Privacy Policy

Last updated on July 17, 2026

This Privacy Policy describes the information collection, use, retention, and sharing practices of Arrow International, Inc. and its affiliates and subsidiaries ("Arrow," "we," "us," "our") when you interact with us through any of our websites that link to this Privacy Policy (the "Sites") and when you interact with us offline, such as when you contact us via telephone or by other offline means (collectively, the "Services"). To learn about how we collect and use personal information in connection with our Arrow Rewards Program, please see the Arrow Rewards Privacy Policy.

As used in this Privacy Policy, "personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person. Personal information includes "personal data", as such term is defined under applicable data privacy laws.

OUR ROLE IN DATA PROCESSING

To the extent the General Data Protection Regulation ("GDPR"), Regulation (EU) 2016/679, and the UK Data Protection Act 2018 ("DPA") apply (collectively referred to in this Privacy Policy as "EU or UK data protection laws"), the entity responsible for the collection and use (processing) of your personal information is Cowells-Arrow Bingo Company d/b/a Cowells Arrow Bingo UK ("Cowells"), the data controller. You can contact Cowells by calling 01473 240028 or by mailing a letter to:

Whitehouse Business Centre
Unit 2, Lovetofts Drive
Ipswich, IP1 5SF, United Kingdom

Where we process information in connection with the Services we provide to an enterprise customer, the customer is the data controller and we are the data processor, and generally process personal information pursuant to the customer's instructions. In such instances, please contact the customer with any inquiries or to exercise your privacy rights (aka "data subject rights") and we will work with the customer to fulfill them pursuant to the customer's instructions. For example, if the Services include point-of-sale ("POS") or back-office software that a customer uses to manage its own patrons or end users, the customer determines what personal information is entered into the POS, and we process that information solely to provide, host, and support the POS on the customer's behalf.

PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG

We collect personal information as you engage with our Services, including online and offline interactions (e.g., customer service calls, sales interactions, and event participation).

Website Contact Form. When you contact us, we collect, from you, your name, company name, whether you have a 501(c)(3) license, email address, company mailing address, state/region, phone number) and any additional information you choose to include in your message. We use this information to respond to your questions or inquiries about our products, improve our products, and to troubleshoot where necessary. To the extent the EU or UK data protection laws apply, the legal basis for the processing of this information is that it is necessary for the performance of the service requested by you. We retain this information for as long as necessary to respond to your inquiry and for a reasonable period thereafter to maintain records of communications, unless a longer period is required by law.
Create an account. When you create an account, we collect, from you, your personal identifiers (name, email address), and your selected password (stored in hashed format). We use this information to create and maintain your account, communicate with you, facilitate your access to the Services, improve our services, and other internal business purposes. To the extent the EU or UK data protection laws apply, the legal basis for this processing activity is the performance of a contract. If you do not provide this information, we will not be able to set up your account. We retain this information for as long as necessary to respond to your inquiry and for a reasonable period thereafter to maintain records of communications, unless a longer period is required by law. If you choose to opt-in to receive marketing emails, please see the "Subscribe to our newsletter" section for more information.
Enter into a business relationship. When you enter into a business relationship with us, we collect, from you, your personal identifiers (name, email address, telephone number), professional or employment-related information (job title, company name), and sensitive financial information (credit/debit card number, security code, expiration date, bank account information), however, payment information is processed by our third-party payment processor; we only receive limited payment details (e.g., card type and last four digits). We use this information to communicate with you and to facilitate the business relationship between Arrow and the organization you represent.
Make a purchase. When you make a purchase, we collect, from you or from our third-party payment processor, your identifiers (name, email address, physical address) and your sensitive financial information (credit/debit card number, security code, expiration date). We use this information to process your payment for the selected product; however, we do this using the services of a third-party vendor and only get access to card type, and the last four digits of the card. To the extent the EU or UK data protection laws apply, the legal basis for this processing activity is the performance of a contract. We retain purchase-related payment information for as long as necessary to complete your transaction, and thereafter in accordance with our payment processor's applicable retention practices, unless a longer retention period is required by law. If you choose to opt-in to receive marketing emails, please see the "Subscribe to our newsletter" section for more information.
Post a review. When you write a review and post it to the Sites, we collect, from you, your personal identifiers (name) and any information you choose to include in your review. We post this information to the Sites for public viewing. Because our Sites are publicly accessible, any information that you choose to include in your post can be viewed by others or used by them as they see fit. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. You can revoke your consent at any time with effect moving forward by emailing us at Privacy@arrowinternational.com. We retain this information until you request deletion or the review is removed.
Participate in our messaging programs. If you consent to participate in any of our messaging programs, we will send automated messages to the telephone number provided (personal identifier) for the purposes disclosed at the time you provided your consent. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. Consent is not a condition of purchase. Message and data rates may apply. Message frequency varies. You can opt out at any time by replying STOP to any text message and can reply HELP for help. For more information, please see our Text Messaging Term of Services. We do not share text messaging originator opt-in data and consent information with any third parties except service providers that assist us in the delivery of text messages.
Subscribe to our newsletter. When you subscribe to our newsletter, we collect, from you, your personal identifiers (name, email address, phone number). We use this information to respond to inquiries, schedule a facility tour/demo, or send you news and updates about our products and services. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. You may revoke your consent at any time with effect moving forward by clicking the "unsubscribe" link included within each email we send to you. However, we will continue to send you service-related messages. We, through our service provider, use tracking pixels to determine whether you open emails, the time of opening, information about the device you use (including IP address), whether you interacted with the email, the topic of the email, whether it was delivered, sender and recipient addresses. We use this information to:
1. measure the effectiveness of our communications and make them more attractive, particularly by improving email subject lines;
2. limit the frequency of sending or stop it, ensuring emails continue to reach their recipients;
3. detect and analyze suspected fraud;
4. personalize communications based on your interest in received emails and interaction with them; and
5. offer tailored content or advertisements on other websites, applications, or communication channels.
You may revoke your consent at any time with effect moving forward by clicking the "unsubscribe" link included within each email we send to you.
Interact with us on social media. When you interact with our social media pages on social networking sites, such as Facebook, X, LinkedIn, Instagram, YouTube, TikTok, and Pinterest (each a "Social Media Page" and collectively, "Social Media Pages"), we collect your name, profile picture, and any content you contribute (e.g., comments, shares, likes, messages). We use this information to promote our products, manage events and invitations, communicate with users, and analyze how our content is received so we can improve our communications. Where EU or UK data protection law applies, our legal basis is our legitimate interest in promoting our products and communicating with users. Because our Social Media Pages are public, anything you post there can be viewed and used by others. To request deletion of content, or to object to our processing of your information, email Privacy@arrowinternational.com.
Page Insights. The social networks provide us with anonymized, aggregated statistics about visitors to our Social Media Pages (such as age, gender, location, device, reach, and engagement). To generate these, the networks collect your IP address and usage data via browser trackers or your mobile advertising ID (Apple IDFA / Google GAID). For this processing we act as joint controllers with the relevant network; where EU or UK law applies, our legal basis is our legitimate interest in evaluating and improving our advertising. We do not retain this data independently, the network is responsible for it and for informing you about this processing. To object, email Privacy@arrowinternational.com.
Information controlled by the social networks. We do not control how these networks process your information for their own purposes (including marketing), how long they retain it, or whether they share it with third parties. The networks process personal information in the United States, where laws may be less protective than in your country and where courts, law enforcement, or regulators may in some circumstances access your information. If you are logged in to a network, it may automatically link your visit to our page with your account or advertising ID to deliver tailored content and ads. For details, see each network's privacy policy: Facebook's Privacy Policy, X's Privacy Policy, LinkedIn's Privacy Policy, Instagram's Privacy Policy, YouTube's Privacy Policy, TikTok's Privacy Policy, and Pinterest's Privacy Policy.
Interact with the Sites. In addition to the personal information you provide directly to us, we also collect information from you automatically as you use our Sites via cookies, pixels, web beacons, and similar tracking technologies. If you are located in the EU or UK, these trackers won't deploy (i.e. collect your information) unless you provide your consent. To the extent the EU or UK data protection laws apply, the legal basis for the placement and access of strictly necessary cookies is the performance of a contract. These cookies are necessary to provide the Sites to you. To the extent the EU or UK data protection laws apply to placement of non-essential cookies on the Sites, the legal basis for this processing is your consent. You may withdraw your consent at any time with effect moving forward selecting Your Cookie Choices or Your Privacy Choices in the site footer at any time. We use essential, performance, marketing, and analytics cookies to automatically collect certain internet and other electronic network activity information when you interact with the Sites. This includes things like Internet Protocol address (e.g. IP address), location, device type, browser type, browser version, the pages of the Sites that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data. We use this information to: (i) track you within the Sites; (ii) enhance user experience; (iii) conduct analytics to improve the Sites; (iv) prevent fraudulent use of the Sites; (v) diagnose and repair Sites errors, and, in cases of abuse, track and mitigate the abuse; and (vi) market to you more effectively across different web pages and social media platforms based on your browsing habits and history.

