Privacy Policy

1. Introduction

Ark Privé ("we", "us", "our") is a private members club operated in Australia. We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our website at www.arkprive.com.au, our member portal, and our mobile application (collectively, the "Services").

By using the Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information you provide directly:

• Full name and email address
• Phone number (optional)
• Profession and location (optional, used in the member directory)
• Membership application details including how you heard about us and a personal message
• Concierge request content (travel, dining, event, business, or general requests)
• Account credentials — passwords are hashed and we never store them in plain text

Information generated through your use of the Services:

• Event RSVP history and attendance status
• Push notification token (if you grant permission in the mobile app)
• Notification and privacy preferences
• Standard server logs including IP address, browser type, and pages visited

3. How We Use Your Information

We use the information we collect to:

• Process and manage your membership application and account
• Provide access to member-only events, the member directory, and concierge services
• Send event reminders, RSVP confirmations, and concierge status updates
• Send membership announcements and club news (where you have opted in)
• Display your profile in the member directory subject to your privacy settings
• Respond to your concierge requests and support enquiries
• Maintain the security and integrity of our Services
• Comply with our legal obligations

We do not sell your personal information to third parties and do not use your information for targeted advertising.

4. Sharing Your Information

We share your information only with service providers necessary to operate the Services:

• Supabase (supabase.com) — database and authentication. Your account data and application records are stored on Supabase infrastructure.
• Resend (resend.com) — email delivery. Used for transactional emails including membership confirmations, event reminders, and account notices.
• Expo (expo.dev) — mobile app platform. Push notification tokens are routed through Expo's push service to deliver alerts to your device.
• Vercel (vercel.com) — website and API hosting.

We only share the minimum data necessary for each service to function. We may disclose your information if required by law, court order, or government authority, or to protect the rights and safety of Ark Privé, its members, or the public.

5. Member Directory

Your name and membership tier are visible to other active members in the member directory by default. Your profession and location are shown by default but can be hidden at any time via Settings → Privacy in the member portal or mobile app.

Your email address and phone number are visible in the directory only to members of equal or higher tier, enabling genuine networking within the club.

6. Push Notifications

If you grant notification permissions in the Ark Privé mobile app, we store a push notification token associated with your account. This token is used solely to deliver event reminders, concierge updates, and membership news to your device.

You can disable individual notification categories at any time through Settings → Notifications in the app or member portal. You can revoke all push permissions at any time through your device's system settings.

7. Data Retention

We retain your personal information for as long as your membership account is active. When you delete your account, your personal data is permanently deleted from our systems immediately. Membership application records may be retained for up to 12 months for administrative purposes.

8. Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. Our security measures include:

• Passwords are hashed using industry-standard algorithms and are never stored in plain text
• All data is transmitted over HTTPS/TLS encryption
• Row-level security policies ensure members can only access their own data
• Optional two-factor authentication (TOTP) is available for all accounts
• Administrative access requires a separate secret key not accessible to members

If you believe your account has been compromised, contact us immediately at members@arkprive.com.au.

9. Your Rights

Under Australian privacy law, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — update your profile at any time through Settings in the member portal or app
• Deletion — permanently delete your account and all associated data (see Section 10)
• Portability — request an export of your data in a machine-readable format
• Opt-out — disable non-essential communications via your notification preferences

To exercise any of these rights or to make a privacy complaint, contact us at members@arkprive.com.au. We will respond within 30 days. If you are unsatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

10. Account Deletion

You can permanently delete your account at any time directly within the Services:

• Member portal — Settings → Danger Zone → Delete Account
• Mobile app — Privacy & Settings → Danger Zone → Delete Account

Deleting your account immediately and permanently removes your profile, event RSVPs, concierge requests, and all associated personal data. This action cannot be undone. Your membership will be revoked and access to all Services will be terminated immediately.

11. Cookies and Tracking

Our website uses session storage solely to maintain your login state in the member portal. We do not use advertising cookies or third-party tracking pixels. Standard server access logs are retained for up to 90 days for security and diagnostic purposes.

12. Children's Privacy

The Services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, active members will be notified by email. Continued use of the Services after any update constitutes acceptance of the revised policy.

14. Contact Us

For any privacy-related questions, requests, or complaints, please contact us: