Privacy Policy

Privacy Policy

Last Updated: April 07, 2026

Arna Luxe ("we," "us," or "our") is committed to protecting your privacy. This policy outlines how we collect, use, and safeguard your personal information when you visit arnaluxe.com (the "Site"), make a purchase, or interact with our services (collectively, the "Services").

By using our Services, you agree to the terms of this Privacy Policy.

1. Changes to This Policy

We may update this policy periodically to reflect changes in practices, legal requirements, or operational needs. The revised version will be posted on the Site with an updated "Last Updated" date.

2. Information We Collect

We collect personal information to provide and improve our Services. This includes:

A. Information You Provide Directly

  • Contact Details: Name, email, phone number, shipping/billing addresses.
  • Order Information: Payment details (processed securely via Shopify Payments/PayPal), purchase history.
  • Account Data: Username, password (hashed), and security preferences.
  • Communications: Messages submitted via customer support or feedback forms.

B. Automated Collection (Usage Data)

  • Device/Browser Information: IP address, operating system, browser type.
  • Interaction Data: Pages visited, clickstream patterns, cart activity (via cookies and similar technologies).
  • Location Data: Generalized from IP or device settings (for shipping/tax purposes).

C. Third-Party Sources

  • Payment Processors: Shopify, PayPal (for transaction completion).
  • Analytics Providers: Google Analytics (aggregated usage insights).
  • Marketing Partners: Meta, Google (ad performance metrics, with opt-out options).

3. How We Use Your Information

Purpose

Legal Basis

Fulfill orders, process returns

Contractual necessity

Send transactional emails (e.g., order confirmations)

Legal obligation

Personalize marketing (e.g., tailored ads)

Consent (opt-in)

Prevent fraud, enhance security

Legitimate interest

Improve Site functionality

Legitimate interest

Note: EEA/UK residents may withdraw consent or object to processing where applicable (see Section 8).

4. Cookies & Tracking Technologies

We use cookies to:

Manage Preferences: Adjust browser settings to block cookies (may limit functionality). We honor the Global Privacy Control (GPC) signal for opt-outs.

5. Data Sharing & Disclosure

We only share information as necessary with:

  • Service Providers: Shipping carriers (FedEx, DHL), IT support.
  • Legal Compliance: In response to subpoenas or lawful requests.
  • Business Transfers: During mergers/acquisitions (with confidentiality safeguards).

No Sale of Data: We do not sell personal information as defined under CCPA/CPRA.

6. International Data Transfers

Data may be processed outside your country (e.g., U.S. servers). For EEA/UK transfers, we use:

  • Standard Contractual Clauses (SCCs).
  • UK International Data Transfer Agreement (IDTA).

7. Security & Retention

  • Encryption: SSL/TLS for data in transit; PCI DSS compliance for payments.
  • Retention Periods:
    • Orders: 7 years (tax compliance).
    • Accounts: Until deletion request.
    • Marketing data: 3 years post-last interaction.

8. Your Rights

Depending on residency, you may:

  • Access/Delete your data.
  • Correct inaccuracies.
  • Opt out of marketing (via email footer or this form).
  • Lodge complaints with your local DPA (EEA/UK).

To Exercise Rights: Email support@arnaluxe.com with verification details.

9. Children’s Privacy

Our Services are not for users under 16. We do not knowingly collect their data.

10. Contact Us

For questions or requests:
Email: support@arnaluxe.com
Mail: Arna Luxe Legal Team