Privacy Policy

Last Updated: July 4, 2026

At Arthrolix Active, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or make a purchase.

Key Principle: We only collect the minimum personal data necessary to process your order and provide customer support. We never sell or share your data with third parties for marketing purposes.

1. Data Controller

Arthrolix Active is the data controller responsible for the processing of your personal data. If you have any questions about this Privacy Policy, please contact us at privacy@arthrolix.org.

2. What Data We Collect

We collect only the data necessary to fulfill your orders and provide our services:

  • Name: To address you correctly and prepare your order.
  • Phone Number: To contact you regarding your order confirmation and delivery.
  • Delivery Address: To ship your product to the correct location.
  • Email Address (optional): If you choose to provide it for order updates or inquiries.
  • IP Address and Browser Information: Collected automatically for website analytics and security (see Section 7).

3. How We Use Your Data

Your personal data is used exclusively for the following purposes:

  • Order Processing: To confirm, prepare, and deliver your order.
  • Customer Support: To respond to your inquiries and resolve any issues.
  • Order Updates: To notify you about the status of your order and delivery.
  • Legal Compliance: To comply with applicable laws and regulations.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contractual Necessity: Processing is necessary for the performance of the contract (order fulfillment).
  • Consent: You have given clear consent for specific purposes (e.g., marketing communications).
  • Legal Obligation: Processing is necessary to comply with legal obligations.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. Specifically:

  • Order Data: Retained for 5 years to comply with tax and consumer protection laws.
  • Inquiries and Support: Retained for 2 years after the last communication.

6. Data Sharing and Third Parties

We never sell or rent your personal data. We may share your data with trusted third parties only when necessary:

  • Delivery Partners: To ship your order (e.g., courier services).
  • Payment Processors: For payment processing (if applicable).
  • Legal Authorities: If required by law or to protect our legal rights.

All third parties are required to handle your data in compliance with applicable data protection laws.

7. Cookies and Analytics

Our website uses cookies to enhance user experience and analyze site traffic. These are small text files stored on your device. We use:

  • Essential Cookies: Necessary for website functionality (e.g., form submissions).
  • Analytics Cookies: To understand how visitors interact with our site (e.g., Google Analytics).

You can manage cookie preferences through your browser settings. However, disabling cookies may affect website functionality.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data ("right to be forgotten").
  • Right to Restriction: Request restriction of processing in certain circumstances.
  • Right to Data Portability: Request transfer of your data to another controller.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Withdraw Consent: Withdraw consent at any time.

To exercise any of these rights, please contact us at privacy@arthrolix.org. We will respond within 30 days as required by law.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, or destruction. Our website uses SSL encryption to secure data transmission.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) for the purposes of order fulfillment (e.g., delivery partners). We ensure that such transfers are subject to appropriate safeguards in accordance with GDPR requirements.

11. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We reserve the right to update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Effective Date: July 4, 2026