Privacy policy

Last updated: October 14, 2026

Arlumia ("we", "us", "our") operates arlumia.com and the related store, products and services (the "Services"). Arlumia is powered by Shopify. This Privacy Policy explains how we collect, use and disclose your personal information when you visit, use or buy from the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls for the collection, processing and disclosure of your personal information.

Personal information we collect

"Personal information" means information that identifies, or can reasonably be linked to, you or another person. Depending on how you use the Services, we may collect:

Contact details such as your name, billing and shipping address, phone number and email address.
Payment information such as payment card details, which are processed by our payment providers. We do not store full card numbers.
Account information such as your login, preferences and subscription settings.
Order and subscription information such as the products you view, add to your cart, buy, return or subscribe to.
Communications such as the messages you send our support team.
Device and usage information such as your IP address, browser, device identifiers and how you interact with the Services, collected through cookies and similar technologies.

We do not ask for or need information about your health or medical conditions. Please don't send us medical records or photos of your skin unless you choose to when contacting support.

Where we get it

Directly from you, when you place an order, create an account, subscribe or contact us.
Automatically, through cookies and similar technologies when you use the Services.
From service providers who process information on our behalf, such as payment, subscription, shipping and analytics providers.
From partners or other third parties, such as advertising platforms.

How we use it

To provide the Services: process payments, fulfill and ship orders, manage subscriptions (including Subscribe & Save renewals), send order and account emails, handle returns and refunds, and run your account.
Marketing and advertising: send promotional emails or texts if you have agreed to receive them, and show you ads on other websites based on your activity on the Services. You can unsubscribe at any time.
Security and fraud prevention: protect the Services, detect fraud and keep payments secure.
Customer support: answer your questions and improve our products and service.
Legal reasons: comply with the law, respond to lawful requests and enforce our terms.

How we disclose it

With Shopify and service providers who perform services for us, such as payment processing, subscription management, fulfillment and shipping, data analytics, customer support and cloud storage.
With business and marketing partners to provide marketing services and show you ads. You may have the right to tell us not to share your information for targeted advertising; you can opt out here.
When you ask or consent to it, for example to ship to someone else.
With affiliates, in connection with a business transaction such as a merger or sale, or when required by law.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit is transmitted to and shared with Shopify and third parties that may be located outside the country where you live. To help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate data from your interactions with our store, along with other merchants and with Shopify. For these purposes, Shopify is responsible for processing your personal information, including responding to your requests to exercise your rights. To learn more, see the Shopify Consumer Privacy Policy or visit the Shopify Privacy Portal.

Third-party websites

The Services may link to sites run by others. We are not responsible for their privacy or security practices, so please review their policies.

Children

The Services are not meant for children, and we do not knowingly collect personal information from children under the age of majority. We do not knowingly "sell" or "share" the personal information of anyone under 16.

Security and retention

No security measure is perfect. We keep personal information only as long as we need it to run your account and subscription, provide the Services, meet legal obligations, resolve disputes and enforce our agreements.

Your rights and choices

Depending on where you live, you may have the right to: access or know what personal information we hold about you; delete it; correct it; receive a copy of it or have it transferred; opt out of the "sale" or "sharing" of your personal information for targeted advertising (you can do that here); and manage your marketing preferences by using the unsubscribe link in our emails. If your browser sends a Global Privacy Control signal, we treat it as an opt-out request for that browser and device, depending on where you live.

If you live in the UK or European Economic Area, you may also object to or restrict processing for certain purposes, and withdraw consent where we rely on it. Withdrawing consent doesn't affect processing that already took place.

To use any of these rights, email contact@arlumia.com. We may need to verify your identity first, and you can use an authorized agent if you give them written permission. We won't treat you differently for using your rights.

Complaints

If you have a complaint about how we handle your personal information, please contact us. Depending on where you live, you may be able to appeal our decision or complain to your local data protection authority. In the EEA, you can find your authority here.

International transfers

We may transfer, store and process your personal information outside the country where you live. For transfers out of the EEA or the UK, we rely on recognized mechanisms such as the European Commission's Standard Contractual Clauses, unless the destination has been found to provide adequate protection.

Changes to this policy

We may update this Privacy Policy and will post the new version here with a new "Last updated" date, giving notice where the law requires it.

Contact

For questions about our privacy practices or to use your rights, email us at contact@arlumia.com or write to us at Arlumia, 30 N Gould St, Ste R, Sheridan, WY 82801, United States. For applicable data protection laws, Arlumia is the controller of your personal information.