As mentioned above, if you are located in the EU or UK, these trackers won't deploy (i.e. collect your information) unless you provide your consent. In the US, our use of third-party marketing and analytics cookies may be considered a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out, select Your Cookie Choices or Your Privacy Choices on the site footer at any time.

In general, you can also disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent. Please note, if you opt out of targeted advertising cookies, your opt-out will be specific to the web browser, app, or device from which you accessed the opt-out. If you use multiple devices, you will need to opt out of each device that you use. If you have a browser-based opt out signal, we will honor it.

Certain third-party marketing and analytics cookies to note on the Sites include the following:

Google Analytics. We use Google Analytics to collect information on your use of the Sites for their improvement. To collect this information, Google Analytics installs cookies on your browser or reads cookies that are already there (for more information about how Google collects and uses the information see here). Google Analytics also receives information about you from applications you have downloaded or services that you use that partner with Google. Google's ability to use and share information collected by Google Analytics about your visits to the Sites or to another application which partners with Google is restricted by the Google Analytics Terms of Use and Privacy Policy. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on, which can be accessed here. You can also adjust your Ad Settings or change settings in your Google My Activity if you are signed into your Google Account. To opt out, please select Your Cookie Choices or Your Privacy Choices in the site footer at any time.
DoubleClick. We utilize DoubleClick by Google to serve ads based on a user's prior visits to our Sites. Each visitor to our Sites receives a different cookie, and the information collected by the cookie is used to generate conversion statistics and allows us to see the total number of individuals who clicked on our ads. DoubleClick enables Google and its partners to serve ads to you based on your visits to our Sites in addition to other websites on the Internet. Please review Google's Privacy Policy for additional information on how Google uses the information collected. To opt out of targeted advertising by Google and this sharing, you can go to Google's Ad Settings, or you can install the DoubleClick opt-out browser plugin. To opt out, please select Your Cookie Choices or Your Privacy Choices in the site footer at any time.
Google Tag Manager. Google Tag Manager is a tag management system to manage tags used for tracking and analytics on the Sites. Tags are small code elements that, among other things, are used to manage traffic and visitor behavior and to test and optimize the Sites. We utilize Google Tag Manager to manage and organize all third-party tags on the Sites and to control when those tags are triggered. You can view more information about Google Tag Manager's privacy practices here.
Google reCAPTCHA Enterprise. We use Google's reCAPTCHA Enterprise application to determine whether visitors to our Sites are genuinely human as opposed to an automated "bot" and to protect our Sites from spam and abuse. As part of this, Google reCAPTCHA Enterprise collects and analyzes user activity information to detect and prevent automated malicious activities and other fraudulent behavior within the Sites. Google uses this information in accordance with its Privacy Policy and Terms of Service.
Meta Pixel. We use Meta Pixel to serve you ads on your social media based on your browsing behavior. Meta Pixel sets a cookie on your device that allows your behavior to be tracked after you have been redirected to the Sites by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes and to provide targeted advertising. We do not have access to the information collected through Meta Pixel. The information collected via Meta Pixel is stored and processed by Meta. Meta may link this information to your Facebook account and use it for its own promotional purposes in accordance with Facebook's Data Usage Policy. You can opt out of displaying Facebook ads and sharing by visiting your Facebook Ad Settings. To opt out, please select Your Cookie Choices or Your Privacy Choices in the site footer at any time.
Ad Services by LinkedIn. We utilize Ad Services by LinkedIn to optimize our online marketing campaigns and to provide targeted advertisements to those who visit our Sites. Please review LinkedIn's Privacy Policy for additional information on how LinkedIn uses the information collected. To opt out of targeted advertising by LinkedIn, please visit LinkedIn's Advertising Preferences page. Please select Your Cookie Choices or Your Privacy Choices in the site footer at any time.
HubSpot Analytics. We use HubSpot Analytics to recognize and count the number of people who visit our Sites, as well as collect information on how users engage and interact with our Sites. To collect this information, HubSpot Analytics installs cookies on your browser or reads cookies that are already there. We do not combine the information collected through the use of HubSpot Analytics with personal information. For more information on HubSpot Analytics, please see HubSpot's Privacy Policy. You can disable cookies through your individual browser settings. Please note that if you disable cookies, some of our Sites' features may not function properly or at all. To opt out, please select Your Cookie Choices or Your Privacy Choices in the site footer at any time.
YouTube. We use YouTube (owned by Google) as our video platform to embed content from YouTube on our Sites. YouTube places its own cookies on your device when you visit part of our Sites where a YouTube video is embedded. YouTube uses these cookies to track viewing statistics and assign a unique identifier to the device on which the video is viewed, enabling YouTube to recognize the device. This data is collected by Google. Google can use this data to show relevant advertising and for its own promotional purposes in accordance with Google's Privacy Policy. The Google cookies also allow YouTube and its partners to show you advertisements on and outside of YouTube. To opt-out of this sharing and displaying of YouTube ads, visit Your data in YouTube, where you can clear and control the information YouTube collects on you. To opt out, please select Your Cookie Choices or Your Privacy Choices in the site footer at any time.
Aggregate and anonymize data. We deidentify and/or aggregate the data we collect and use and share it, in deidentified and/or aggregated form, for benchmarking purposes, advertising, and internal analytics. We maintain and use this data in deidentified form. We will not attempt to reidentify the data unless it is necessary to determine whether our deidentification processes satisfy applicable data protection laws.

