We deliver the messages people asked to receive
Arcada Info plans, builds and delivers customer communications on behalf of the brands that hire us: service notifications, product news, newsletters and special offers over email, SMS and push. We work only with contact data collected by our clients with prior consent, and every message we send carries a working way out.
- Consent-based data only
- No purchased, rented or scraped lists
- Unsubscribe in every message
- Opt-outs honored within 24 hours
- SPF, DKIM and DMARC on every sending domain
A communications service provider, not a data broker
Arcada Info was set up to run the customer communication programs that brands do not want to build in house. Our clients own the relationship with their customers and own the data. We are the team that turns that relationship into messages people actually want: an account notice that arrives on time, a newsletter that is worth opening, an offer that is relevant to the person receiving it.
We never assemble audiences for our clients. We do not scrape websites, we do not buy or rent databases, and we do not accept lists from public data vendors. Every contact record we process arrives from the client that collected it, under a written agreement, with a consent record attached to it.
What we are responsible for
Campaign planning, message design and copy, template build, sending infrastructure, authentication, delivery monitoring, complaint and bounce processing, suppression management and reporting back to the client.
What the client is responsible for
Collecting the contact data, obtaining and recording consent, defining what the audience agreed to receive, and instructing us in writing on the purpose of each campaign. The client remains the data controller.
What we send
Four message types, three channels, one permission standard applied to all of them.
Service and account notifications
Messages a customer expects because of an account they hold: confirmations, security and login notices, status updates, changes to terms, payment and document reminders. Sent to the address the customer registered themselves.
Newsletters and product news
Scheduled updates about what changed in the product the recipient uses: new features, releases, schedule and availability changes, editorial content. Frequency is agreed with the client and capped per recipient.
Promotional campaigns and special offers
Commercial messages sent only to contacts who hold a marketing consent record with the brand. Recipients who opted into service messages only are excluded from these campaigns by default, at the list level.
Lifecycle and reactivation flows
Welcome journeys, onboarding sequences, milestone messages and win-back flows, triggered by events the client shares with us. Inactive contacts are sunset rather than mailed indefinitely.
Channels
Email, SMS, web and mobile push. Each channel carries its own consent flag, and a contact who opted out of one is not moved to another.
Segmentation
Relevance is built from the data our client lawfully holds about its own customers. We do not enrich audiences with third party data sets.
Deliverability operations
Domain authentication, IP and domain warm-up, seed testing, bounce and complaint processing, feedback loop handling, suppression list management, reporting.
From contract to send, and the checks in between
The same sequence runs for every client program we operate. No campaign leaves our systems before all five steps are complete.
-
Contract and data processing agreement
Before any data moves, we sign a service agreement and a data processing agreement with the brand owner. The document sets out our role as processor, the categories of data, the purposes we may use it for, the retention period, the approved subprocessors and the security measures on both sides.
-
Data intake from the client
The brand transfers its own first-party customer records to us over an encrypted channel. We accept data from one source only, the client that collected it. We do not scrape, buy, rent, swap or co-register data, and we do not accept lists whose origin the client cannot document.
-
Consent and eligibility check
For every record we look at what the person agreed to, when they agreed, and where the consent was captured, normally at account registration or on a signup form operated by the brand. Records without a marketing consent are limited to service messages or excluded entirely. Records already on a suppression list are removed before anything else happens.
-
Build, review and test
Templates carry the sender brand, a real postal address, a plain description of why the recipient is receiving the message, a one-click unsubscribe link and a List-Unsubscribe header. Every campaign is proofed, rendered across major clients and sent to a seed list before it reaches the audience.
-
Send, monitor, and honor every opt-out
Delivery, bounce, complaint and unsubscribe streams are monitored during and after the send. Opt-outs and spam complaints are written to a permanent, brand-wide suppression list, normally within minutes and in every case within 24 hours. Hard bounces are removed. Sends stop if complaint rates cross the threshold we agree with the client.
Who you are hearing from
If you received a message prepared by us, it was sent for one of the brands below and it carries that brand in the sender name.
Here2Win
Arcada Info operates the customer communication program for the Here2Win brand: account and service notifications, product news and promotional campaigns for registered users of the platform. The brand owner is the data controller of those customer records and obtained consent from each user during account registration. The records were transferred to Arcada Info for the purpose of running these communications, under a data processing agreement. Sending domains used for this program are dedicated to it and authenticated with SPF, DKIM and DMARC.
To stop receiving these messages, use the unsubscribe link in any message or write to unsubscribe@arcada-info.com.
