1. INTRODUCTION

1.1 Purpose of this Privacy Policy
This Privacy Policy outlines how ARISTOCRATIA ÉLITUM ("Company," "we," "us," or "our") collects, uses, discloses, and safeguards your data by applicable data protection laws, including but not limited to the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the California Consumer Privacy Act ("CCPA"), and other relevant global privacy standards. This document applies to all users of our website, services, and products.

1.2 Legal Basis
We process your data lawfully, fairly, and transparently under one or more legal bases, including your explicit consent, the necessity of processing for the performance of a contract, compliance with legal obligations, protection of vital interests, and legitimate interests pursued by the Company.

1.3 Scope of the Policy
This policy applies to all personal data collected through our website, e-commerce platform, marketing campaigns, customer support interactions, and affiliated services.

2. DATA COLLECTION

2.1 Information You Provide Directly
We collect personal data you provide when creating an account, placing an order, contacting support, signing up for newsletters, or interacting with our site. This includes your name, email address, billing and shipping addresses, phone number, payment information, and communications.

2.2 Automatically Collected Information
We use cookies, web beacons, log files, and other tracking technologies to collect data on website usage, IP addresses, browser types, operating systems, pages visited, and session duration. This helps improve user experience and enhance security.

2.3 Third-Party Data
We may collect data from third-party sources, such as payment processors, advertising networks, and data verification services, to verify identity, prevent fraud, and improve services.

3. USE OF PERSONAL DATA

3.1 Order Fulfillment and Customer Support
Your data is used to process and deliver your orders, communicate order status, and handle queries, complaints, and requests efficiently.

3.2 Marketing and Personalization
With your consent, we send newsletters, promotional offers, and tailored content. You can opt out at any time. We analyze user behavior to provide personalized experiences.

3.3 Compliance and Legal Obligations
We may process your data to comply with applicable laws, regulatory requirements, court orders, and legitimate requests by public authorities.

3.4 Security and Fraud Prevention
Your data is used to detect, investigate, and prevent fraudulent activities, abuse, and threats to the security of our platform.

3.5 Internal Analytics
We use de-identified and aggregated data for internal purposes, including business analysis, product development, and service optimization.

4. DATA SHARING AND DISCLOSURE

4.1 Third-Party Service Providers
We share personal data with trusted vendors and service providers who assist in payment processing, delivery, data storage, analytics, email marketing, and legal services.

4.2 Legal Requirements
We may disclose your data when required to comply with a legal obligation, protect our rights or safety, enforce our terms and conditions, or respond to lawful requests from authorities.

4.3 Business Transfers
In the event of a merger, acquisition, or asset sale, your data may be transferred as part of the business transaction.

4.4 International Transfers
If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards, such as standard contractual clauses, data processing agreements, and adequacy decisions, are in place.

5. DATA RETENTION

5.1 Retention Periods
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods vary by data type and legal obligation.

5.2 Deletion Procedures
Once data is no longer needed, it is securely deleted, anonymized, or aggregated to prevent identification.

6. YOUR RIGHTS UNDER GDPR

6.1 Right to Access
You can request confirmation of whether we process your data and obtain a copy of the data.

6.2 Right to Rectification
You have the right to request correction of inaccurate or incomplete data.

6.3 Right to Erasure
You can request deletion of your data, subject to legal or contractual obligations that may require its retention.

6.4 Right to Restrict Processing
You may request limited processing of your data under certain conditions.

6.5 Right to Data Portability
You can request your data in a structured, commonly used, machine-readable format.

6.6 Right to Object
You have the right to object to processing based on legitimate interests or direct marketing.

6.7 Right to Withdraw Consent
You can withdraw consent at any time without affecting prior processing.

6.8 Right to Lodge a Complaint
You can complain to your local data protection authority.

7. SECURITY MEASURES

7.1 Technical Safeguards
We use secure servers, SSL encryption, firewalls, and pseudonymization techniques to protect your data.

7.2 Organizational Measures
Access to personal data is limited to authorized personnel under strict confidentiality agreements. Regular audits and access controls are enforced.