Arrow will also use the personal information we collect as described in this section to comply with the law, to efficiently maintain our business, and for other limited circumstances as described in HOW WE SHARE YOUR PERSONAL INFORMATION.

Arrow does not use personal information to train large language models.

DATA RETENTION

Unless otherwise stated in this Privacy Policy, we retain your personal information (i) for as long as you maintain an account with us, (ii) until we receive a valid request to delete the information, in which case we will delete or anonymize the information, (iii) until we no longer need the information to fulfill the purposes for which we collected it, or (iv) until the information is no longer needed for a service provider or contractor's operational purpose(s). Subscription, billing, tax, audit, and transaction-related records may also be retained for longer where reasonably necessary for accounting, dispute resolution, chargeback management, tax, audit, and legal compliance purposes.

We use the following criteria to determine whether it remains reasonably necessary to retain your personal information for such purposes or a service provider or contractor's operational purpose(s): (i) whether there is a retention period required by statute or regulations; (ii) the existence of actual or threatened litigation for which we are required to preserve the information; (iii) the statutes of limitations for potential legal claims; and (iv) generally accepted best practices in our industry, including in relation to the safety and security of our properties and assets. When we determine that it is no longer reasonably necessary to retain your personal information for one or more disclosed operational purposes based on the above criteria, we will delete or anonymize your personal information.

