Last updated: 10.07.26
Your privacy is important to us. At Aritza, we are committed to protecting the personal information you provide. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from our store. Please read this policy carefully. By using our website, you agree to the practices described herein.
1. INFORMATION WE COLLECT
We collect various types of information in order to provide and improve our services to you.
a. Personal Information You Provide
When you make a purchase, create an account, subscribe to our newsletter, or contact us, we may collect the following:
- Full Name
- Shipping and Billing Address
- Email Address
- Phone Number
- Payment Information (processed securely through third-party payment platforms - we do not store your full payment details)
- Order History and Preferences
b. Information Collected Automatically
When you visit our website, we may automatically collect certain information about your device and browsing activity, including:
- IP Address
- Browser Type and Version
- Operating System
- Pages Visited and Time Spent
- Referring Website or Source
- Cookies and Tracking Technologies (see Section 8 for more details)
2. HOW WE USE YOUR INFORMATION
The information we collect is used solely for the following purposes:
- Order Processing and Fulfillment: To process, pack, and ship your orders, and to provide order confirmations and shipping updates.
- Customer Communication: To respond to your inquiries, provide customer support, and send important notices regarding your purchases.
- Legal and Tax Compliance: To comply with applicable legal obligations, tax requirements, and regulatory standards.
- Website Improvement: To analyze how customers interact with our website, identify trends, and improve user experience.
- Marketing (with your consent): To send you promotional emails, newsletters, or special offers if you have opted in. You may unsubscribe at any time.
- Fraud Prevention and Security: To detect and prevent fraudulent or unauthorized transactions and protect the security of our website and customers.
3. LEGAL BASIS FOR PROCESSING (GDPR COMPLIANCE)
If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:
- Contractual Necessity: To fulfill our contractual obligations to you (e.g., processing and shipping your order).
- Legitimate Interest: To improve our services, prevent fraud, and communicate with you regarding your purchases.
- Consent: When you have given explicit consent for marketing communications or cookies.
- Legal Obligation: To comply with tax, accounting, and other legal requirements.
4. SHARING OF INFORMATION
We do not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with trusted third-party service providers only when necessary for the operation of our store:
Big Cartel: Our e-commerce platform that powers our online store. They process your data in accordance with their own privacy policy.
Payment Processors (e.g., PayPal, Stripe): To securely process your payments. We do not store or have access to your full payment details.
Shipping Couriers (e.g., Correos, SEUR, DHL, etc.): To dispatch and deliver your purchased products. They receive your name, address, and contact information solely for delivery purposes.
Email Service Providers: To send you transactional emails (order confirmations, shipping updates) and marketing communications (if you have opted in).
Analytics Tools (e.g., Google Analytics): To analyze website traffic and user behavior in order to improve our services.
All third-party providers are carefully selected and contractually obligated to protect your personal data and use it only for the specific purposes outlined above.
5. INTERNATIONAL DATA TRANSFERS
Your personal information may be transferred to, and processed in, countries outside your country of residence. These countries may have different data protection laws than your own. However, we take all necessary measures to ensure that your data is treated securely and in accordance with this Privacy Policy. When we transfer data to third-party providers located outside the EEA, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
6. DATA RETENTION
We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g., for tax, legal, or accounting purposes). When we no longer need your personal information, we will securely delete or anonymize it.
- Order Information: Retained for a minimum of 5 years to comply with tax and accounting regulations.
- Customer Account Information: Retained until you request deletion of your account.
- Marketing Information: Retained until you unsubscribe from our communications.
7. INFORMATION SECURITY
We take the security of your personal information seriously and implement a variety of technical and organizational measures to protect it from unauthorized access, loss, misuse, disclosure, alteration, or destruction. These measures include:
- Encryption: We use SSL (Secure Socket Layer) technology to encrypt data transmitted between your browser and our website.
- Secure Data Storage: Your data is stored on secure servers with restricted access.
- Access Controls: Only authorized personnel have access to personal data, and they are bound by strict confidentiality obligations.
- Regular Security Reviews: We periodically review our security practices to ensure your data remains protected.
While we strive to protect your information, no method of data transmission or storage over the internet is 100% secure. Therefore, we cannot guarantee absolute security. We encourage you to take precautions, such as using strong passwords and avoiding sharing sensitive information over unsecured networks, to help protect your personal data.
In the event of a data breach, we will notify affected users and relevant authorities in accordance with applicable legal requirements.
8. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. Cookies are small text files stored on your device that help us remember your preferences and improve our services.
Types of Cookies We Use:
- Essential Cookies: Necessary for basic website functionality (e.g., shopping cart, checkout).
- Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
- Preference Cookies: Remember your settings and preferences (e.g., language, currency).
- Marketing Cookies: Used to deliver relevant advertisements and track campaign performance.
You can control or disable cookies through your browser settings. However, please note that disabling certain cookies may affect the functionality of our website. For more information about how we use cookies, please contact us.
9. YOUR RIGHTS
Depending on your location, you may have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements.
- Right to Restriction of Processing: Request that we limit the processing of your data.
- Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
- Right to Object: Object to the processing of your data for marketing or other purposes.
- Right to Withdraw Consent: Withdraw your consent for marketing communications at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. If you are in the EU, you also have the right to lodge a complaint with your local data protection authority.
10. CHILDREN'S PRIVACY
Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us, and we will take steps to delete such information.
11. THIRD-PARTY LINKS
Our website may contain links to third-party websites, such as social media platforms, external blogs, or partner sites. Please note that we are not responsible for the privacy practices of these external websites. If you choose to visit these third-party sites, we encourage you to review their privacy policies to understand how they handle your personal data. We have no control over how these third parties collect, use, or store your information.
12. CHANGES TO THIS PRIVACY POLICY
We reserve the right to update or modify this Privacy Policy at any time without prior notice. Any changes will be posted on this page with the updated "Last updated" date at the top. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
If we make material changes to this policy, we will notify you via email (if we have your email address) or through a notice on our website.
13. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:
Email: [email protected]
Business Name: Aritza
Response Time: We aim to respond to all inquiries within 30 days.
By using our website and services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.