Privacy Policy

Last Updated: August 23, 2026

Arluna, commercially operated by UK-registered entity FF COMMERCE LTD ("we", "us", "our"), operates this store and website (arlunafashion.com), including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services").

Arluna is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information. We process personal information of Canadian customers in compliance with applicable legislation, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Law 25.

1. Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified. We may collect or process the following categories of personal information depending on how you interact with the Services:

2. Personal Information Sources

We may collect personal information from the following sources:

• Directly from you: Including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
• Automatically through the Services: Including from your device when you use our products or services or visit our websites, through cookies and similar technologies.
• From service providers: Including when we engage them to enable certain technology and when they collect or process your personal information on our behalf.
• From our partners or other third parties.

3. How We Use Your Personal Information

• Provide, Tailor, and Improve the Services: To perform our contract with you, process payments, fulfill orders, remember preferences, send account notifications, process returns/exchanges, manage your account, arrange shipping, enable reviews, and tailor your shopping experience.
• Marketing and Advertising: For promotional communications by email, text message, or mail, and to show you online advertisements based on your activity on the Services.
• Security and Fraud Prevention: To authenticate your account, secure checkout transactions, detect and investigate illegal or malicious activity, and protect public safety.
• Communicating with You: To provide customer support, respond to inquiries, and maintain our business relationship with you.
• Legal Reasons: To comply with applicable laws, respond to valid legal processes, investigate civil discovery or litigation, and enforce our policies.

4. How We Disclose Personal Information & Relationship with Shopify

In certain circumstances, we may disclose your personal information to third parties for legitimate business purposes:

• Service Providers: With Shopify, IT vendors, payment processors, data analytics, customer support, cloud storage, fulfillment, and shipping providers.
• Business & Marketing Partners: To provide targeted marketing services based on your online activity.
• Corporate & Legal Obligations: With our affiliates, within our corporate group, or in connection with business transactions like mergers or legal compliance requests.

5. International Transfers

Please note that we may transfer, store, and process your personal information outside the country you live in (including in the United Kingdom, United States, or Asia). If we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms like Standard Contractual Clauses or adequacy decisions.

6. Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, information sent to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive information.

How long we retain your personal information depends on operational factors, such as account maintenance, providing Services, complying with legal obligations, or resolving disputes.

7. Your Rights and Choices

Depending on where you live (including PIPEDA and Quebec Law 25 rights for Canadian residents), you may have some or all of the rights listed below:

• Right to Access / Know: Request access to personal information that we hold about you.
• Right to Delete: Request that we delete personal information we maintain about you.
• Right to Correct: Request that we correct inaccurate personal information.
• Right of Portability: Receive a copy of your personal information in a structured electronic format.
• Managing Communication Preferences: Opt out of promotional emails at any time using the unsubscribe link.

8. Children's Data

The Services are not intended to be used by children, and we do not knowingly collect personal information about children under the age of majority in your jurisdiction. Parents or guardians may contact us to request data deletion.

9. Contact & Complaints

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights or lodge a complaint, please contact us at: