Privacy policy

Privacy Policy

Last updated: July 8, 2026

This Privacy Policy describes how Aquabliss Inc. ("Aquabliss," "we," "us," or "our") collects, uses, and discloses your personal information when you visit www.aquabliss.com (the "Site"), purchase our products, or otherwise interact with us. It also describes your privacy rights and how the law protects you.

By using the Site, you agree to the collection and use of information in accordance with this Privacy Policy.

Scope. Aquabliss sells exclusively to customers located in the United States. This Privacy Policy is written to comply with U.S. federal and state privacy laws. If you are accessing the Site from outside the United States, please be aware that our products are not available in your region. However, if you have provided us with personal information, you may request its deletion regardless of where you are located — see Section 12 for details.

1. Interpretation and Definitions

Interpretation

Capitalized words have the meanings defined below. Definitions apply whether the words appear in singular or plural form.

Definitions

Account means a unique account created for you to access the Site or parts of the Site.

Affiliate means an entity that controls, is controlled by, or is under common control with Aquabliss.

CCPA/CPRA means the California Consumer Privacy Act as amended by the California Privacy Rights Act.

Company (referred to as either "Aquabliss," "we," "us," or "our") refers to Aquabliss Inc., 4023 Kennett Pike, #50088, Wilmington, DE 19807.

Consumer, for purposes of state privacy laws, means a natural person who is a resident of the applicable state.

Cookies are small files placed on your device by a website that record information about your browsing on that website.

Device means any device that can access the Site such as a computer, mobile phone, or tablet.

Do Not Track ("DNT") is a browser-based concept promoted by U.S. regulators for users to indicate they do not wish to be tracked across websites.

Global Privacy Control ("GPC") is a browser-based signal that communicates an opt-out preference for sale or sharing of personal information for targeted advertising.

Jurisdiction refers to: Delaware, United States.

Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual.

Service refers to the Site.

Service Provider means any third party that processes data on our behalf.

Usage Data refers to data collected automatically through your use of the Site.

You means the individual accessing or using the Site, or the legal entity on whose behalf that individual is acting.

2. Personal Data We Collect

Information You Provide Directly

When you create an Account, place an order, sign up for a subscription, contact us, or interact with our Site, we may collect:

  • Name (first and last)
  • Email address
  • Phone number
  • Billing and shipping address (street, city, state, ZIP code)
  • Order history and product preferences
  • Subscription cadence and preferences
  • Customer service correspondence (including live chat transcripts and emails)
  • Payment information (processed directly by our payment processors; we do not store full card details)

Information Collected Automatically

When you visit the Site, we automatically collect Usage Data, which may include:

  • IP address and approximate location derived from it
  • Browser type and version
  • Operating system and device type
  • Pages visited, time spent on pages, click paths, and referring URL
  • Device identifiers and diagnostic data
  • Mouse movements, scrolls, clicks, and other interactions with the Site (via session replay tools, described below)

Information from Third Parties

We may receive information about you from third parties such as analytics providers, advertising networks, fraud prevention services, and our payment processors.

3. How We Use Your Personal Data

We use your Personal Data for the following purposes:

  • To provide and operate the Site and fulfill orders, including processing payments, shipping products, managing subscriptions, and providing customer support.
  • To manage your Account, including authentication and account-related communications.
  • To perform our contract with you, including handling returns, refunds, warranty claims, and subscription billing.
  • To contact you by email, phone, or push notification regarding orders, service updates, security alerts, and other transactional matters.
  • To send marketing communications about our products, offers, and events, where you have not opted out.
  • To deliver targeted advertising, including by sharing limited information with advertising partners as described below.
  • To analyze and improve the Site, including through analytics, session replay, A/B testing, and other product improvement activities.
  • To detect, prevent, and address fraud, abuse, security incidents, and illegal activity.
  • To comply with our legal obligations, including tax, accounting, consumer protection, and law enforcement requirements.
  • To evaluate or conduct business transfers, such as a merger, acquisition, or sale of assets.

4. How We Share Your Personal Data

We may share your Personal Data in the following situations:

  • With Service Providers who help us operate, analyze, market, and support the Site (listed in Section 7 below).
  • With business partners in connection with joint promotions or offerings.
  • With Affiliates, who will be required to honor this Privacy Policy.
  • In connection with a business transfer, such as a merger, financing, acquisition, or sale of all or part of our business.
  • For legal reasons, including to comply with law, respond to lawful requests from public authorities, enforce our agreements, or protect our rights, property, safety, or that of others.
  • With your consent, for any other purpose disclosed to you at the time we ask.

5. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, tags, and similar tracking technologies to operate the Site, analyze how it is used, personalize your experience, and serve advertising. We use both "Session" cookies (deleted when you close your browser) and "Persistent" cookies (remain on your device until expiration or deletion).

Categories of Cookies We Use

  • Necessary / Essential Cookies — Required to operate the Site, authenticate users, and prevent fraud. These cannot be disabled.
  • Functionality Cookies — Remember your preferences and choices to personalize your experience.
  • Analytics and Performance Cookies — Help us understand how visitors use the Site (e.g., Google Analytics, Microsoft Clarity).
  • Advertising and Targeting Cookies — Used by us and our advertising partners to deliver relevant advertising and measure its effectiveness (e.g., Meta Pixel, Google Ads, Pinterest, TikTok).

Managing Your Cookie Preferences

We use Pandectes to manage cookie consent on the Site. You can review and change your cookie preferences at any time by clicking the "Cookie Preferences" link in the footer of the Site, by visiting our Your Privacy Choices page directly (configured to process California opt-out requests — see Section 11 for options if you reside elsewhere), or by using your browser settings to refuse or delete cookies.

Where required by applicable law, we use non-essential cookies only with your consent. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

Do Not Track and Global Privacy Control

Our Site does not respond to Do Not Track ("DNT") browser signals because no consistent industry standard has emerged. However, we do honor Global Privacy Control ("GPC") signals as a valid opt-out of "sale" or "sharing" of personal information under applicable U.S. state privacy laws, including the CCPA/CPRA.

6. Session Replay and Heatmap Analytics

We use Microsoft Clarity to analyze how visitors interact with the Site, including by recording sessions (mouse movements, clicks, scrolls, and interactions with page elements), generating heatmaps, and producing aggregated behavioral analytics.

Microsoft Clarity automatically masks sensitive content (such as password fields and payment information) and we have enabled additional masking and IP-handling features to reduce the amount of personal information captured. These recordings are used for product improvement, debugging, and conversion optimization purposes. Microsoft processes this data in accordance with the Microsoft Privacy Statement (privacy.microsoft.com/en-us/privacystatement).

You can opt out of session recording by changing your cookie preferences as described in Section 5.

7. Service Providers

We share Personal Data with the following Service Providers for the purposes indicated. Each operates under its own privacy policy.

Platform and Subscriptions

Shopify — E-commerce platform, hosting, checkout, and customer accounts. Privacy policy: shopify.com/legal/privacy

Recharge — Subscription management and recurring billing. Privacy policy: rechargepayments.com/privacy

Payments

We do not store full payment card details on our servers. Card data is provided directly to our payment processors, which adhere to PCI-DSS standards.

Shopify Payments — Processes credit and debit cards, Apple Pay, Google Pay, and Shop Pay. Privacy policy: shopify.com/legal/privacy

PayPal — Privacy policy: paypal.com/us/legalhub/privacy-full

Amazon Pay — Privacy notice: pay.amazon.com/help/201751600

Email Marketing and Customer Profiles

Klaviyo — Email marketing, customer profile management, behavioral tracking on the Site (browsing history, product views, cart activity), audience segmentation, and predictive analytics. Klaviyo's onsite tracking links your behavior to your profile when you have provided us with your email address. Privacy notice: klaviyo.com/legal/privacy

Customer Support and Live Chat

Commslayer — Live chat and email-based customer support. Chat sessions and email correspondence are stored for up to 24 months. By initiating a chat session, you acknowledge that the conversation will be recorded and stored. Privacy policy: commslayer.com/privacy-policy

Reviews

Judge.me — Collection and display of verified customer product reviews. Privacy policy: judge.me/privacy

Analytics

Google Analytics — Web analytics service operated by Google. Privacy policy: policies.google.com/privacy. You may also install the Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout.

Microsoft Clarity — Session replay and heatmap analytics (see Section 6). Privacy statement: privacy.microsoft.com/en-us/privacystatement

Advertising and Remarketing

We use the following advertising partners. We may share information such as hashed email addresses, online identifiers, and behavioral data with them so they can show you our advertisements on other sites and apps and measure campaign performance. Under CCPA/CPRA and similar U.S. state laws, these activities may constitute "sale" or "sharing" of personal information. You can opt out via the controls described in Section 11.

Google Ads — Privacy policy: policies.google.com/privacy. Manage your preferences at adssettings.google.com.

