Privacy Policy
Last updated July 2026
ARFORTI respects your privacy. This Privacy Policy explains how ARFORTI collects, uses, retains, discloses, and protects your personal information, as well as the choices available to you.
“Personal information” means information that identifies you, either on its own or in combination with other information, or that can reasonably be linked to you.
1. Scope of This Privacy Policy
This Privacy Policy applies when you:
- browse or use the ARFORTI website;
- create or manage an account;
- browse products, search the Website, add items to your cart, or place an order;
- join a waitlist or request back-in-stock or other product notifications;
- subscribe to brand communications;
- submit reviews, images, surveys, or other voluntary feedback;
- contact ARFORTI through Advisor, Customer Service in your Account, email, or WhatsApp;
- request a cancellation, shipment, return, refund, warranty service, or repair; or
- interact with ARFORTI advertising or branded content displayed on third-party platforms.
ARFORTI determines the purposes and means of processing personal information covered by this Privacy Policy and is responsible for that processing under applicable law.
You are not required to provide all personal information. However, if certain information is necessary to complete an order, process payment, arrange delivery, issue a refund, manage an account, or provide customer service, we may be unable to provide the relevant service without it.
ARFORTI does not actively request sensitive personal information unrelated to your purchase or service request. When contacting us through Advisor, email, or another channel, please avoid submitting sensitive information that is not necessary to address your request.
2. Personal Information We Collect
The personal information we collect depends on how you interact with the Website and our services.
2.1 Information You Provide
This information may include:
- your name, email address, phone number, billing address, and shipping address;
- account login information, verification codes, language, region, currency, and other account preferences;
- order details and history, cancellations, shipping, returns, refunds, store credit, warranty claims, and repair records;
- payment-method type, transaction ID, payment authorization, payment status, and refund status;
- text, images, order numbers, and other materials submitted through Advisor, Customer Service, email, or WhatsApp;
- waitlist, back-in-stock alert, brand-subscription, and unsubscribe records;
- reviews, ratings, public display names, images, and other voluntarily submitted content; and
- survey responses, opinions, and other voluntary feedback.
Payment credentials, including full payment card numbers and card security codes, are generally collected directly by Shopify Payments or another payment provider. ARFORTI does not directly store your full payment card number or card security code, but we may receive limited information needed to complete payments, issue refunds, reconcile transactions, and verify transactions.
When you submit a review, your review, display name, and related images may be displayed publicly on the Website. Do not include information that you do not want made public. You may contact ARFORTI to request removal of or changes to a submitted review.
2.2 Information Collected Automatically
When you use the Website, we may automatically collect:
- your IP address, browser type, device type, operating system, language, time zone, and approximate location;
- the date and time of your visit, referring page, pages viewed, time spent, clicks, searches, cart activity, and checkout interactions;
- Website-performance information, loading errors, security events, and unusual-activity logs; and
- information collected through cookies, pixels, tags, local storage, device identifiers, and similar technologies.
2.3 Information We Receive From Other Sources
We may also receive information from:
- Shopify and other website, account, ecommerce, and infrastructure providers;
- payment, address-verification, and fraud-prevention providers, including payment status, transaction information, and fraud-risk signals;
- carriers, customs providers, and delivery providers, including tracking, delivery, return, and signature information;
- advertising, social media, affiliate, and referral partners, including ad impressions or clicks, campaign source, device or advertising identifiers, conversion information, and attribution data; and
- third-party sign-in, payment, or communication services you choose to use.
Where supported by an appropriate legal basis, we may combine information received from these sources with information about your Website activity, Account, or orders.
3. How We Use Personal Information
We may use personal information to:
- create, verify, and manage your Account;
- receive, confirm, and fulfill orders;
- process payment authorizations, refunds, reconciliation, and transaction verification;
- arrange production, inspection, packaging, shipping, and tracking;
- process cancellations, returns, refunds, warranty requests, and repairs;
- respond to Advisor messages, customer-service requests, complaints, and other inquiries;
- provide waitlist, back-in-stock, and order-status notifications;
- manage and display reviews;
- analyze voluntary feedback and improve our products, Website, and customer service;
- remember your cart, language, region, currency, and other preferences;
- analyze Website usage, improve performance, and diagnose technical issues;
- measure advertising and promotions and attribute traffic and conversions;
- provide interest-based content or advertising where the required consent has been obtained or applicable law otherwise permits it;
- protect Accounts, the Website, orders, and payments;
- detect fraud, abuse, and unusual transactions;
- comply with accounting, tax, customs, consumer-protection, and other legal obligations;
- resolve disputes, establish, exercise, or defend legal claims, and enforce applicable terms; and
- verify and process requests to exercise privacy rights.
