PRIVACY POLICY

Store Operator

Themume is operated by ARIS GROUP LLC.

This Privacy Policy explains how we collect, use, disclose, and retain personal information when customers visit the store, communicate with us, create an account, or place an order.

Information We Collect

Depending on how a customer interacts with the store, we may collect:

• Name, email address, telephone number, billing address, and shipping address;

• Product selections, order, return, refund, and customer-service records;

• Payment-related information processed by Shopify and payment providers;

• IP address, device, browser, cookie, and website-usage information;

• Marketing preferences and consent records;

• Fraud-prevention and transaction-verification information; and

• Other information voluntarily provided by the customer.

We generally do not directly store complete payment-card numbers.

How We Use Information

We may use personal information to:

• Verify, process, deliver, return, and refund orders;

• Provide customer support and order notifications;

• Prevent fraud, abuse, and unauthorized payments;

• Operate, maintain, and improve the store;

• Analyze website and store performance;

• Send marketing communications where permitted;

• Meet tax, accounting, and legal obligations;

• Resolve disputes and protect legal rights; and

• Protect customers, the store, and the public.

Depending on the circumstances, the legal basis for processing may include contract performance, legal obligations, legitimate interests, consent, or another basis permitted by law.

Sources and Disclosure of Information

Information may be provided directly by customers, collected automatically through website technologies, or received from Shopify, payment providers, carriers, and store applications.

To operate the store, we may disclose necessary information to:

• Shopify;

• Payment and fraud-prevention providers;

• Warehouses, suppliers, fulfillment providers, and carriers;

• IT, hosting, customer-support, analytics, and marketing providers;

• Accountants, insurers, auditors, and professional advisers;

• Government authorities legally entitled to request information; and

• Buyers, successors, or advisers involved in a legitimate business transaction.

Service providers receive only the information reasonably necessary to perform their functions.

Our store is hosted by Shopify. Shopify’s processing of customer information is also governed by the Shopify Consumer Privacy Policy:

https://privacy.shopify.com/en

Cookies, Analytics, and Advertising

We and our service providers may use cookies, pixels, and similar technologies to provide essential store functions, maintain security, remember preferences, analyze visits, and provide advertising where permitted.

We do not sell personal information for money. However, some advertising or analytics activities may be legally defined as a sale, sharing, or use for targeted advertising in certain jurisdictions.

Customers may manage applicable choices through the cookie banner, the store’s privacy-choice page, supported browser opt-out signals, or by contacting us.

Marketing Communications

We send marketing communications only where permitted by law or with customer consent.

Customers may unsubscribe using the method provided in the message. After unsubscribing from marketing, customers may still receive necessary transactional messages concerning orders, security, accounts, or customer-service requests.

Data Retention and International Processing

We retain information only for as long as reasonably necessary to fulfill orders, provide customer service, prevent fraud, meet tax and accounting obligations, and resolve disputes.

Because we use Shopify and international service providers, information may be processed outside the customer’s country or region. Appropriate safeguards will be used where required by law.

Customer Privacy Rights

Depending on their location, customers may have the right to:

• Access, correct, or delete personal information;

• Receive a portable copy of their information;

• Restrict or object to certain processing;

• Withdraw consent;

• Opt out of certain advertising, sale, or sharing activities;

• Appeal a denied privacy request; or

• Submit a complaint to a competent regulator.

To submit a request, email tadkarnic@outlook.com with the subject line “Privacy Request.”

We may request reasonable verification information to protect customer data from unauthorized access.

Children, Security, and Policy Updates

The store is not directed to children below the minimum age of independent consent in their jurisdiction. We do not knowingly collect children’s personal information in violation of applicable law.

We use reasonable administrative and technical safeguards to protect personal information. However, no online system can be guaranteed to be completely secure.

We may update this policy when our business practices, applications, technologies, or legal obligations change. The updated effective date will be displayed on the store.