Privacy policy
RetailArk
Operated by Athelux LLC, a Wyoming single-member limited liability company
30 North Sheridan, Sheridan, Wyoming, United States
Email: robinods95@gmail.com
Last Updated: 23-9-2026
1. Introduction
RetailArk ("we," "us," "our") is operated by Athelux LLC, a Wyoming single-member limited liability company. We sell a curated range of trending and viral consumer products to customers worldwide, with our primary market in the United States.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and what rights you have over it. This Policy applies to retailark.com and any related storefronts, checkout pages, or communications (collectively, the "Services").
By using the Services, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Services.
2. Information We Collect
2.1 Information You Provide Directly
-
Order and checkout information: name, billing address, shipping address, email address, phone number, and order contents.
-
Account information: if you create an account, your email, password, and order history.
-
Communications: messages you send us via email, contact forms, or social media, including any attachments.
-
Reviews and submissions: any reviews, photos, or content you voluntarily submit.
We do not collect or store your full payment card number. Payment details are submitted directly to our payment processor.
2.2 Information Collected Automatically
When you visit the Services, we automatically collect:
-
IP address and approximate geographic location (derived from IP)
-
Device type, operating system, browser type and version
-
Pages viewed, time on page, referring URL, and exit pages
-
Session data, clickstream data, and interaction events
-
Cookie identifiers and similar tracking technologies
2.3 Information From Third Parties
-
Payment processors: confirmation of payment status, fraud signals, and billing verification results.
-
Fraud prevention and analytics providers: risk scores and aggregated analytics.
-
Our suppliers and fulfillment partners: tracking numbers, shipment status, and delivery confirmations.
2.4 Sensitive Information
We do not intentionally collect sensitive personal information (such as health data, biometric data, precise geolocation, racial or ethnic origin, religious beliefs, or sexual orientation). Please do not submit such information to us.
3. How We Use Your Information
We use your personal information to:
-
Process, fulfill, and deliver your orders, including transmitting order details to our suppliers and shipping carriers.
-
Send transactional messages such as order confirmations, shipping confirmations, tracking updates, and delivery notifications.
-
Provide customer support and respond to your inquiries, returns, and refund requests.
-
Detect, prevent, and investigate fraud, chargebacks, unauthorized transactions, and abuse.
-
Analyze and improve the Services, including through Google Analytics 4.
-
Comply with legal, tax, accounting, and regulatory obligations.
-
Enforce our Terms of Service and other policies.
-
Send marketing communications only where you have opted in or where permitted by law (see Section 8).
We do not use automated decision-making that produces legal or similarly significant effects without human review.
4. Cookies and Tracking Technologies
We use cookies, pixels, tags, and similar technologies. These include:
| Category | Purpose | Examples |
|---|---|---|
| Strictly Necessary | Required for checkout, cart, security, and load balancing | Shopify session cookies |
| Performance / Analytics | Understand how visitors use the store | Google Analytics 4 |
| Functional | Remember preferences such as currency and region | Shopify preferences |
| Advertising / Marketing | Measure and target advertising | Currently not active |
Google Analytics 4 collects data about your use of the Services and may transfer that data to Google LLC servers, including in the United States. You can learn more and opt out via Google's Ads Settings and the Google Analytics Opt-out Browser Add-on.
You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent checkout from functioning. Where required by law (for example, in the EEA, UK, or Switzerland), we will request consent before setting non-essential cookies.
For full details, see our Cookie Policy.
5. How We Share Your Information
We do not sell your personal information for money. We share information only as described below.
5.1 Service Providers and Suppliers
To fulfill your order, we share your name, shipping address, email address, phone number (where provided), and order details with:
-
Shopify Inc. — our e-commerce platform and data processor
-
Shopify Payments / Shop Pay — payment processing, fraud screening, and installment financing
-
Our third-party suppliers and fulfillment partners — product picking, packing, and dispatch
-
Shipping carriers and logistics providers — delivery and tracking
-
Email and support tools — transactional messaging and customer service
These parties are contractually restricted to using your information only to perform services for us.
5.2 Legal and Compliance Disclosures
We may disclose information where required by law, subpoena, court order, or valid government request; to enforce our agreements; to protect our rights, property, or safety or that of others; or in connection with an investigation of fraud or illegal activity.