7.3 Breach Notification
In the event of a data breach that may result in a risk to your rights or freedoms, we will notify you and the relevant authorities as required by law.

8 Account Information & Use

When you create an account on Aristocratia Élitum, we collect and securely store information such as your name, email address, shipping addresses, and any other relevant contact details you provide. This information is used to personalize your experience, facilitate checkout, provide order updates, and offer exclusive access to services, benefits, and membership programs, such as Aristocratia Privé.

We do not share or sell your data with third parties for marketing purposes. Your data is stored securely in compliance with international data protection laws, and is only accessible to authorized personnel for operational purposes.

You may request access to or deletion of your account data at any time by contacting us at:
📧 support@aristocratiaelitum.com

You must be 18 years or older to create an account. If you are under 18, a parent or guardian must approve your account creation and supervise its use.

9. COOKIE POLICY

9.1 Purpose of Cookies

We use cookies and similar tracking technologies to provide a seamless, personalized, and secure experience across our website. Cookies are small data files placed on your device to recognize you, retain your preferences, and ensure optimal functionality.

9.2 Types of Cookies Used

We use a limited set of cookie types:

• Essential Cookies: Required for basic website operations such as secure login, shopping cart management, and transaction processing.
  
• Performance Cookies: Help us understand visitor behavior and site performance through aggregated analytics.
  
• Functional Cookies: Enable enhanced features like saved preferences, language selection, and user customization.
  
• Advertising Cookies: May be used in collaboration with partners to deliver relevant ads and measure marketing effectiveness.
  

9.3 Cookie Consent

By continuing to use our site, you consent to our use of cookies unless you have adjusted your browser settings to disable them. You may withdraw or modify your consent at any time.

9.4 Managing Cookies

You can manage cookie settings through your browser’s preferences. Please note that disabling certain cookies may impact the availability or functionality of some features on our site.

9.5 Third-Party Cookies

We may permit trusted third parties such as Google Analytics, Meta, and Shopify to set cookies for analytics, performance, and personalization in compliance with applicable privacy laws.

10. CHILDREN’S PRIVACY

10.1 Age Restrictions
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from minors without verified parental consent.

10.2 Data Removal
If we discover that we have collected personal data from a child under 16 without verification, we will promptly delete the data.

11. THIRD-PARTY LINKS

11.1 External Sites
Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies.

12. INTERNATIONAL USERS

12.1 Cross-Border Transfers
For users outside of India or the EEA, your data may be processed in the country where our servers or third-party providers are located. We implement legal mechanisms for compliant international data transfers.

13. CONTACT INFORMATION

13.1 Data Controller Details
ARISTOCRATIA ÉLITUM
Founder: Aaryan Malik
Origin: India
Email: legal@aristocratiaelitum.com
Phone: +91 7300-731115

13.2 Data Processors

We may use third-party service providers to process personal data on our behalf. These processors include, but are not limited to:

• Shopify Inc – Hosting, ecommerce infrastructure
  
• Google LLC – Analytics, performance tracking
  
• Meta Platforms, Inc. – Advertising and engagement. These processors are contractually obligated to protect your data and comply with applicable data protection laws.

13.3 Payment Processors

We may use one or more trusted third-party payment processors to handle payment transactions on our behalf. These processors collect, use, and store your payment data under their privacy policies and applicable regulations. While ARISTOCRATIA ÉLITUM, does not directly store your full payment card details, we ensure that all processors we work with are PCI-DSS compliant and maintain industry-standard safeguards for financial data.

By purchasing on our website, you agree to the processing of your payment data by such third-party providers. For more information on their respective privacy practices, we encourage you to review the policies of each payment gateway you interact with during checkout.

14. CHANGES TO THIS PRIVACY POLICY

14.1 Updates
We may update this Privacy Policy periodically to reflect legal or operational changes. Updates will be posted on our site with a revised effective date.

14.2 Notification
Where appropriate, we will notify users of significant changes via email or on-site pop-ups.