Legal
Privacy policy
About this policy
This notice describes the current ARYLUNA shopping experience. The product label identifies WHYTHINK RND LLC as the business behind ARYLUNA. For privacy questions or requests, contact help@aryluna.com.
Contact enquiries and quiz email submissions
When you submit our contact form, we store your name, email address, message and submission date in our private support records, hosted by Lovable Cloud. We use them to respond to your enquiry and handle order issues. Quiz email submissions are stored separately to support the quiz experience. Form contents and quiz answers are not sent to advertising platforms. Do not include payment card details or unnecessary health information in a support message. Records are kept only as needed to handle the enquiry and applicable legal obligations; contact help@aryluna.com for access or deletion requests.
Information used when you shop
Your supply selection, purchase type and quantity are used to prepare your cart. The cart is saved in your browser so it can remain available when you return. You can remove items through the cart or clear this storage through your browser settings.
Checkout and payments
Checkout takes place on Shopify. Shopify collects the information you enter there, such as contact details, a delivery address and payment information, to process the purchase. Payment details are entered into the payment provider's checkout, not an ARYLUNA payment form. Subscription checkout also processes the authorization needed for recurring payments.
Why shopping information is used
Order information is used to process purchases, manage subscription renewals, arrange delivery and respond to order enquiries. Processing for these purposes may be necessary to fulfill a purchase or meet legal obligations. Any additional use, including marketing, must be disclosed and have an appropriate legal basis.
Service providers
Shopify provides the commerce and checkout services, and Lovable hosts this website. Payment and delivery providers may receive information needed for their part of an order. Their own privacy notices also apply to their services. Supliful fulfills product orders and receives the delivery information needed to ship them. These services may process information in countries other than your own.
Advertising measurement
We use Meta Pixel (Meta Platforms) and Google Tag Manager (Google, including AppLovin tags configured by the store owner) to measure storefront and quiz page visits, quiz starts, completed quiz email steps (as an event only), product views, cart additions and checkout starts, and to optimize advertising. These services can receive IP addresses, device/browser information, page addresses (with only ad-click and campaign labels kept), cookie identifiers and product, quantity, currency and order-value information. When you allow advertising, we send Meta a one-way hashed (SHA-256) version of the email you enter, plus your IP address, browser details and Meta cookie identifiers, so Meta can match ad activity. Quiz answers are never shared. We do not send weight, gender, age or health information to Meta. Payment completion occurs on Shopify; Shopify's Meta integration reports purchases, this website does not.
Private funnel measurement
Only after recorded advertising acceptance, we store private first-party page visits, quiz starts, successful email submissions, successful Shopify cart creation and checkout handoffs in Lovable Cloud. These records contain a random browser-session identifier, page path without query strings, event time, consent notice and dated choice, region, safe campaign labels (UTM source, medium, campaign, content and term), and non-secret cart reference and subtotal when available. They contain no email address, age, weight, quiz answers or advertising click identifiers, and are not sent to Meta or other advertising platforms. We pass the accepted session identifier and campaign labels to Shopify as order attributes for merchant-side reconciliation. This website does not yet import paid-order confirmations or calculate attributed ROAS. Rejecting or withdrawing in Cookie settings stops new collection; blocked actions are not replayed. Prior consent evidence remains attached to existing records. Contact help@aryluna.com with privacy or deletion requests. Campaign labels must not contain customer or health information.
Browser storage and cookies
We save your shopping cart in your browser. Advertising tools may use cookies such as Meta's _fbp and _fbc when advertising is allowed. In regions that require consent we show an advertising consent banner, and advertising measurement runs there only after you allow it. Elsewhere ordinary advertising measurement is enabled unless you refuse or your browser signals Global Privacy Control or Do Not Track. We store a visitor identifier, region, dated advertising choice and the notice shown in your browser, preserving prior acceptance when you withdraw. No customer matching or server-side advertising uploads are enabled by this installation. Shopify handles its own checkout privacy choices.
Change your advertising choice
Use Cookie settings, available on every page, to reject advertising or restore it. Opening settings does not change your current choice. Withdrawal stops new website advertising reporting and applies to other open tabs; previously blocked events are not replayed. Your choice remains in your browser until you clear its storage. For other privacy requests, use the Contact page. Meta's and Google's privacy notices explain their processing and international transfers. The owner is responsible for keeping this notice accurate as services change.
Your choices and rights
Depending on your location, you may have rights to access, correct or delete personal information, restrict or object to certain processing, or request a copy of your data. Some order records may need to be retained for legal reasons. Use the merchant contact shown in your order confirmation for an order-related enquiry; you can also contact help@aryluna.com for privacy requests.