Roles, in plain terms
The brand decides why a message is sent and holds the relationship with the recipient. Arcada Info decides how it is delivered and is accountable for the sending practice. Both roles are written into the agreement, and either party can be contacted about a recipient request.
Our sending standards
These rules are not aspirational. They are the conditions under which we accept a client program, and we end programs that will not meet them.
Permission
- Consent before contact. We message a person only if the client holds a record of that person agreeing to be contacted, captured at signup, at account registration or on a form the client operates.
- Documented source. The client must be able to state, per list, where the data came from and when consent was given. Lists that cannot be documented are not loaded.
- Never bought, never scraped. We do not use purchased, rented, appended, harvested or co-registered data, and we do not use data obtained from public data vendors.
- Scope respected. Consent for service messages is not treated as consent for marketing. Consent for one brand is never reused for another.
Every message we send
- Identifies the sender by brand name and includes a valid physical postal address.
- Explains the reason the recipient is on the list.
- Carries a one-click unsubscribe plus a List-Unsubscribe header, working without login and without a survey in the way.
- Has an honest subject line and header. No deceptive from-names, no misleading subjects, no hidden advertising.
Opt-outs and complaints
- Processed within 24 hours of receipt, normally within minutes, and applied across every future campaign for that brand.
- Permanent. A suppressed address is never reactivated by a later import. Only the person themselves can opt back in through the brand.
- Monitored mailboxes. unsubscribe@, privacy@ and abuse@ on our domain are monitored every business day, and feedback loop complaints are ingested automatically.
- Circuit breaker. If complaint or bounce rates exceed the agreed threshold, the program is paused and the list is re-verified with the client before any further send.
Technical and legal
- Authentication. SPF, DKIM and an enforced DMARC policy on every sending domain, with dedicated subdomains per brand and per stream.
- List hygiene. Validation before import, removal of hard bounces and role addresses, and sunsetting of contacts who have not engaged in twelve months.
- Audience restrictions. No messaging to people below the legal age for the client's product, and suppression by jurisdiction where local rules require it.
- Applicable law. Programs are run against GDPR and the ePrivacy rules in the EU and UK, CAN-SPAM in the United States, CASL in Canada and the Spam Act in Australia, plus the acceptable use policy of the platform used to deliver.
The full text is published as our Anti-Spam and Permission Policy. It applies to us and to every client whose program we run, and breach of it is grounds for immediate termination of the program.
How we handle personal data
Our role
For client campaigns we act as a processor. The client is the controller. We process contact records only on documented instructions and only for the agreed purpose. For our own website and business contacts we are the controller.
What we hold
Contact identifiers such as email address, phone number and name where provided, together with delivery and engagement events: sent, delivered, opened, clicked, bounced, unsubscribed, complained.
Retention
Campaign data is kept for the term of the client agreement and deleted or returned when it ends. Suppression records are kept indefinitely, because that is the only way to guarantee an opt-out is never overwritten.
Security
Encryption in transit and at rest, access limited to named staff on a need to know basis, multi-factor authentication on all administrative systems, and audit logging of exports.
Subprocessors
Sending platforms, SMS aggregators and hosting providers, each under contract with equivalent data protection terms. The current list is available to clients and to any recipient who asks.
Your rights
Access, correction, erasure, restriction, objection and portability. Write to privacy@arcada-info.com and we respond within 30 days, coordinating with the brand where the request concerns their records.
Stop the messages, or ask us what we hold
You do not need an account, a login or a reason. Any of the three routes below works, and none of them costs you anything.
Unsubscribe
Use the unsubscribe link at the bottom of any message you received, or email unsubscribe@arcada-info.com from the address you want removed. We suppress it across every campaign for that brand, within 24 hours.
Privacy request
To ask what data we hold about you, to correct it or to have it erased, write to privacy@arcada-info.com. Include the address or number that received the message so we can find the record. We answer within 30 days.
Report abuse
If you believe a message was sent to you without permission, tell us at abuse@arcada-info.com and attach the full message headers if you can. We open an investigation on the next business day and report back with what we found.
Talk to us
- Legal entity
- Liliakona OÜ
- Registration number
- 17368980
- Registered address
- Rotermanni tn 6, Tallinn, 10111, Estonia
- General enquiries
- info@arcada-info.com
- Privacy and data
- privacy@arcada-info.com
- Abuse reports
- abuse@arcada-info.com
- Unsubscribe
- unsubscribe@arcada-info.com
- Telephone
- +372 5812 349
- Office hours
- Monday to Friday, 09:00 to 18:00 EET