Meta Pixel (Facebook and Instagram) — Privacy policy: facebook.com/privacy/policy. Opt out: facebook.com/help/568137493302217

Pinterest — Privacy policy: policy.pinterest.com/en/privacy-policy

TikTok — Privacy policy: tiktok.com/legal/page/us/privacy-policy/en

Microsoft Advertising (Bing Ads) — Privacy statement: privacy.microsoft.com/en-us/privacystatement

Consent Management

Pandectes — Cookie consent management, processing of GPC signals, and data subject request intake. Privacy policy: pandectes.io/privacy-policy

Industry Opt-Out Tools

You can also opt out of interest-based advertising across many participating networks using:

  • NAI: networkadvertising.org/choices
  • DAA: optout.aboutads.info
  • Mobile: enable "Limit Ad Tracking" (iOS) or "Opt Out of Ads Personalization" (Android) in your device settings.

8. How Long We Keep Your Personal Data

We retain your Personal Data only as long as necessary for the purposes set out in this Privacy Policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. We may delete data sooner where it is no longer needed.

Data Type Retention Period
Account records Duration of account relationship plus up to 24 months after closure
Support tickets and email correspondence Up to 24 months from ticket closure
Live chat transcripts Up to 24 months from the date of the session
Website analytics data (cookies, IP addresses, device identifiers) Up to 24 months from collection
Session recordings (Microsoft Clarity) Up to 13 months per Microsoft's default retention
Server logs Up to 24 months
Email marketing profile and engagement data Until unsubscribe, or up to 24 months from last engagement (whichever comes first)
Advertising identifiers and profiles Up to 24 months from last interaction or until you opt out
Subscription configuration and billing history Duration of active subscription plus up to 24 months after cancellation
Transaction records, invoices, and billing records Up to 10 years (tax, accounting, and regulatory compliance)

We may retain data longer where required by law, necessary to defend legal claims, or stored in encrypted backups subject to routine deletion schedules. Where retention periods expire, we securely delete or anonymize the data.

9. Security of Your Personal Data

We use commercially reasonable administrative, technical, and physical safeguards to protect your Personal Data. No method of transmission over the Internet or method of electronic storage is 100% secure, however, and we cannot guarantee absolute security. Where we discover a security incident affecting your Personal Data, we will notify you as required by applicable law.

10. International Data Transfers

Aquabliss is a U.S. company and processes your Personal Data primarily in the United States. Some of our Service Providers may process data in other jurisdictions. By using the Site, you consent to the transfer of your Personal Data to the United States and to other jurisdictions where our Service Providers operate. Where required by applicable law, we will ensure appropriate safeguards are in place.

11. Your U.S. State Privacy Rights

Residents of certain U.S. states have specific rights regarding their Personal Data under applicable state privacy law, including residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, among others. We will update this list as new state laws take effect.

Your Rights

  • Right to Know / Access. You have the right to request confirmation of whether we process your Personal Data and to access a copy of that data.
  • Right to Correct. You have the right to request that we correct inaccurate Personal Data we hold about you.
  • Right to Delete. You have the right to request that we delete Personal Data we have collected from you, subject to legal exceptions. See Section 12 for full details — this right is available to all users regardless of location.
  • Right to Data Portability. You have the right to receive your Personal Data in a portable and, to the extent technically feasible, machine-readable format.
  • Right to Opt Out of Sale or Sharing for Targeted Advertising. You have the right to opt out of the "sale" or "sharing" of your Personal Data for cross-context behavioral advertising. See "How to Opt Out" below.
  • Right to Opt Out of Profiling. Where applicable, you have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not currently engage in such profiling.
  • Right to Limit Use of Sensitive Personal Information. California residents have the right to limit our use of sensitive personal information. We do not currently collect sensitive personal information for purposes beyond what is necessary to provide our Service.
  • Right to Appeal. If we decline to act on your request, you have the right to appeal our decision by emailing support@aquabliss.com with the subject line "Privacy Rights Appeal."
  • Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.

How to Exercise Your Rights

You can submit a privacy rights request by emailing support@aquabliss.com with the subject line "Privacy Rights Request," or by submitting our online request form at aquabliss.com/pages/contact-us.

We will verify your identity before fulfilling your request and will respond within the timeframes required by your state's law (generally 45 days, extendable once by an additional 45 days where reasonably necessary). If you are submitting a request on behalf of another person, you must provide proof of authorization.

How to Opt Out of Sale or Sharing

You can opt out of the "sale" or "sharing" of your Personal Data for targeted advertising by:

  • Visiting our Your Privacy Choices page (linked in the footer of the Site). This page is configured through our consent management platform, Pandectes, to process opt-out requests under California's CCPA/CPRA.
  • Enabling Global Privacy Control (GPC) in your browser — we treat GPC signals as a valid opt-out request regardless of your state of residence.
  • Emailing support@aquabliss.com with the subject line "Opt Out of Sale or Sharing" — available to residents of any state with applicable opt-out rights.

Please note that opt-out preferences are typically browser- and device-specific. You may need to opt out from each browser and device you use.

