Your privacy is important to us. Arialief ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, and the rights you have regarding your information. By using our website or purchasing our products, you agree to the practices described below.
1. Information We Collect
Information You Provide Directly
When you place an order, create an account, contact support, or subscribe to our newsletter, we collect:
- Full name, email address, and phone number
- Billing and shipping address
- Payment information (processed via PCI-DSS compliant third-party processors — we do not store full card numbers)
- Account credentials (username and encrypted password)
- Health-related information you voluntarily share in support communications
Information Collected Automatically
- IP address and approximate geolocation
- Browser type, version, and device information
- Pages visited, time on site, and navigation behavior
- Referring and exit URLs
- Cookie identifiers and session data
Information from Third Parties
We may receive supplemental information from payment processors, shipping carriers, advertising networks, and analytics providers used to operate our business and deliver our services.
2. How We Use Your Information
- Processing, fulfilling, and shipping your orders
- Sending order confirmations, shipping notifications, and support communications
- Sending promotional emails and newsletters (with opt-out available)
- Improving our products, website, and customer experience
- Analyzing aggregate usage trends and user behavior
- Detecting and preventing fraud and unauthorized access
- Administering our 180-day money-back guarantee and refund requests
- Complying with applicable legal and regulatory obligations
We will never sell your personal information to third parties for their independent marketing purposes.
3. Sharing of Information
We share your information only as necessary to provide our services:
- Payment Processors: Stripe, PayPal, and similar services handle payment data under PCI-DSS standards.
- Shipping Carriers: USPS, FedEx, UPS receive your address to fulfill your delivery.
- Analytics Providers: Google Analytics and Microsoft Clarity collect anonymized usage data.
- Email Service Providers: Reputable platforms send transactional and marketing communications on our behalf.
- Legal Compliance: We may disclose information when required by law, court order, or government authority.
All third-party partners are contractually obligated to protect your data and use it only for the stated purposes.
4. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience and analyze site performance:
- Essential Cookies: Required for core functionality (cart, login sessions).
- Analytics Cookies: Help us understand website usage patterns (e.g., Google Analytics).
- Marketing Cookies: Enable relevant advertising on third-party platforms (e.g., Bing Ads, Meta Pixel).
- Preference Cookies: Remember your settings across visits.
You can manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality. We respect Do Not Track (DNT) browser signals where technically feasible.
5. Data Security
- SSL/TLS encryption for all data transmitted between your device and our servers
- PCI-DSS compliant payment processing — raw card data never stored on our servers
- Role-based access controls limiting internal exposure of customer data
- Regular third-party security audits of our systems
- Two-factor authentication for all administrative system access
While we implement robust safeguards, no internet transmission is 100% secure. We encourage strong, unique passwords and prompt notification if you suspect any unauthorized account activity.
6. Your Rights & Choices
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate information.
- Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Portability: Receive your data in a structured, machine-readable format.
- Opt-Out of Marketing: Unsubscribe from marketing emails at any time via the link in any email we send.
- Restrict Processing: Request limitations on how your data is used in certain circumstances.
California residents have additional rights under the CCPA, including the right to know, delete, and opt out of the sale of personal information. To exercise any right, contact us at privacy@arialief.com. We respond to all verified requests within 30 days.
7. Data Retention
- Order and transaction records: retained 7 years for accounting and legal compliance
- Customer support communications: retained 3 years
- Marketing data: retained until you opt out or request deletion
- Analytics data: retained in anonymized form indefinitely
After the applicable retention period, your data is securely deleted or permanently anonymized.
8. Children's Privacy
Arialief products are intended for adults aged 18 and older. We do not knowingly collect personal information from minors under 18. If we discover that a minor has provided us with personal data, we will delete it promptly. If you believe a child has submitted information to us, please contact us immediately at privacy@arialief.com.
9. International Users
Arialief is headquartered in Aurora, Colorado, USA. If you access our website from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from your country's laws.
For users in the EEA or United Kingdom, we rely on Standard Contractual Clauses (SCCs) as the legal basis for international data transfers, in accordance with GDPR requirements.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. For material changes, we will update the "Last Updated" date, send email notification to registered customers, and post a website notice for 30 days following the update. Continued use of our services constitutes acceptance of the revised policy.