5.3 Business Transfers
If Athelux LLC is acquired, merged, reorganized, or sells substantially all assets, customer information may be transferred as part of that transaction. We will notify you via a prominent notice on the Services and/or by email.
5.4 With Your Consent
We may share information for other purposes with your explicit consent.
6. International Data Transfers
Athelux LLC is based in the United States. Our suppliers, carriers, and service providers may be located in the United States, Europe, Asia, and elsewhere. As a result, your information may be transferred to, stored in, and processed in countries outside your country of residence, which may have different data protection laws.
Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum.
7. Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy:
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (tax and accounting requirements) |
| Customer account data | Until account deletion, plus 90 days |
| Marketing consent records | Until withdrawal, plus 3 years |
| Support tickets and correspondence | 3 years |
| Analytics data (GA4) | Per Google's configured retention (max 14 months) |
| Fraud and chargeback records | 7 years |
When data is no longer needed, we delete or anonymize it.
8. Marketing Communications
If you opt in, we may send you promotional emails about new products, restocks, and offers. You can unsubscribe at any time using the link in any marketing email or by contacting us.
We do not currently operate SMS marketing. If we introduce it, we will obtain separate express written consent and provide opt-out instructions (e.g., replying STOP).
Transactional messages (order confirmations, shipping notices) are not marketing and cannot be unsubscribed from while you have an active order.
9. Your Privacy Rights
9.1 All Customers
You may contact us at robinods95@gmail.com to request access to, correction of, or deletion of your personal information, or to withdraw consent. We will respond within the timeframe required by applicable law.
9.2 California Residents (CCPA / CPRA)
If you are a California resident, you have the right to:
-
Know what categories and specific pieces of personal information we collect, use, and disclose
-
Delete personal information we have collected, subject to legal exceptions
-
Correct inaccurate personal information
-
Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising
-
Limit the use of sensitive personal information
-
Non-discrimination for exercising your rights
Categories of personal information collected in the past 12 months: identifiers; commercial information; internet or network activity; geolocation data (approximate, from IP); and inferences drawn from the above.
Categories disclosed to third parties for business purposes: identifiers, commercial information, and internet activity — disclosed to Shopify, payment processors, suppliers, carriers, and analytics providers.
We do not sell personal information for monetary value. Where our use of analytics or advertising cookies constitutes "sharing" under the CPRA, you may opt out by emailing robinods95@gmail.com with the subject line "Do Not Sell or Share My Personal Information."
You may designate an authorized agent to make requests on your behalf, subject to verification.
9.3 EEA, UK, and Switzerland Residents (GDPR / UK GDPR)
You have the right to access, rectify, erase, restrict processing, object to processing, data portability, and to lodge a complaint with your local supervisory authority. Where we rely on consent, you may withdraw it at any time.
Legal bases for processing:
-
Contract — to fulfill your order
-
Legal obligation — tax, accounting, and fraud-prevention records
-
Legitimate interests — fraud prevention, service improvement, and security
-
Consent — non-essential cookies and marketing
9.4 Other Jurisdictions
We honor applicable rights for residents of Canada (PIPEDA), Australia (Privacy Act), Brazil (LGPD), and other regions with comprehensive data protection laws. Contact us to exercise your rights.
10. Children's Privacy
The Services are not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK where applicable). If you believe a child has provided us information, contact us and we will delete it promptly.
11. Security
We implement reasonable administrative, technical, and physical safeguards, including TLS/SSL encryption, access controls, and PCI-DSS-compliant payment processing through Shopify Payments. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
If we become aware of a breach affecting your personal information, we will notify you and relevant authorities as required by law.
12. Third-Party Links
The Services may link to third-party websites or services we do not control. This Policy does not apply to them. Review their privacy policies before providing information.
13. Changes to This Policy
We may update this Policy from time to time. Material changes will be posted on this page with an updated "Last Updated" date and, where required, notified by email. Continued use of the Services after changes constitutes acceptance.
14. Contact Us
Athelux LLC (RetailArk)
30 North Sheridan
Sheridan, Wyoming, United States
Email: robinods95@gmail.com