12. How to Request Deletion of Your Data

This right applies to everyone. Any user, anywhere in the world, may request that we delete personal information we have collected about them. You do not need to be a resident of any particular state or country to make a deletion request.

How to Submit a Request

You may request deletion of your personal data by either of the following methods:

  1. Email: Send a message to support@aquabliss.com with the subject line "Data Deletion Request." Please include your full name and the email address associated with your account so we can locate your data.
  2. Online form: Complete our contact form at aquabliss.com/pages/contact-us and indicate that you are requesting deletion of your personal data.

What Happens After You Submit

  • We will verify your identity before processing your request.
  • We will respond within 45 days. If we need more time, we will notify you and may extend our response by a further 45 days where reasonably necessary.
  • Once verified, we will delete — or instruct our Service Providers to delete — your personal data, except where we are required or permitted to retain it (see below).

Data We May Need to Retain

In some cases we may be unable to delete certain data. This includes situations where retention is necessary to:

  • Complete a transaction you initiated, or fulfill a warranty or legal claim.
  • Detect, prevent, or investigate security incidents, fraud, or illegal activity.
  • Comply with a legal obligation — for example, transaction and billing records must be retained for up to 10 years for tax and accounting purposes.
  • Exercise or defend legal claims.

If any of these exceptions apply to your request, we will explain this in our response.

Data Held by Third Parties

If we have shared your personal data with third-party Service Providers or advertising partners, we will notify those parties of your deletion request to the extent required by applicable law. You may also need to contact those third parties directly to request deletion of any data they hold independently.

Facebook / Meta Platform Data

If you have interacted with Aquabliss through Facebook or Instagram (for example, via the Meta Pixel or our Facebook page), Meta may hold data about those interactions independently. To request deletion of data held by Meta, please use Meta's own deletion tools at facebook.com/help/contact/1638046109617856.

13. California-Specific Privacy Notice (CCPA/CPRA)

This section supplements the information above and applies solely to California residents.

Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information from California residents:

Category Examples Collected
A: Identifiers Name, postal address, email, phone, IP address, online and account identifiers Yes
B: Cal. Civ. Code § 1798.80(e) Name, address, phone, financial information (limited; full card data not stored) Yes
C: Protected classifications — No
D: Commercial information Products purchased, order history Yes
E: Biometric information — No
F: Internet or network activity Browsing history, Site interactions, session recordings, ad interactions Yes
G: Geolocation data Approximate location derived from IP address only (no precise GPS) Yes
H: Sensory data — No
I: Professional or employment information — No
J: Non-public education information — No
K: Inferences Predictive scores and audience segments (e.g., via Klaviyo) Yes
L: Sensitive personal information — No

Sources of Personal Information

  • Directly from you (forms, orders, account creation, contact form, chat).
  • Automatically through your use of the Site (cookies, server logs, session recordings).
  • From Service Providers (analytics, advertising, fraud prevention, payment processing).

Sale and Sharing of Personal Information

We do not sell Personal Information in exchange for money. However, our use of advertising and analytics cookies and pixels may qualify as a "sale" or "sharing" under the CCPA/CPRA. In the past 12 months, we may have "sold" or "shared" the following categories for cross-context behavioral advertising: Category A (Identifiers), Category D (Commercial information), Category F (Internet activity), and Category K (Inferences). The categories of third parties involved are advertising networks and analytics providers (listed in Section 7).

You have the right to opt out — see "How to Opt Out of Sale or Sharing" in Section 11.

Sale or Sharing of Personal Information of Minors

We do not knowingly sell or share the Personal Information of consumers under 16 years of age.

Shine the Light

California Civil Code Section 1798.83 permits California residents with an established business relationship with us to request information once per year about our disclosure of their personal information to third parties for those third parties' direct marketing purposes. To request this information, contact us at support@aquabliss.com.

Notice at Collection

The categories of Personal Information we collect, the purposes for which we use them, and our retention periods are described above. We provide this notice at or before the point of collection.

14. Children's Privacy

The Site is not directed to children. We do not knowingly collect Personal Information from anyone under the age of 16. Our products are sold only to individuals 18 years or older. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at support@aquabliss.com and we will take steps to delete it.

15. Links to Other Websites

The Site may contain links to other websites we do not operate. We are not responsible for the content or privacy practices of those sites. We encourage you to review their privacy policies.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date above. Where required by law, we will provide additional notice (such as via email). Your continued use of the Site after the changes take effect constitutes your acceptance of the revised Privacy Policy.

17. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights:

  • Email: support@aquabliss.com
  • Mail: Aquabliss Inc., 4023 Kennett Pike, #50088, Wilmington, DE 19807
  • Online: aquabliss.com/pages/contact-us