Legal Bases for Processing, Where Applicable
| Processing Activity | Primary Legal Basis |
|---|---|
| Accounts, orders, payments, shipping, returns, refunds, warranties, repairs, and services you request | Performance of a contract with you or taking steps at your request before entering into a contract |
| Accounting, tax, customs, regulatory matters, data security incidents, and legally required cooperation with authorities | Compliance with applicable legal obligations |
| Website operations, customer service, fraud prevention, security, service improvement, dispute resolution, and legal claims | Our legitimate interests or those of a relevant third party, provided those interests are not overridden by your rights and interests |
| Nonessential cookies, brand communications, personalized advertising, and other processing for which consent is required | Your consent |
| Processing subject to another basis recognized in your jurisdiction | The applicable basis permitted by law |
Payment and Fraud Screening
Payment and fraud-prevention providers may use payment status, IP address, billing and shipping information, and unusual purchasing patterns to conduct automated risk analysis.
Payment providers may independently approve or decline payment authorizations under their own policies. ARFORTI may not be able to change a payment decision made independently by a payment provider. Fraud-risk signals may cause us to request additional verification, delay fulfillment, or decide whether to accept an order.
Where required by applicable law, you may have the right to obtain information about, contest, or request human review of certain ARFORTI decisions based solely on automated processing that produce legal or similarly significant effects.
4. How We Disclose Personal Information
To carry out the purposes described in this Privacy Policy, we may disclose personal information to:
- Shopify and providers of website hosting, ecommerce infrastructure, cloud storage, and technical support;
- payment, refund, transaction-verification, and fraud-prevention providers;
- carriers, warehouses, customs providers, delivery providers, and return-service providers;
- email, WhatsApp, Advisor, customer-service, waitlist, and notification providers;
- review, analytics, advertising, attribution, and marketing providers;
- accountants, auditors, insurers, attorneys, and other professional advisers;
- courts, regulators, law-enforcement agencies, and other authorities legally entitled to receive the information; and
- potential or actual participants in a financing, merger, reorganization, asset transfer, or sale of all or part of our business.
Where required by law, vendors and service providers processing personal information on our behalf are restricted from retaining, using, or disclosing that information except for the agreed purposes, under our instructions, or as otherwise permitted by law. They must also maintain appropriate security and confidentiality protections.
Some third parties, including payment processors, logistics providers, and advertising partners, may process personal information for their own purposes under their respective privacy notices.
ARFORTI does not sell personal information for monetary consideration. However, certain disclosures of device identifiers and Website activity to advertising or analytics partners may be considered a “sale” or “sharing” of personal information, or processing for targeted advertising, under applicable U.S. state privacy laws—even when ARFORTI does not receive money for the disclosure. Where applicable, you may exercise the opt-out rights described in Section 11.
5. Cookies and Similar Technologies
Cookies are small data files that a website stores in your browser or on your device. ARFORTI may also use pixels, tags, local storage, conversion APIs, and other similar technologies.
These technologies may be used to:
- operate the Website and keep Account, cart, and checkout features working;
- remember language, country, currency, and privacy preferences;
- understand how visitors use the Website;
- diagnose technical issues and improve performance;
- measure advertising, referral sources, and conversions;
- provide embedded video or other third-party content; and
- provide interest-based advertising where the required consent has been obtained.
The tables below identify the main cookies used in the Website’s current configuration, as well as cookies that may be set when the relevant features are enabled. Not every cookie listed is set on every visit. The cookies actually used depend on your location, device, browser, referral source, enabled features, and choices.
The durations shown are provider-published default retention periods for browser cookies. They do not indicate how long a provider may retain related information on its systems. Actual durations may vary based on browser limitations, user settings, merchant configuration, or provider updates.
