Privacy Policy

01Who we are

This Privacy Policy explains how Achievers FZE ("ArrivalesX7", "we", "us") collects, uses, and protects your information when you use arrivalesx7.com and related services. The data controller is Achievers FZE, UAE, AJ FZE.

Last updated: 31st Oct 2026.

02Data Controller and Lawful Processing

The Operator acts as the data controller for personal data processed in connection with the administration and operation of ArrivalesX7, except where another entity is expressly identified as an independent controller.

We process personal data only where an applicable legal basis permits such processing, including the performance of contractual obligations, compliance with legal requirements, legitimate interests where recognized by applicable law, or the data subject's valid consent where required.

Our purposes include account administration, transaction fulfillment, profile publication requested by users, security, fraud prevention, customer assistance, lawful accounting, and the operation of authorized referral and payout functions.

Where a processing activity requires separate consent, including certain marketing, tracking, or optional publication activities, we will obtain such consent through an appropriate mechanism.

We do not rely on acceptance of our Terms of Service as blanket consent for unrelated processing purposes.

Personal data will not be processed for materially incompatible new purposes without providing the information or obtaining the authorization required by applicable law.

03Information we collect

We collect only what we need to run the arena:

• Account data: the email address you sign in with, and optional two-factor authentication settings.
• Listing / slot data: the name, title, bio, category, contact details, website, social links, and images you submit for a slot. This information is intended to be public and can differ from your account details.
• Uploaded media: profile images and Story image/video files, plus their generated thumbnails.
• Usage data: profile views (every open of a profile is counted), Story views, visits to the site and the visitor's country (each recorded against a random anonymous identifier, without your IP address), sign-in records with IP address and timestamp, and basic security/rate-limiting signals.
• Transaction data: your orders, tickets, invoices, referral and wallet activity. Card details are handled by our payment processor and are never stored on our servers.

04How we use your information

• To provide the service: create and display your listing, issue tickets and invoices, and keep the map accurate.
• To communicate: send sign-in codes, purchase receipts, approval/rejection notices, and other transactional messages.
• To operate referrals and wallets, and to process manual payouts you request.
• To keep the arena safe: review new listings and edits, prevent abuse and fraud, and enforce our Terms.
• To meet legal, accounting, and tax obligations.

05Public information

Your approved listing — image, display name, and the profile fields you filled in — is visible to anyone, with no account required. Empty fields are hidden rather than shown blank. The total number of times your profile has been viewed is shown on it; the day-by-day breakdown is private to you and shown only in your dashboard.

06Public Profiles, Search Engines, and Third-Party Indexing

Approved public profiles may be accessible worldwide without user authentication and may be discovered, indexed, cached, archived, linked to, or referenced by third-party search engines, social networks, automated systems, and other publicly accessible services.

Public information may include display names, profile images, biographies, professional descriptions, approved contact details, external website links, and other fields intentionally submitted for public display.

Before publication, users will be informed which information will become publicly accessible and which available visibility or search-indexing preferences apply.

The Operator controls the publication of content on its own Platform but does not control independent search engines, third-party websites, external archives, or copies lawfully retained outside its systems.

Where a valid request to remove or restrict personal information is received, the Operator will take the measures required by applicable law within systems under its control and will provide reasonable information about available third-party removal procedures.

The Operator cannot guarantee immediate removal of previously indexed information from independent services or the complete elimination of copies retained by third parties.

Nothing in this section restricts rights to erasure, objection, or restriction available under applicable data-protection law.

07Sharing with third parties

We do not sell your personal data. We share it only with service providers that help us operate, under contract and only as needed:

• a payment processor to take payments and issue refunds;
• an email provider to deliver transactional messages;
• cloud storage and a content-delivery network to host and serve media;
• an analytics provider (Google Analytics) to measure how the site is used;
• hosting and infrastructure providers.

We may also disclose information where required by law or to protect our rights and users.

08Cookies and sessions

We use strictly necessary cookies to keep you signed in, to hold your cart and to remember trusted devices. We also set a random anonymous identifier (cookie x7_vid, one year) that counts visits, profile views and story views and the country visitors come from; it carries no name or email and is not used for advertising. We do not use advertising cookies.

With your consent only, we also use Google Analytics 4, a web analytics service provided by Google, to understand how the site is used: which pages are visited, the type of device and browser, the approximate location, and how visitors arrive. Google Analytics sets cookies (such as _ga) in your browser and receives your IP address and page-view data. It stays switched off until you accept analytics in the cookie notice, and you can withdraw at any time. We do not use it for advertising, and we do not send it the details of your account or listing.

You can see exactly what we use, and change your choice at any time, in our Cookie Policy. You can also block or delete cookies in your browser settings, or install Google's opt-out add-on at https://tools.google.com/dlpage/gaoptout.

09Data retention

• Account and listing data: kept while your account is active and as needed for legal/accounting purposes.
• Stories: displayed publicly for 24 hours, then retained for up to 90 days from upload before the record and media are automatically and permanently deleted.
• Logs: sign-in and activity logs are kept for a limited period for security and audit.

10Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal data, and to object to certain processing. To exercise any of these, contact us at support@arrivalesx7.com You may also have the right to complain to your local data-protection authority.

11Security

We use passwordless sign-in, optional two-factor authentication, encryption in transit, and access controls to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to notify you where required if something goes wrong.

12International transfers, children, and changes

Your data may be processed in countries other than your own; where it is, we use appropriate safeguards. The service is not directed to children under the age required by your jurisdiction. We may update this policy from time to time; material changes will be posted here with a new date.

13Age Eligibility and Protection of Minors

ArrivalesX7 accounts, digital slot purchases, referral participation, and payout features are intended for individuals aged 18 years or older, or any higher minimum age required by applicable law.