HOW WE SHARE YOUR PERSONAL INFORMATION

A. General Sharing

Arrow shares personal information as described in the PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG section, and generally in the following instances:

Within Arrow. We share your personal information within Arrow for the legitimate business purposes of efficiently and effectively providing the Services, such as accounting and customer service support. Access to your personal information is limited to those on a need-to-know basis. To the extent the EU or UK data protection laws apply, the legal basis for this is our legitimate interest in providing the Services more efficiently.
In the event of a corporate reorganization. In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, including without limitation bankruptcy or liquidation, we would share personal information with third parties, including the buyer or target (and their agents and advisors) for the purpose of facilitating and completing the transaction. To the extent the EU or UK data protection laws apply, the legal basis for this is our legitimate interest in carrying out our business operations or, if required by law, consent.
For legal purposes. We share personal information where we are legally required to do so, such as in response to court orders, subpoenas, governmental/regulatory bodies, law enforcement or legal process, including for national security purposes. We may share your information with our legal advisors or auditors to establish, protect, or exercise our legal rights or as required to enforce our terms of service or other contracts or to defend against legal claims or demands. We also share this information with third parties as necessary to: detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; to comply with the requirements of any applicable law; or to comply with our legal obligations. To the extent the EU or UK data protection laws apply, the legal basis for this processing is compliance with the law or our legitimate interest in complying with non-EU data protection laws to which we are subject.
With your consent. Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time with effect moving forward and may do so by contacting us via email at Privacy@arrowinternational.com.

All of the above categories exclude text messaging originator opt-in data and consent. We will not share this information with any third parties except for service providers that assist us in the delivery of text messages.

B. Sharing in the Last Twelve (12) Months

For a business purpose. In the preceding twelve (12) months, Arrow has disclosed the following categories of personal information for a business purpose to the following categories of service providers or contractors:

We have disclosed your personal information to service providers that assist us in providing the Services. These service providers assist us with the following: information technology ("IT") support; web hosting; cloud storage; data analysis; customer service; email delivery; marketing; external auditors; payment processing; distribution; and similar services.
We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Sites and platform errors.
We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Sites.

C. Sale of Personal Information

In the preceding twelve (12) months, Arrow has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out of the sale/sharing through cookies and targeted advertising, please select Your Cookie Choices or Your Privacy Choices in the site footer at any time.

YOUR INFORMATION CHOICES

You have the following choices with respect to your personal information:

Correct or View Your Information. You may access your account to correct or view certain personal information you have provided to us, and which is associated with your account.
Opt Out of Google Analytics. To prevent your personal information from being used by Google Analytics, you can download the Google Analytics opt-out browser, which can be accessed here.
Opt Out of DoubleClick. To opt out of targeted advertising by Google and this sharing, you can go to Google's Ad Settings, or you can install the DoubleClick opt-out browser plugin.
Opt Out of Meta Pixel. You can opt out of displaying Facebook ads and sharing by visiting your Facebook Ad Settings.
Opt Out of Ad Services by LinkedIn. To opt out of targeted advertising by LinkedIn, please visit LinkedIn's Advertising Preferences page.
Opt Out of HubSpot Analytics. To prevent your data from being used by HubSpot, please visit HubSpot's Cookie Policy.
Opt out of YouTube. To opt-out of sharing viewing metrics and the displaying of YouTube ads, visit Your data in YouTube.
Opt Out of Advertising Cookies. All session cookies are temporary and expire after you close your web browser. In addition to opting out of certain trackers in Your Cookie Choices or Your Privacy Choices in the site footer, persistent cookies can be removed by following your web browser's directions. To find out how to see what cookies have been set on your computer or device, and how to reject and delete the cookies, please visit: https://www.aboutcookies.org/. Please note that each web browser is different. To find information relating to your browser, visit the browser developer's Sites and mobile application. If you reset your web browser to refuse all cookies or to indicate when a cookie is being sent, some features of our Sites may not function properly. If you choose to opt out, we will place an "opt-out cookie" on your device. The "opt-out cookie" is browser specific and device specific and only lasts until cookies are cleared from your browser or device. The opt-out cookie will not work for essential cookies. If the cookie is removed or deleted, if you upgrade your browser or if you visit us from a different computer, you will need to return and update your preferences. By clicking on the "Opt-Out" links below, you will be directed to the respective third-party Sites where your computer will be scanned to determine who maintains cookies on you. At that time, you can either choose to opt out of all targeted advertising, or you can choose to opt out of targeted advertising by selecting individual companies who maintain a cookie on your machine. Our use of third-party marketing and analytics cookies is considered a sale/sharing under certain state privacy laws and is also considered to be what is known as interest-based advertising (IBA). To opt out of the sale/sharing through cookies and IBA across various platforms, please visit the Digital Advertising Alliance's YourAdChoices program tools (Your Ad Choices) or visit one of the links below.
- Network Advertising Initiative (NAI) Opt-Out: https://www.networkadvertising.org/managing/opt_out.asp
- Digital Advertising Alliance (DAA) Opt-Out: https://optout.aboutads.info
- European Union (EU) /European Economic Area (EEA) Opt-Out: http://www.youronlinechoices.eu
- In general, you can also disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent.
Opt Out of Email Tracking. You can disable this tracking by blocking automatic loading of images in your email.
Opt Out of Marketing Communications. You may opt out of receiving marketing emails from us by clicking the "unsubscribe" link provided at the bottom of each email we send. Please note that we will continue to send you notifications necessary to the Services.

