Data Protection

How platform data is handled.

ARC_ESM Expert Pool stores operational data needed to manage membership, opportunities, renewals, engagements, availability, and audit controls.

Member Data

The platform stores names, emails, roles, tiers, hubs, renewal dates, status, experience, sectors, markets, and contact preferences.

Authentication Data

Passwords are stored as hashes. Sessions use JWT-based authentication. Role data determines dashboard access.

Operational Data

Engagements, opportunities, renewals, availability, training progress, and audit logs are used to run the Expert Pool.

Opportunity Activity

When signed-in members download a ToR or click Apply Now, this is recorded so the ARC team can manage recruitment; only administrators can see it. Applications and CVs are sent by email from the member's own email account directly to ARC HR; the portal does not store them. Signed-out visitors are counted anonymously with a random cookie; no IP address is stored.

Payment Data

The app records renewal amounts, providers, references, status, and payment dates, and issues an official receipt for each confirmed payment that members can download from their dashboard. Card details are handled by payment providers, not stored in the app.

Access Control

Dashboard routes are protected by role. Admin access is limited to Admin and Super Admin users. Super Console is limited to Super Admin users.

User Rights

Users should contact ARC_ESM support to request profile corrections, data access, or data protection review.