Privacy Policy

What you give us.

• Identity and contact details — name, email address, shipping and billing address, phone number.
• Order information — items purchased, order value, subscription selections, order history.
• Payment information, processed by our payment providers. We receive a confirmation and limited details such as the card brand and last four digits. We do not receive or store your full card number, expiry or security code.
• Communications you send to support, and reviews or content you submit.
• Marketing preferences — whether you have subscribed to email or SMS.

Collected automatically. IP address, browser type and version, operating system, device identifiers, screen size, referring URL and language; pages viewed, time on page, scroll and click behaviour, products viewed, cart activity and search terms; and cookies and similar technologies.

From third parties. Our ecommerce platform, payment processors and fraud-screening tools; shipping carriers, for delivery status and address validation; and advertising and analytics platforms where you have interacted with our ads.

We do not intentionally collect sensitive personal information such as government identifiers, health information, precise geolocation, biometric data, or information about race, religion, sexual orientation or union membership. Please do not send it to us.

• To process, fulfil and deliver your orders, and to manage subscriptions and recurring billing.
• To communicate with you about orders, shipping, renewals and support requests.
• To provide customer service and handle returns, warranty claims and disputes.
• To send marketing emails or SMS where you have opted in, and to measure their effectiveness.
• To operate, secure, debug and improve the site.
• To detect, investigate and prevent fraud, abuse and unauthorised transactions.
• To analyse aggregate traffic and sales patterns.
• To comply with legal, tax and accounting obligations, and to enforce our terms.

Where applicable law requires a legal basis, we rely on performance of a contract with you, our legitimate interests in operating and securing the business, your consent for marketing and non-essential cookies, and compliance with legal obligations.

We share personal information only as described here. We do not sell your personal information for money.

• Ecommerce platform — our store runs on Shopify, which hosts the site and processes order and customer data on our behalf.
• Payment processors — to authorise and settle transactions and to screen for fraud.
• Fulfilment and shipping partners — name, address and contact details, so your order can be delivered.
• Email and SMS providers — to send campaigns you have opted into.
• Analytics and advertising providers — to understand site usage and to measure and target advertising.
• Subscription management provider — to run recurring billing, where you subscribe.
• Professional advisers — accountants, lawyers and insurers, where reasonably required.
• Legal and safety — where we believe disclosure is required by law or lawful request, or is necessary to protect our rights, property or safety, or that of others.
• Business transfer — in connection with a merger, acquisition, financing or sale of assets.

Our service providers are permitted to use your information only to perform services for us.

Depending on where you live, you may have the right to know what we hold about you and access it; to request deletion, subject to legal exceptions such as completing a transaction or meeting record-keeping obligations; to correct inaccurate information; to receive a portable copy; to opt out of the sale or sharing of personal information and of targeted advertising; and to withdraw consent for marketing at any time.

We will not deny you goods or services, charge a different price, or provide a lesser quality of service because you exercised a privacy right.

To exercise a right, email us with the subject line Privacy Request. We verify your identity by matching the details you provide against our records, which may mean asking for your order number and the email used at purchase. We respond within the timeframe required by applicable law, generally 45 days, extendable once where permitted. An authorised agent may submit a request on your behalf with written proof of authorisation.

If you are unsatisfied with our response, you may have a right to appeal or to complain to your state attorney general or supervisory authority.

We use cookies and similar technologies to keep your cart and session working, remember preferences, measure traffic, and — where enabled — deliver and measure advertising.

• Strictly necessary — required for the site and checkout to function. These cannot be switched off.
• Analytics — help us understand how the site is used.
• Advertising — used to show relevant ads and measure their performance, including via advertising pixels.

You can manage cookies through your browser settings, though blocking some will break parts of the site. You can also opt out of interest-based advertising through the Digital Advertising Alliance and the Network Advertising Initiative.

We honour the Global Privacy Control browser signal as a valid opt-out of sale or sharing where applicable law requires it.

Under the CCPA and CPRA, in the past twelve months we have collected the following categories of personal information: identifiers; customer records including name, address and payment details; commercial information including purchase history; internet or network activity; and inferences drawn from the above. Sources, purposes and recipients are described in the sections above.

Sale and sharing. We do not sell personal information for money. However, our use of advertising and analytics cookies may constitute a sale or sharing for cross-context behavioural advertising under California law. You may opt out by emailing us with the subject Do Not Sell or Share My Personal Information, or by enabling Global Privacy Control in your browser.

We do not knowingly sell or share the personal information of consumers under 16.

We send marketing email or SMS only to people who have opted in. Every marketing email includes an unsubscribe link; SMS messages can be stopped by replying STOP. Message and data rates may apply.

Unsubscribing from marketing does not stop transactional messages — order confirmations, shipping notices, subscription renewal reminders and support replies — which are necessary to your purchase.

We keep personal information for as long as needed for the purpose it was collected, and afterwards as required for tax, accounting, warranty, dispute and legal-compliance purposes. Order and transaction records are generally retained for at least seven years. Marketing contacts are retained until you unsubscribe, plus a short suppression period so we do not re-add you. Analytics data is typically retained in aggregate.

We use commercially reasonable administrative, technical and physical safeguards, including encryption in transit and access controls, and we rely on PCI-compliant payment providers so that card details do not pass through our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a breach affecting your personal information occurs, we will notify you and any regulator as required by law.

This site is not directed to children and is intended for users 18 and over. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, email us and we will delete it.

We operate in the United States and process and store information there. If you access the site from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

This site may link to third-party websites and services. This policy does not apply to them, and we are not responsible for their content or privacy practices. Review their policies before providing information.

We may update this policy to reflect changes in our practices or in the law. The revised version takes effect when posted, with an updated last-updated date. Where changes are material, we will provide additional notice, such as an email or a notice on the site.

DULCIS AGUA LLC
Phoenix, Arizona
care@dulcisagua.com

Please put Privacy in the subject line so it reaches the right place.