Privacy Policy

1. Information we collect

Information you give us

• Order information: name, shipping address, email address, phone number (when provided), and the items and options you choose, including any personalization text you type.
• Account information: if you create an account, your name, email address, and a securely hashed password.
• Communications: messages you send us, wholesale inquiries, and any reviews or photos you submit.
• Newsletter: your email address, if you sign up.

Information collected automatically

• Essential storage: your cart and saved favorites live in your own browser's local storage. If you sign in, a secure session cookie keeps you logged in.
• Privacy-friendly analytics: aggregate, non-identifying statistics such as page views and referring sites. Our analytics use no tracking cookies and do not follow you across other websites.
• Server and security logs: our hosting provider records technical data such as IP address, browser type, and request time to operate and secure the site.

Payment information

Payment card details are collected and processed directly by our payment processor. We never receive or store your full card number. We receive only limited details such as the last four digits, card brand, billing ZIP, and whether the payment succeeded.

2. How we use information

• To process, produce, and ship your order, and to handle returns and refunds.
• To send transactional messages — order confirmations and shipping and tracking updates.
• To provide customer support and answer your questions.
• To send marketing emails, including a reminder about an unfinished cart, where you have opted in or purchased from us. You can unsubscribe at any time.
• To publish reviews you choose to submit.
• To understand aggregate site usage so we can improve the store.
• To prevent fraud, enforce our Terms, and comply with legal obligations.

3. Legal bases (for visitors in regions that require them)

We process personal information to perform our contract with you (filling your order), for our legitimate interests (operating, securing, and improving the store, and limited marketing to existing customers), with your consent (newsletter sign-up), and to comply with legal obligations (tax and business records).

4. Who we share information with

We share only what each provider needs to do its job, and we do not sell your information. Our providers include:

• Stripe — payment processing and fraud prevention.
• Shippo and shipping carriers (e.g. USPS) — buying labels and delivering your package. Carriers receive your name and shipping address.
• Resend — sending order, shipping, and marketing email.
• Cloudflare — website hosting, security, image storage, and privacy-friendly analytics.
• Neon — the database where orders and account records are stored.

We may also disclose information when required by law, subpoena, or legal process; to protect our rights, property, or safety, or that of others; to investigate fraud or violations of our Terms; or in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy.

5. Cookies and similar technologies

We use only what the store needs to work: a secure session cookie if you sign in, and local storage for your cart and favorites. Our analytics are cookie-free and do not build a profile of you or track you across other sites. Because we use no advertising or cross-site tracking cookies, you will not see a cookie consent banner here.

6. Marketing emails and your choices

You can unsubscribe from marketing email at any time using the link in any marketing message, or by emailing us. Transactional messages about an order you placed (confirmations, shipping notices) are not marketing and will still be sent, because they are part of fulfilling your purchase.

7. Your privacy rights

Depending on where you live, you may have the right to: know what personal information we hold about you; access or receive a copy of it; correct inaccuracies; delete it; opt out of marketing; and not be discriminated against for exercising these rights.

California residents

Under the California Consumer Privacy Act (as amended), you have the rights described above. We do not sell personal information or share it for cross-context behavioral advertising, and we do not knowingly collect personal information from anyone under 16. In the past 12 months we have collected the categories of information described in Section 1, for the purposes described in Section 2, and disclosed them for business purposes to the providers listed in Section 4.

To exercise any right, email contact@arkossystems.com. We will verify your request — usually by confirming details of an order you placed — and respond within the time required by law. You may use an authorized agent where the law allows.

Discounts in exchange for signing up

If we ever offer a discount or promotion in exchange for joining our email list, that is a "financial incentive" under California law. Participation is entirely voluntary, you can withdraw at any time by unsubscribing, and the only information we ask for is your email address. We offer it because email is a low-cost way for a small business to reach returning customers; we value the information at no more than the value of the discount offered, and declining costs you nothing but the promotion itself.

8. Data retention

We keep order records as long as needed to provide support, honor returns and warranties, and satisfy tax, accounting, and legal requirements. Marketing contacts are kept until you unsubscribe. Account records are kept until you ask us to delete them. Some information may remain in routine backups for a limited period after deletion.

9. Security

We use encrypted connections (HTTPS), a reputable payment processor that keeps card data out of our systems, hashed passwords, and access controls that limit admin access to authorized staff. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

10. Children's privacy

Our site and products are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

11. Where information is processed

We operate in the United States, and our providers may process and store information in the United States and other countries. If you access the site from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

12. Third-party links

Our site may link to other websites. We are not responsible for their privacy practices, and this policy does not apply to them. Please review their policies before providing information.

13. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when posted, and the "last updated" date above will change. If we make material changes, we will take reasonable steps to notify you.

14. Contact us

Questions, requests, or concerns about privacy? Email contact@arkossystems.com and we'll help.