad Preferences or Google Ad Settings), by pressing Reject in our cookie banner, or later through “Cookie settings” at the foot of every page.

Profiling

We group people according to how they have engaged with ARC, so that what we send is more relevant and we send less of what is not wanted. For example:

• We send ARC Ideas pieces from the streams you have chosen.
• We note whether you have attended an ARC event, or are connected with us in other ways, and send emails about the ARC Conference accordingly.
• We keep a list of people we invite to buy tickets for our events, based on their work and their connection with ARC.
• If you have clicked a link in one of our emails about the conference, we may not send you the next reminder.
• If you accepted cookies, the pages you read on our site before signing up are added to your record. They may inform which pieces and events we tell you about.

We do not make decisions about anyone by automated means that have legal or similarly significant effects.

You have a right to ask us not to do this. If you would prefer us not to, please contact us using any of the contact details below.

Our responsibilities

The law requires us to tell you about the legal basis upon which we process your personal data.

If the law requires your consent for us to process personal data for certain activities (for example if we are collecting your data so that we can send you marketing), then we will obtain it before carrying out that activity.

Other activities are carried out to fulfil a contract or agreement. If a contract is in place, then we will process your personal data so that we can fulfil our respective obligations under that contract.

In some circumstances, the law requires us to process your personal data in a specific way or to disclose your personal data to another party.

In all other cases, and outside our public obligations, the law allows us to process your data if it is in our legitimate interest to do so, so long as your interests or your fundamental rights and freedoms do not override those interests. For example, we have a legitimate interest in providing our services and furthering our aims.

Protecting your data

We keep your data secure in our database with appropriate security mechanisms in place. While we seek to use appropriate organisational, technical, and administrative measures to protect personal information within our organisation, unfortunately no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contacting us” section below.

Data Sharing

In principle, we do not share your data with anyone else or any other organisation unless it is necessary for the purpose for which you have given us the data or is described in this notice. Examples are given below:

• We may share basic information on the attenders at an event or function or meeting with the host or members of ARC’s staff.
• We may pass data to other organisations, known as Processors, to provide specific services to us. A contract is always in place with a Processor, and they are not allowed to do anything with your data other than that which we have requested.
• We may share hashed (encrypted) personal data, such as email addresses, with digital advertising platforms including Meta and Google for the purpose of audience matching and ad delivery, as described in the Digital Advertising section above.
• We may share personal data with ticketing, payment and streaming providers (such as Swapcard, HubSpot, Dacast and Dacast’s InPlayer service) in order to process bookings and purchases and to provide access to livestream and on-demand content.
• We may share personal data as part of a sale, merger or acquisition, or other transfer of all or part of our assets, including as part of a bankruptcy proceeding.
• We may share personal data pursuant to a subpoena, court order, or other legal process or as otherwise required or requested by law, regulation, or government authority programs, or to protect our rights or the rights or safety of third parties.
• We may share personal data with our professional advisors, lawyers, accountants, and auditors.
• We may share personal data with your consent or as otherwise disclosed at the time of data collection or sharing.

Our main service providers are:

• HubSpot: our email system, our contact records, our forms and the payment pages for the Livestream Pass and the Founders Circle. Our HubSpot account uses HubSpot’s EU data region.
• Cloudflare: hosts our website. It handles the technical information every website receives, such as your IP address, in order to deliver pages and protect the site, including the check on our forms described above (Cloudflare Turnstile).
• Swapcard: conference ticketing and registration. When you book, you give your details and payment to Swapcard.
• Dacast: our livestream and recordings of past sessions, with access managed through Dacast’s InPlayer service.
• Givingtech: our donation form for donors in the United States, the United Kingdom, the Netherlands, Switzerland and Canada. Donors elsewhere give through a HubSpot form.
• Google and Meta: analytics and advertising, as described above, and only if you accept cookies. YouTube, owned by Google, hosts our films, and Google Fonts provides the typefaces on our website.

Transfers outside the UK

Some of our service providers are based outside the UK, or use staff or sub-processors outside it, including in the United States. When personal data is transferred outside the UK, we make sure it is protected by appropriate safeguards, such as UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the International Data Transfer Addendum to the EU standard contractual clauses. You can ask us for more information about these safeguards.

How long do we keep your data?

We keep data for as long as we need it for the purpose it was collected for. In particular:

• Email subscriptions: for as long as you stay subscribed. If you unsubscribe, we keep your email address on a list of people not to email, so that we do not contact you again by mistake.
• Contacts who do not engage: if you have not opened or clicked any of our emails for two years, we remove you from our mailing lists.
• Bookings, purchases and donations: six years, to meet tax and accounting rules.
• Ticket enquiries: two years.
• Ticket applications that are not approved: until the end of the year of the event they were for.
• Scrambled IP addresses used to limit enquiries: one day after they were last used.
• Website analytics: Google Analytics keeps detailed data for 14 months.
• Your cookie choice: 12 months.

Otherwise, we keep your data for as long as you have a relationship with ARC, or until we no longer need it.

Your rights

You have a variety of rights about the way we process your data. These are as follows:

• Where our use of your data requires consent, you may withdraw this consent at any time.
• You may object to our use of your personal data in certain circumstances, e.g., where we rely on our legitimate interest to process data.
• You may request a copy of the data we hold about you.
• If we are carrying out profiling, you may ask us not to do so.
• You may request that we rectify or erase your personal information.
• You may request that we restrict the processing of your personal information.
• Under certain circumstances, you may ask us to port personal information about you that you have provided to us to you or to a third party.
• You can change your ARC Ideas streams, unsubscribe from ARC Ideas or unsubscribe from all our emails at any time, using the links at the foot of every email.
• You can withdraw your cookie consent at any time through “Cookie settings” at the foot of every page.

If you wish to exercise any of these rights, please contact us using the contact details set out below.

If you are not satisfied with our handling of your personal data, we would appreciate the opportunity to discuss this with you and resolve and address any concerns you have. Additionally, you have the right to lodge a complaint against us, with the UK Information Commissioner’s Office (www.ico.org.uk/make-a-complaint). We are registered with the Office of the Information Commissioner (ICO).

Other Websites

Our website and newsletters may contain links to other websites. Please note that when you click on one of these links, you are entering another website for which ARC has no responsibility (even if you access the website via a link on our website). We encourage you to read the privacy notices on all such websites.

Updates

This notice may change from time to time – for example, to take into account changes at ARC or to reflect changes in regulation or legislation. It was last updated on 21 October 2026. Updates to this notice will be posted on this page – please check back from time to time. We will also use reasonable efforts to inform you of any significant changes by email where appropriate.

Contacting us

If you have any questions about this privacy notice, about the way in which we process your data, or if you wish to change the way we use your data, including how we communicate with you, then please contact us:

By email: info@arc-conference.com