Privacy policy

At ArratSwell, we are committed to protecting your privacy and ensuring that your personal information is handled responsibly and in accordance with applicable international privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

1. Information We Collect

We collect information that you provide directly to us, as well as information collected automatically when you interact with our website. The types of data we may collect include:

  • Order and Transaction Information: When you make a purchase, we collect your name, billing and shipping address, payment details (processed securely by our payment providers), email address, and order history.
  • Communication Data: If you contact us via email at [email protected], we retain the content of your messages and your email address to respond to your inquiries.
  • Device and Usage Information: We automatically collect certain data such as your IP address, browser type, operating system, pages viewed, time spent on the site, and referring URLs. This helps us improve our website and tailor your shopping experience.
  • Cookies and Similar Technologies: We use cookies and similar tracking technologies to remember your preferences, understand site traffic, and enhance functionality. You can manage cookie preferences through your browser settings.

2. How We Use Your Information

We use the information we collect for the following legitimate business purposes:

  • To process and fulfill your orders, including sending order confirmations, shipping updates, and delivery notifications.
  • To provide customer support and respond to your requests or concerns.
  • To improve our website, products, and services by analyzing usage patterns and customer feedback.
  • To detect, prevent, and address fraud, security issues, or technical problems.
  • To comply with legal obligations, such as tax, accounting, or regulatory requirements.
  • To send you promotional communications, but only if you have opted in to receive them. You can opt out at any time by emailing [email protected].

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

  • Performance of a Contract: Processing is necessary to fulfill your order or to take steps at your request prior to entering into a contract.
  • Legitimate Interests: We rely on our legitimate interests to improve our services, ensure website security, and conduct basic analytics, provided your rights do not override these interests.
  • Legal Compliance: Where we are required to process data to comply with a legal obligation.
  • Consent: For optional activities such as receiving marketing emails, we will obtain your explicit consent before processing your data.

4. Data Storage and Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

  • Order records are kept for a minimum of 7 years to comply with tax and accounting regulations.
  • Customer service correspondence is retained for 3 years after the last interaction.
  • Usage analytics data is anonymized and retained for no more than 26 months.

When data is no longer needed, we securely delete or anonymize it.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data only with trusted service providers who assist us in operating our business, under strict contractual obligations to protect your data. Categories of recipients include:

  • Payment processors and fraud prevention services.
  • Shipping and logistics partners to deliver your orders.
  • IT and cloud hosting providers who store data securely.
  • Marketing platforms, only if you have given consent.

We may also disclose your information when required by law, such as in response to a court order or government request, or to protect our legal rights.

6. International Data Transfers

As an international online store, your data may be transferred to and processed in countries outside your country of residence. When we transfer personal data from the EEA to other regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your information.

7. Data Security

We implement robust technical and organizational measures to safeguard your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for all data transmitted between your browser and our servers.
  • Secure, encrypted storage of payment information by our payment providers.
  • Regular security audits and vulnerability assessments.
  • Access controls and staff training on data protection principles.

While no method of transmission over the internet is 100% secure, we strive to protect your data and review our security practices regularly.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Correct any inaccurate or incomplete data.
  • Erasure: Request deletion of your data, subject to legal retention obligations.
  • Restriction: Limit how we process your data in certain circumstances.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests or direct marketing.
  • Withdraw Consent: If processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email us at [email protected]. We will respond within 30 days. If you are an EEA resident, you also have the right to lodge a complaint with your local supervisory authority.

9. Cookies and Your Choices

Our website uses cookies to enhance your browsing experience. You can control or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our site, such as the ability to add items to your cart or complete a purchase. We also honor Do Not Track signals where applicable.

10. Children's Privacy

Our website is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at [email protected], and we will take steps to delete such data promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page with a revised date. We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us at:

ArratSwell
Email: [email protected]

We are committed to addressing your inquiries and resolving any privacy concerns in a timely and transparent manner.