5.1 Shopify
| Cookie | Provider | Purpose | Default Duration |
|---|---|---|---|
| _shopify_essential | Shopify | Stores information needed for storefront sessions, checkout, and tamper protection | 1 year |
| _shopify_test | Shopify | Checks whether the browser supports cookies | 1 minute |
| _tracking_consent | Shopify | Stores the visitor’s privacy and tracking preferences | 1 year |
| cart | Shopify | Stores information about the shopping cart | 2 weeks |
| cart_currency | Shopify | Sets the currency for new carts based on the currency used during the visitor’s most recent checkout | 2 weeks |
| discount_code | Shopify | Stores a discount code for use at checkout | Session |
| localization | Shopify | Stores the visitor’s country or region preference for localized storefront and cart experiences | 1 year |
| login_with_shop_finalize | Shopify | Completes the Sign in with Shop process | 5 minutes |
| shopify_pay | Shopify | Supports Shop Pay checkout for returning visitors | 1 year |
| storefront_digest | Shopify | Stores the access digest used to permit entry to a password-protected storefront | 1 year |
| _landing_page | Shopify | Records the first page visited after arriving from another website | 2 weeks |
| _orig_referrer | Shopify | Records the page or website that referred the visitor | 2 weeks |
| _shopify_analytics | Shopify | Stores analytics information for the storefront or checkout | 1 year |
| _shopify_s | Shopify | Identifies a particular browser session and store combination | 30 minutes from last use, rolling |
| _shopify_y | Shopify | Supports Shopify analytics | 1 year |
| shop_analytics | Shopify | Stores buyer information used for analytics within Shop | 1 year |
| _shopify_marketing | Shopify | Stores marketing-attribution information for the storefront and checkout | 1 year |
| shopify_override_user_locale | Shopify | Stores the language or regional setting for Shopify interfaces | 1 year |
Durations are based on the Shopify Cookie Policy.
5.2 Google Analytics
| Cookie | Provider | Purpose | Default Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes individual visitors | 2 years |
| _ga_<container-id> | Google Analytics | Maintains session state for a visitor | 2 years |
Based on Google Analytics Cookie Usage.
5.3 Google Ads and DoubleClick
| Cookie or Cookie Family | Provider | Purpose | Default Duration |
|---|---|---|---|
| _gcl_* | Stores ad-click information to attribute later conversions, such as purchases, to an ad click | 90 days | |
| _gac_* | Links activity on the Website to Google Ads campaigns for conversion measurement | 90 days | |
| IDE | Google, DoubleClick | Supports ad delivery and measurement and, where permitted, ad personalization | 13 months in the EEA, Switzerland, and the United Kingdom; 24 months elsewhere |
| id | Google, DoubleClick | Helps Google apply the user’s choice to turn off personalized advertising | 13 months in the EEA, Switzerland, and the United Kingdom; 24 months elsewhere |
| DSID | Identifies a signed-in Google user so that user’s ad-personalization settings can be honored | 2 weeks | |
| _gads | Supports Google ad delivery and measurement when the applicable feature is enabled | 13 months |
Google’s Conversion Linker may also store ad-click information in a local-storage key named _gcl_ls. Although it is not a traditional cookie, it is a similar technology covered by this section.
Based on Google Cookies and Similar Technologies.
5.4 Embedded YouTube Content
When YouTube content is embedded on the Website, the following cookies may be used depending on the embedding method, playback activity, location, and user settings:
| Cookie | Provider | Purpose | Default Duration |
|---|---|---|---|
| PREF | YouTube, Google | Stores player, autoplay, and page preferences | 8 months from last use |
| pm_sess | YouTube, Google | Maintains the browsing session and helps prevent cross-site abuse | 30 minutes |
| YSC | YouTube, Google | Validates playback-session requests and helps prevent fraud and abuse | Session |
| SOCS | Stores the user’s Google cookie choices | 13 months | |
| __Secure-YNID, VISITOR_INFO1_LIVE | YouTube, Google | Support preferences, analytics, recommendations, and advertising | 6 months |
| __Secure-YENID, __Secure-YEC | YouTube, Google | Help diagnose errors and detect fraudulent or invalid ad interactions | 13 months |
| AEC | Helps prevent spam, fraud, and abuse | 6 months | |
| __Secure-ROLLOUT_TOKEN | YouTube, Google | Supports phased feature rollouts and measures their impact | 6 months |
__Secure-YNID and __Secure-YENID are gradually replacing VISITOR_INFO1_LIVE and __Secure-YEC, respectively. Both old and new names may appear during the transition.
5.5 Meta
| Cookie | Provider | Purpose | Default Duration |
|---|---|---|---|
| _fbp | Meta Platforms, Inc. | Identifies a browser visiting a website that uses Meta Business Tools for advertising and analytics | 90 days |
| _fbc | Meta Platforms, Inc. | Stores information about a Meta ad click for attribution and measurement | 90 days |
| fr | Meta Platforms, Inc. | Supports ad delivery, measurement, and relevance based on the user’s settings | 90 days |
_fbc is generally set only when the inbound URL contains a corresponding Meta ad-click identifier. Based on the Meta Cookies Policy.