The Operator may implement proportionate age-assurance and identity-verification measures to enforce these restrictions.

We do not knowingly permit ineligible minors to operate paid accounts or participate in referral payout activities.

Where we reasonably identify an account operated by an ineligible minor, we may restrict the account, protect the associated personal information, and take appropriate steps to verify eligibility, notify a parent or legal guardian where required, or close the account in accordance with applicable law.

Personal data relating to children will be subject to any enhanced protections required by applicable child-safety and data-protection legislation.

Users may report suspected child-safety violations through our designated reporting channel, and such reports will be assessed with appropriate priority.

14User-Submitted Personal Information

Users are responsible for exercising appropriate care when choosing personal, professional, or contact information for public publication.

Users must not upload another individual's private information, photograph, identifying details, or protected personal data without an appropriate lawful basis and any permissions required by law.

The Operator may restrict the display of contact details, sensitive information, or other material where publication presents a foreseeable privacy, security, identity-theft, or legal risk.

The Operator's review and approval of a profile does not constitute a determination that all submitted information is accurate, authentic, lawful, or suitable for unrestricted public dissemination.

Users are encouraged not to publish identification documents, financial credentials, private residential addresses, passwords, or other information that could expose them or third parties to significant harm.

15Account Closure, Data Erasure, and Legal Retention

Users may request account closure or exercise applicable rights to access, correct, export, restrict, object to, or erase their personal data.

Requests will be assessed under applicable data-protection law, and we may take proportionate steps to verify the identity or authority of the requester before disclosing, modifying, or deleting protected information.

Account closure, public profile removal, termination of a digital placement licence, and deletion of underlying transaction records are distinct processes and may have different legal consequences.

Where erasure is legally required, we will remove or anonymize the relevant data within the applicable scope and timeframe.

We may retain limited information where necessary to comply with legal, tax, accounting, anti-fraud, dispute-resolution, or recordkeeping obligations, provided such retention has a lawful basis and is limited to what is necessary.

Data retained for such purposes will not automatically remain publicly visible and will be protected by appropriate access restrictions.

16Data Retention and Deletion Standards

Personal data will be retained only for as long as reasonably necessary for the specific purposes for which it was collected, subject to applicable statutory retention obligations.

Retention periods or the criteria used to determine them will be documented for account records, approved public profiles, transaction and invoice records, referral and payout records, security logs, support correspondence, and uploaded media.

Where the Platform provides temporary content features, such as Stories, the applicable display and backend retention periods will be separately disclosed.

Deletion from active systems may be followed by a limited period during which residual information remains in secured backup systems, subject to documented deletion cycles and lawful retention requirements.

The Operator may preserve relevant records where reasonably necessary in connection with a genuine legal dispute, regulatory investigation, or legal preservation obligation.

Information that is no longer required will be deleted, anonymized, or otherwise handled in accordance with applicable law.

17Service Providers and International Data Transfers

The Operator may engage authorized third-party providers for payment processing, hosting, cloud storage, email delivery, security, customer support, and other services necessary for lawful Platform operations.

Personal data will be shared only to the extent reasonably necessary for the relevant purpose and in accordance with applicable legal requirements.

Where a provider processes personal data on our behalf, we will implement appropriate contractual and organizational safeguards, including confidentiality and security obligations where required.

Personal data may be transferred to or processed in jurisdictions outside the user's country of residence where permitted by applicable law and subject to any required transfer safeguards.

Independent third-party services accessed through links supplied by users operate under their own terms and privacy notices. The Operator is not the controller of data independently collected by such services merely because they are linked from the Platform.

18Information Security and Incident Response

The Operator implements technical and organizational security measures proportionate to the nature of the personal data processed and the risks associated with the Platform.

Such measures may include access controls, authenticated account access, encryption in transit, monitoring, security logging, restricted administrative permissions, and incident-response procedures.

Although the Operator takes reasonable measures to protect personal information, no internet-based service can guarantee absolute security.

If a personal-data incident occurs, we will investigate, contain, document, and address the incident and notify affected individuals or competent authorities where and within the periods required by applicable law.

This statement does not exclude the Operator's legal responsibility to maintain appropriate security safeguards or comply with mandatory notification obligations.

19Marketing Communications and User Choices

Essential service messages, including authentication codes, transaction confirmations, security notifications, and necessary account communications, may be sent where permitted for the operation of the service.

Promotional emails, direct marketing messages, and other optional commercial communications will be sent only where the relevant legal requirements have been satisfied.

Where consent is the applicable legal basis, users may withdraw that consent through the available preference controls or unsubscribe mechanisms.

Withdrawal of marketing consent will not prevent the delivery of communications necessary to fulfill an existing transaction, maintain account security, or comply with legal obligations.

Public profile information will not automatically be treated as permission for unrestricted direct marketing by the Operator or other users.

20Profile Analytics and Usage Measurement

The Platform may process limited interaction data to calculate profile views, Story views, detect automated activity, reduce duplicate counts, maintain security, and provide account holders with basic performance information.

Where reasonably possible, analytics will use aggregated, pseudonymized, or otherwise minimized data rather than directly identifying individual visitors.

View counts may be estimated, filtered, delayed, or adjusted to account for automated traffic, repeated visits, system errors, or suspected manipulation.

Unless explicitly stated otherwise, the Platform does not guarantee that analytics figures represent unique human viewers or independently audited audience measurements.

Any non-essential tracking technologies will be subject to applicable notice and consent requirements.

21Contact

Questions about privacy? Email: support@arrivalesx7.com

Who operates ArrivalesX7 is set out in our Legal Notice.