YOUR DATA SUBJECT RIGHTS

Individuals in the European Union and United Kingdom are entitled to certain rights under General Data Protection Regulation ("GDPR") and the Data Protection Act 2018 ("DPA"), respectively. To the extent these laws apply to our processing of your personal information, you are entitled to the following rights:

Right to access. For any of the processing described above, you have the right to ask us for copies of your personal information. However, this right has some exemptions, which means you may not always receive all the personal information we process. Applicable exemptions may include the management information exemption (data that we process for management forecasting or management planning about a business or other activity), or certain instances of ongoing or prior negotiations with the requestor, among others.
Right to rectification. For any of the processing described above, you have the right to ask us to rectify personal information you think is inaccurate or incomplete.
Right to erasure. When we use cookies and other trackers or send you marketing emails, you have the right to request erasure of your personal information that we are not obligated to keep in some cases (also known as the right to be forgotten). For example, you can request us to delete your personal information if: (i) we no longer need the data for the purpose it was collected for, (ii) we process the data based on your consent and you revoke your consent, (iii) you object to our processing based on legitimate interest (and we do not have an overriding legitimate interest), or (iv) you object to our processing for direct marketing purposes. We may not be able to immediately erase your personal information if we have a lawful reason or a legal or contractual obligation to retain the personal information or continue the processing.
Right to restrict processing. For any of the processing described above, if you believe that your personal information is inaccurate, that our processing is unlawful, or that we do not need your personal information for a specific purpose, you have the right to request that we restrict the processing of this personal information. You also have the possibility to request that we stop processing your personal information while we assess your request.
Right to object to processing. You have the right to object to our processing of your personal information when the legal basis for the processing is pursuant to our legitimate interests by referencing your personal circumstances. This may apply, for example to processing in connection with our social media pages or for purposes of training our models. If you object to our processing, you may also request us to restrict processing of your personal information while we make our assessment.
Right to data portability. You have the right to ask that we transfer the personal information you gave us from one organization to another or give it to you. However, this right only applies when: (i) you have provided your personal information to us; (ii) the legal basis for the processing is your consent or for the performance of a contract; and (iii) the processing is carried out by automated means. You can invoke this right for the processing of the information we automatically collect from you as you interact with the Sites via cookies, pixels, and similar tracking technologies.
Right to lodge a complaint. If you are located in the UK, you have the right to lodge a complaint with the Information Commissioner's Office at: https://ico.org.uk/make-a-complaint/data-protection-complaints/data-protection-complaints/y or accessicoinformation@ico.org.uk at their helpline on 0303 123 1113. If you are located in the EU, you have the right to lodge a complaint with the relevant Supervisory Authority.

To exercise these rights, please email Privacy@arrowinternational.com.

US STATE PRIVACY RIGHTS

The availability of certain Sites may be limited to specific jurisdictions. While this Privacy Policy may reference data privacy laws from various states, such references do not alter or expand the jurisdictional scope of any Site. The terms specific to each Site govern its availability and the laws applicable to it.

Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia are entitled to certain rights under their respective state's comprehensive data privacy law. If you are a resident of one of these states, you are entitled to the following rights:

Right to Access/Know. Unless an exception applies, you have the right to (i) receive confirmation of whether we process your personal information, (ii) receive a list of categories of personal information we have collected, used, disclosed, and sold about you, (iii) receive a list of the categories of third parties to which we have disclosed your personal information, and (iv) access your personal information. If you are a resident of Connecticut, Delaware, Minnesota, Oregon, or Rhode Island, you also have the right to (a) receive a list of specific third parties to which Arrow has sold or disclosed your personal information. If you are a resident of Connecticut, you also have the right to know whether we derived any inferences about you using your personal information or whether we process your personal information for purposes of profiling to make a decision that produces any legal or similarly significant effect on you.
Right to Deletion. You have the right to request the deletion of your personal information that we collect or maintain, subject to certain exceptions. For example, if we are required by law to retain the information that you are asking to be deleted, we would not be able to delete the information until we are legally permitted to delete it.
Right to Correct. You have the right to correct inaccurate personal information that we collect or maintain.
Right to Opt Out. You have the right to opt out of the processing of your personal information for the purposes of: (i) targeted advertising; (ii) profiling in furtherance of any automated decision that produces any legal or similarly significant effect; and (iii) the sale or sharing of your personal information to third parties. We do not have actual knowledge that we sell, share, profile, or process for purposes of targeted advertising the personal information of individuals under the age of 18.
Right to Data Portability. You have the right to request that we transfer your personal information to another organization or give it to you. If you exercise this right, we will provide a copy of your personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another organization.
Right to Non-Discrimination / Non-Retaliation. You have the right not to receive discriminatory treatment (or in California: not to be retaliated against) in the processing of your information if you choose to exercise your privacy rights. Such discriminatory treatment may include but is not limited to (i) the denial of goods or services, (ii) being charged a different price or rate, or (iii) receiving a different level of quality in goods or services.
Right to Limit Use of Sensitive Personal Information (California residents only). You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Services or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver's license number, biometric information, precise geolocation, and racial and ethnic origin. However, Arrow does not process personal information in a manner that gives rise to this right.
Right to Appeal. You have the right to appeal our refusal to take action on your request to exercise your other rights. In order to request an appeal to our refusal please email us at Privacy@arrowinternational.com, subject line: "Appeal My Consumer Request." We will review the appeal and notify you of our response. If we still refuse to take action on your request, you have the right to file a complaint with applicable state regulator, as follows:
- For Colorado residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Colorado Attorney General here.
- For Connecticut residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Connecticut Attorney General here.
- For Delaware residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Delaware Attorney General here.
- For Indiana residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Indiana Attorney General here.
- For Iowa residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Iowa Attorney General here.
- For Kentucky residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Kentucky Attorney General here.
- For Maryland residents: If you are concerned with our response as a result of your appeal, you may submit a complaint to the Maryland Attorney General here.
- For Minnesota residents: If you are concerned with our response as a result of your appeal, you may submit a complaint to the Minnesota Attorney General here.
- For Montana residents: If you are concerned with our response as a result of your appeal, you may submit a complaint to the Montana Attorney General here.
- For Nebraska Residents: If you are concerned with our response as a result of your appeal, you may submit a complaint to the Nebraska Attorney General here.
- For New Hampshire Residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the New Hampshire Attorney General here.
- For New Jersey residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the New Jersey Attorney General here.
- For Oregon residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Oregon Attorney General here.
- For Rhode Island Residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Rhode Island Attorney General here.
- For Tennessee residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Tennessee Attorney General here.
- For Texas residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Texas Attorney General here.
- For Virginia Residents: If you are a concerned with our response as a result of your appeal, you may submit a complaint to the Virginia Attorney General here.