5.6 LinkedIn
Depending on the LinkedIn feature in use—such as the Insight Tag, embedded posts, or another integration—only some of the cookies below may be set. They are not all set on every visit.
| Cookie | Provider | Purpose | Default Duration |
|---|---|---|---|
| bcookie, bscookie | Identify the device and support security, diagnostics, and sign-in authentication | 1 year | |
| JSESSIONID, lang, sdsc | Support security checks, language preferences, and data routing | Session | |
| lidc | Selects the appropriate data center | 24 hours | |
| li_gc, li_mc | Store, cache, and apply choices about nonessential cookies | 6 months | |
| UID | Scorecard Research | Supports market and audience research | 720 days |
| UserMatchHistory, AnalyticsSyncHistory, lms_ads, lms_analytics, li_fat_id | Support ad-identifier synchronization, analytics, conversion measurement, and retargeting | 30 days | |
| li_sugr, _guid | Help identify visitors and match them probabilistically for advertising | 90 days | |
| BizographicsOptOut | Stores an opt-out preference for nonmembers | 10 years | |
| li_giant | Supports conversion tracking through indirect group identifiers | 7 days | |
| oribi_cookie_test, ar_debug | LinkedIn, Oribi | Test whether tracking is available and support attribution reporting | Session |
| oribili_user_guid | Oribi | Counts unique visitors | 1 year |
| ln_or | Oribi | Determines whether Oribi analytics can run | 1 day |
Based on the LinkedIn Cookie Table.
5.7 AdRoll
| Cookie | Provider | Purpose | Default Duration |
|---|---|---|---|
| __adroll, __ar_v4, _adroll_shared, __adroll_fpc | NextRoll, AdRoll | Recognizes a browser or device for ad delivery, attribution, retargeting, and performance measurement | Rolling 13 months from the most recent interaction with NextRoll technology |
Based on the NextRoll Privacy Policy.
5.8 Managing Cookies
Strictly necessary cookies support the cart, checkout, security, and features you request. They generally cannot be disabled through Cookie Preferences.
In jurisdictions where consent is required, analytics, advertising, marketing, and other nonessential technologies will not be enabled until you make the relevant choice. Merely continuing to browse the Website does not constitute consent to all nonessential cookies.
You can use Cookie Preferences to:
- accept all cookies;
- reject nonessential cookies;
- make choices by category; and
- change or withdraw your choices at any time.
You can also delete or restrict cookies through your browser settings, although doing so may affect Account, cart, checkout, language, or other Website features.
Where required by applicable law, ARFORTI processes Global Privacy Control (GPC) signals as opt-out requests when the Website receives a valid signal.
6. Marketing Communications
When you subscribe, or when otherwise permitted by applicable law, ARFORTI may use your name, email address, subscription history, and interactions with the Website, emails, or orders to send you:
- information about new arrivals;
- previews of special editions;
- the latest news and updates from the brand; and
- information about products or services that may interest you.
Where the required consent has been obtained, we may personalize these communications based on your browsing, email, or order interactions.
You may opt out at any time, at no cost, by:
- using the unsubscribe link in a marketing email;
- updating your communication preferences in your Account; or
- contacting us through Advisor, Customer Service in your Account, or contact@arforti.com.
Opting out of marketing communications will not stop necessary service communications relating to orders, payments, shipping, Account security, returns, refunds, warranties, or repairs.
We may retain a minimal suppression record to ensure that we continue to honor your opt-out choice.
7. Data Retention
We retain personal information only for as long as reasonably necessary to provide our services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, manage risk, and resolve disputes.
Our retention practices include:
- Order and transaction information: retained as needed to complete orders, payments, refunds, reconciliation, tax and customs obligations, and dispute resolution;
- Account information: retained while your Account remains active; after closure, we may retain the minimum information needed for legal obligations, orders, refunds, disputes, warranties, and repairs;
- Advisor and customer-service records: retained as needed to address inquiries, complaints, after-sales service, and related disputes;
- Waitlist and marketing information: retained while the relevant notification or subscription remains active, together with a minimal suppression record after you opt out;
- Reviews and public content: retained while displayed on the Website or until removed in response to your request or for moderation purposes;
- Warranty and repair records: retained as needed to verify warranty eligibility, prior repairs, and eligibility for our lifetime repair service;
- Security and risk records: retained as needed to prevent fraud and abuse and to investigate security incidents or repeated risk patterns; and
- Cookies: retained for the periods listed in Section 5, unless deleted earlier through your browser, refusal of nonessential cookies, or withdrawal of consent.
When personal information is no longer needed, we will delete it, anonymize it, or otherwise dispose of it securely.
A deletion request does not necessarily require the immediate deletion of every record. We may retain the minimum information required for transactions, tax and regulatory obligations, disputes, fraud prevention, warranty eligibility, and repair-service verification.
