Privacy Policy

Arkaw (“Arkaw,” “we,” “us,” or “our”) respects your privacy and is dedicated to safeguarding the personal information of our customers. This Privacy Policy details how we collect, use, process, disclose, and secure your personal data when you browse or make a purchase from our website and related commerce services (collectively, the “Website” or “Services”).

1. LEGAL BASIS FOR PROCESSING (EU & UK VISITORS)

Under the General Data Protection Regulation (GDPR) and UK GDPR, we process personal data under the following lawful bases:

Contractual Necessity: To process your checkout, verify payments, manage shipping logistics, and handle customer service requests.
Legitimate Interests: To prevent fraud, maintain website security, optimize user experience, and analyze store performance.
Legal Compliance: To meet accounting, invoicing, customs documentation, and mandatory tax retention rules.
Consent: For analytical cookies, marketing newsletters, and personalized promotional messages (which you may withdraw at any time).

2. INFORMATION WE COLLECT

A) Information You Provide Directly

Identity & Contact Details: Full legal name, email address, phone number, billing address, and shipping address.
Transactional Details: Products purchased, sizing, quantities, order totals, shipping selections, and order history.
Customer Support Records: Communications, order inquiries, and return authorization messages.
Payment Details: All payment transactions are processed directly by certified Level-1 PCI-DSS payment gateways (e.g., Stripe, PayPal, Shopify Payments). Arkaw does not collect, store, or have access to full debit or credit card numbers, CVVs, or cardholder credentials. We receive only transaction authorization tokens, payment statuses, and the last four digits of the payment card for reconciliation.

B) Information Collected Automatically When you browse our catalog, our servers and service partners automatically record:

IP address and geographic location (country/city level).
Device identifiers, operating system, and browser version.
Navigational data: pages visited, apparel viewed, search queries, referral URLs, session durations, and cart actions.

3. HOW WE USE YOUR INFORMATION

We process collected information strictly for legitimate commercial and operational purposes:

Order Fulfillment: Verifying transactions, coordinating with freight carriers, updating tracking records, and processing authorized returns.
Fraud Prevention & Security: Screening checkout transactions against automated anti-fraud security protocols.
Customer Communications: Delivering dispatch notifications, administrative policy revisions, and customer service replies.
Compliance & Records: Maintaining valid sales records for customs, value-added tax (VAT), and corporate tax auditing.
Marketing Communications: Distributing newsletters or SMS notices only where explicit consent was provided, with straightforward opt-out options on every communication.

4. DISCLOSURE OF PERSONAL INFORMATION

We do not sell, rent, or lease your personal data. We disclose personal data to authorized third parties strictly to deliver our services:

Logistics & Carriers: International couriers (such as DHL, FedEx, UPS, and national postal services) strictly to complete physical delivery.
Payment Gateways: Certified payment processors for charge authorization and fraud screening.
Hosting & IT Infrastructure: Cloud servers and e-commerce platforms providing database hosting, data encryption, and operational uptime.
Legal Authorities: Regulatory agencies, customs departments, or law enforcement bodies when mandated by valid legal subpoenas, court orders, or statutory trade laws.
Corporate Transactions: In the event of a merger, corporate reorganization, or sale of company assets, customer lists may be transferred under strict non-disclosure obligations.

5. INTERNATIONAL DATA TRANSFERS

Our operational headquarters and central logistics facility are located in São Paulo, Brazil. If you access our Website from the United States, Canada, the United Kingdom, the European Union, Australia, New Zealand, or other territories, your data is processed across borders to coordinate international dispatch.

We ensure all international transfers comply with applicable privacy statutes through Standard Contractual Clauses (SCCs) approved by the European Commission, UK International Data Transfer Agreements, and equivalent safeguards ensuring continuous data security.

6. US PRIVACY RIGHTS (CCPA / CPRA)

For residents of California and states with comparable privacy legislation:

No Sale or Sharing: Arkaw does not sell personal information or share personal data with unaffiliated third parties for monetary compensation.
Cross-Context Behavioral Advertising: You have the right to opt out of data sharing for cross-context behavioral ad targeting by clicking the "Cookie Settings" link in our footer or broadcasting a Global Privacy Control (GPC) signal via your web browser.
Consumer Requests: You have the right to request access to, deletion of, or correction of your personal data without facing discriminatory pricing or service alterations.

7. YOUR DATA RIGHTS & CHOICES

Subject to your geographical jurisdiction (including the EU, UK, Canada, Australia, and Brazil), you retain the following statutory rights:

Access & Portability: Request confirmation and a portable copy of personal information we process concerning you.
Correction: Request rectification of incomplete or inaccurate records.
Erasure: Request deletion of personal records, provided they are not required to fulfill ongoing tax, legal, or fraud-prevention obligations.
Objection & Restriction: Object to data processing based on legitimate interest, or restrict processing during ongoing verification requests.
Consent Revocation: Revoke previously granted consent for marketing communications or analytics cookies at any time.

To exercise these rights, submit your request to Contact@arkawstreets.com. Identity verification may be required prior to releasing records.

8. COOKIES & TRACKING TECHNOLOGIES

We utilize essential session cookies, operational performance tags, and optional advertising pixels. For itemized specifications regarding cookie categories, lifetimes, and browser opt-out configurations, please consult our dedicated Cookies Policy.

9. DATA RETENTION & SECURITY

Security Safeguards: We maintain SSL/TLS transport-layer encryption, strict administrative access restrictions, and secure socket connections to protect data against unauthorized disclosure, alteration, or destruction.
Retention Windows: Personal transaction records are retained only as long as required to fulfill orders, settle returns, resolve transactional disputes, and satisfy commercial tax accounting mandates (typically 5 to 7 years in accordance with fiscal guidelines).

10. CHILDREN’S PRIVACY

Our products and website are intended for adult consumers. We do not knowingly solicit or collect personal information from individuals under 16 years of age (or under 13 where local statutes define). If an unauthorized minor has submitted personal information, please notify our team immediately for prompt deletion.

11. POLICY UPDATES

We may update this Privacy Policy periodically to reflect technological adjustments, operational updates, or changing statutory mandates. All revisions will be posted on this page with an updated "Last Updated" timestamp.