Exercising Your Privacy Rights

If you are a resident of one of the states identified above and wish to exercise your privacy rights, you may submit a request by completing our Web Form or by contacting us via email at Privacy@arrowinternational.com. If you are a California resident, you may also submit your request by calling us toll-free at 1-800-277-6214. To opt out of the sale or sharing of your data through cookies or the processing of your personal information for purposes of targeted advertising, please visit Your Privacy Choices in the Site footer. If we detect an opt-out preference signal (such as the Global Privacy Control signal) communicated from your (or your authorized agent's) browser or device, we will treat the opt-out preference signal as a valid request to opt out of the sale/sharing of your personal information as it pertains to that browser or device (including any associated profile information). If known, we will also apply the opt-out request to any offline sale or sharing of personal information.

When submitting a request to know/access, correct, or delete your personal information, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. In doing so, we will take steps to verify your request by matching information provided by you with the information we have in our records. If we are not able to verify your identity for know/access, correction, or deletion requests with the information provided, we may ask you to provide additional information.

Only you, or a person that you authorize to act on your behalf may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.

Additionally, regarding your rights with respect to personal information that we may process on behalf of a customer, you will need to submit your request to the customer directly. We will assist the customer in fulfilling your request to the extent we are legally or contractually obligated to.

NEVADA RESIDENTS

If you are a consumer in the State of Nevada, you may request to opt-out of the current or future sale of your personal information. We do not currently sell any of your personal information under Nevada law, nor do we plan to do so in the future. However, you can submit a request to opt-out of future sales by contacting us at Privacy@arrowinternational.com regarding the sale of such information. Please include "Opt-Out Request Under Nevada Law" in the subject line of your message.

CROSS-BORDER TRANSFERS

If you are located in the EU or UK and visiting Arrow's EU/UK-based Services:

Some of the service providers that we engage for the provision of our Services (as described above) are located in the United States, which has not been found by the European Union nor the United Kingdom Secretary of State to provide an adequate level of protection of personal information, i.e. a level of protection of fundamental rights and freedoms that is essentially equivalent to that guaranteed within the European Union or United Kingdom. However, we have implemented appropriate safeguards to ensure that any personal information transferred to these service providers remains protected in accordance with the EU and UK data privacy laws. As part of this, we contractually obligate our service providers to adhere to the terms of the European Commission's Standard Contractual Clauses (and UK Addendum), which requires them to protect the personal information they process from the EEA in accordance with the EU and UK data protection laws.

If you are located in the EU or UK and visiting Arrow's US-based Services:

As a US-based entity, we collect the data directly from the United States, meaning there is no cross-border transfer of personal information. However, we still apply reasonable safeguards to protect such personal information from unauthorized access or use, including by implementing technical, administrative, and organizational measures to ensure the information is processed in compliance with the law and for reasons consistent with this Privacy Policy.

DO NOT TRACK

We do not respond to Do Not Track requests. Do Not Track is a preference you can set in your web browser to inform Sites and mobile applications that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

INFORMATION SECURITY

We implement appropriate technical and organizational security measures, such as access controls and encryption, to protect the personal information that we collect and maintain from unauthorized access, destruction, use, modification, or disclosure. However, no security measure or modality of data transmission is 100% secure, and we are unable to guarantee the absolute security of the personal information we have collected from you.

CHILDREN'S PRIVACY

The Services are not intended for anyone under the age of eighteen (18). We do not knowingly collect the personal information of anyone under the age of eighteen (18). If we learn that we have collected or received personal information from individuals under the age of eighteen (18), we will delete the personal information. If you believe we have personal information on individuals under the age of eighteen (18), please contact us at the contact information provided below.

CHANGES TO THIS PRIVACY POLICY

We may amend this Privacy Policy in our sole discretion at any time. If we do, we will post the changes to this page and will indicate the date the changes go into effect. We encourage you to review our Privacy Policy to stay informed. If we make changes that materially affect your privacy rights, we will notify you by prominent posting on the Sites and/or via email, and either obtain your opt-in consent (if required) or provide an opportunity to withdraw your consent.

CONTACT US

If you have any questions about this Privacy Policy or need to access this Privacy Policy in an alternative format due to having a disability, please contact us by email at Privacy@arrowinternational.com (and use "Privacy Inquiry" in the subject line).