Privacy Policy

Section 01

What We Do With Your Information

When you purchase from our store, we collect personal information including your name, shipping address, email address, and payment details to fulfill your order. We also automatically receive your IP address to help us understand your browsing experience and improve our site.

With your explicit permission, we may send you marketing emails about new products, launches, and Ayurvedic ritual education. You may opt out of these communications at any time.

Section 02

Consent

How we obtain consent

Providing personal information at checkout implies consent for order processing and fulfillment. For marketing communications, we require explicit opt-in consent.

How to withdraw consent

You may withdraw consent at any time by contacting us at care@aivaritual.com or by writing to:

EU / UK Residents — GDPR Lawful Bases

We process your personal data under the following lawful bases: contractual necessity (to fulfill orders), legitimate interests (to improve our services), and consent (for marketing). You may withdraw consent at any time or contact your local data protection authority to raise a concern.

Section 03

Disclosure

We may disclose your information when required by law, or to trusted third-party service providers necessary to operate our business — including payment processors, shipping carriers, email marketing platforms, and advertising networks. These vendors access your data only as needed to perform their services and are contractually bound to confidentiality.

Data may be transferred internationally. EU/UK resident data is handled with GDPR-appropriate safeguards (see Section 11).

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Section 04

Shopify & Platform Security

Our store is hosted on Shopify Inc., which provides the secure e-commerce infrastructure underpinning our site. Your data is stored on Shopify's secure servers. Payment information is encrypted and processed in compliance with PCI-DSS (Payment Card Industry Data Security Standard). We do not store your card details on our own servers.

For more information on Shopify's data practices, visit shopify.com/legal/privacy.

Section 05

Third-Party Advertising Services

We may work with advertising partners such as Meta (Facebook/Instagram) and Google to serve you relevant ads based on your browsing behavior. These networks may use cookies and tracking pixels to personalize ads shown to you.

You may opt out of interest-based advertising through the following channels:

• EU / UK: Manage preferences via our Cookie Settings banner
• California residents: Use the "Do Not Sell or Share My Personal Information" link on our site
• Global: Network Advertising Initiative opt-out at optout.networkadvertising.org
• Global: Digital Advertising Alliance opt-out at optout.aboutads.info

Section 06

Security

We implement industry-standard technical and organizational measures to protect your personal data, including SSL/TLS encryption for all data in transit and PCI-DSS compliant payment processing. However, no method of transmission over the internet is fully secure. We encourage you to use strong, unique passwords and to contact us immediately if you suspect unauthorized access to your account.

Section 07

Cookies & Tracking Technologies

Our website uses cookies and similar technologies for the following purposes:

• Essential cookies: Required for site functionality, cart management, and secure checkout
• Analytics cookies: Help us understand traffic patterns and improve site performance (e.g., Google Analytics)
• Advertising cookies: Enable personalized ads through our advertising partners, where consent has been provided

You may manage cookie preferences through your browser settings or our Cookie Settings link. Disabling certain cookies may affect site functionality.

Section 08

Age of Consent

By using this site, you confirm you are the age of majority in your jurisdiction. Aiva Ritual does not knowingly collect personal information from minors under the age of 13 (United States) or 16 (European Union). If you believe a minor has submitted personal data to us, please contact us immediately and we will promptly delete it.

Section 09

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, email us at care@aivaritual.com. We will respond within 30 days of receiving your request.

Section 10

International Data Transfers

Aiva Ritual operates from the United States. If you are located in the EU, UK, or another jurisdiction with data protection laws, please be aware that your personal information may be transferred to and processed in the United States, which may not offer the same level of data protection as your home country.

Where required, we rely on GDPR-approved transfer mechanisms such as Standard Contractual Clauses (SCCs) to ensure your data is handled with appropriate safeguards.

Section 11

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Updates will be posted on this page with a revised effective date. For material changes, we will notify affected users via email where possible. Continued use of our website after changes constitutes acceptance of the revised policy.