8. International Data Transfers
Our website, ecommerce, payment, logistics, communications, analytics, and marketing providers may operate in different countries or regions.
As a result, your personal information may be stored, accessed, or processed outside the country or region where you live. Privacy and data-protection laws in those locations may differ from those in your jurisdiction.
Where required by applicable law, we use appropriate contractual, organizational, or other recognized safeguards for international transfers. Depending on the transfer and the service provider, these safeguards may include an adequacy decision, Standard Contractual Clauses, or another legally recognized transfer mechanism.
You may contact us using the information below to ask about relevant international transfers and safeguards.
9. Data Security
We maintain reasonable administrative, technical, and organizational safeguards appropriate to the nature of the personal information, the way it is processed, and the related risks. These measures may include:
- secure connections for transmitting information;
- specialized payment providers for processing payments;
- restrictions on employee and partner access to personal information;
- security and confidentiality requirements for service providers;
- monitoring for unusual Account, order, and Website activity; and
- backups, access controls, and incident-response measures, as appropriate.
No method of transmission over the Internet or electronic storage is completely secure. We cannot promise that a security incident will never occur, but we continually maintain protections appropriate to the relevant risks.
If you use Account features that require a password or other login credentials, keep those credentials confidential and do not share them with anyone else.
If a data security incident occurs that requires notice under applicable law, we will take the required steps.
10. Third-Party Services and Children’s Privacy
Third-Party Services
The Website may contain third-party links, payment functionality, social media content, videos, communication tools, or other embedded services.
These third parties operate independently, and their processing of personal information is governed by their own privacy notices. ARFORTI cannot control all processing performed by third-party websites or services. Review the applicable third-party privacy notice before submitting information to that party.
When you contact ARFORTI through WhatsApp, WhatsApp’s and Meta’s own privacy notices also apply to their processing of information through that service.
Children’s Privacy
The Website and our services are not directed to children, and we do not knowingly collect personal information from children as defined by applicable law.
If you are a parent or legal guardian and believe that a child has submitted personal information through the Website or our services, contact us using the information below. We will verify and address the matter as required by applicable law.
11. Your Privacy Rights and Choices
Depending on where you live and subject to applicable law, you may have some or all of the following rights:
- to know the categories and sources of personal information we collect, the purposes for which we use it, and the categories of recipients to which we disclose it;
- to access your personal information and obtain a copy;
- to correct inaccurate, incomplete, or outdated personal information;
- to request deletion of personal information, subject to applicable conditions and exceptions;
- to restrict certain processing of personal information;
- to object to processing based on legitimate interests;
- to receive certain personal information in a portable, machine-readable format or request its transfer to another provider;
- to withdraw consent at any time for processing based on consent;
- to opt out of direct marketing;
- to opt out of the “sale” or “sharing” of personal information, or qualifying processing for targeted advertising;
- to obtain information about, contest, or request human review of certain uses of automated decisionmaking technology;
- to appeal the denial of a privacy-rights request, where applicable;
- to file a complaint with a privacy or data-protection regulator with jurisdiction over your complaint; and
- not to receive discriminatory treatment for exercising your privacy rights where prohibited by law.
You may submit a request through:
- the Advisor button on the right side of the page;
- Customer Service in your Account; or
- email at contact@arforti.com.
To protect your personal information, we may request information reasonably necessary to verify your identity. If you use an authorized agent, we may also verify the agent’s authority to act on your behalf.
We will respond within the time required by applicable law. Privacy rights are not absolute. Legal obligations, transaction records, fraud prevention, disputes, the rights of others, and other legal exceptions may limit our ability to fulfill a request. Where appropriate, we will explain why a request cannot be fully completed.
Privacy-rights requests are generally free. Where permitted by law, we may charge a reasonable fee or decline to act on requests that are repetitive, manifestly unfounded, or excessive.
Withdrawing consent does not affect the lawfulness of processing completed before the withdrawal. If another valid legal basis applies, we may continue the relevant processing under that basis and, where appropriate, explain why.
12. Changes to This Privacy Policy and Contact Us
We may update this Privacy Policy to reflect changes in our business, technology, services, or applicable law.
The revised Privacy Policy will be posted on this page with a new Last Updated date. If a change materially affects your rights, we may provide notice through the Website, email, or another reasonable method. Where required by law, we will obtain your consent again.
If you have questions about this Privacy Policy, our processing of personal information, cookies, marketing choices, or your privacy rights, contact us through:
- the Advisor button on the right side of the page;
- Customer Service in your Account; or
- email at contact@arforti.com.
You may also file a complaint with a privacy or data-protection regulator with jurisdiction where you live.