Privacy Policy

Last updated: May 25, 2026

This Privacy Policy describes how AquaBliss Inc. ("AquaBliss," "we," "us," or "our") collects, uses, and discloses your personal information when you visit www.aquabliss.com (the "Site"), purchase our products, or otherwise interact with us. It also describes your privacy rights and how the law protects you.

By using the Site, you agree to the collection and use of information in accordance with this Privacy Policy.

Scope. AquaBliss sells exclusively to customers located in the United States. This Privacy Policy is written to comply with U.S. federal and state privacy laws. If you are accessing the Site from outside the United States, please do not provide us with personal information.

1. Interpretation and Definitions

Interpretation

Capitalized words have the meanings defined below. Definitions apply whether the words appear in singular or plural form.

Definitions

  • Account means a unique account created for you to access the Site or parts of the Site.
  • Affiliate means an entity that controls, is controlled by, or is under common control with AquaBliss.
  • CCPA/CPRA means the California Consumer Privacy Act as amended by the California Privacy Rights Act.
  • Company (referred to as either "AquaBliss," "we," "us," or "our") refers to AquaBliss Inc., 4023 Kennett Pike, #50088, Wilmington, DE 19807.
  • Consumer, for purposes of state privacy laws, means a natural person who is a resident of the applicable state.
  • Cookies are small files placed on your device by a website that record information about your browsing on that website.
  • Device means any device that can access the Site such as a computer, mobile phone, or tablet.
  • Do Not Track ("DNT") is a browser-based concept promoted by U.S. regulators for users to indicate they do not wish to be tracked across websites.
  • Global Privacy Control ("GPC") is a browser-based signal that communicates an opt-out preference for sale or sharing of personal information for targeted advertising.
  • Jurisdiction refers to: Delaware, United States.
  • Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual.
  • Service refers to the Site.
  • Service Provider means any third party that processes data on our behalf.
  • Usage Data refers to data collected automatically through your use of the Site.
  • You means the individual accessing or using the Site, or the legal entity on whose behalf that individual is acting.

2. Personal Data We Collect

Information You Provide Directly

When you create an Account, place an order, sign up for a subscription, contact us, or interact with our Site, we may collect:

  • Name (first and last)
  • Email address
  • Phone number
  • Billing and shipping address (street, city, state, ZIP code)
  • Order history and product preferences
  • Subscription cadence and preferences
  • Customer service correspondence (including live chat transcripts and emails)
  • Payment information (processed directly by our payment processors; we do not store full card details)

Information Collected Automatically

When you visit the Site, we automatically collect Usage Data, which may include:

  • IP address and approximate location derived from it
  • Browser type and version
  • Operating system and device type
  • Pages visited, time spent on pages, click paths, and referring URL
  • Device identifiers and diagnostic data
  • Mouse movements, scrolls, clicks, and other interactions with the Site (via session replay tools, described below)

Information from Third Parties

We may receive information about you from third parties such as analytics providers, advertising networks, fraud prevention services, and our payment processors.

3. How We Use Your Personal Data

We use your Personal Data for the following purposes:

  • To provide and operate the Site and fulfill orders, including processing payments, shipping products, managing subscriptions, and providing customer support.
  • To manage your Account, including authentication and account-related communications.
  • To perform our contract with you, including handling returns, refunds, warranty claims, and subscription billing.
  • To contact you by email, phone, or push notification regarding orders, service updates, security alerts, and other transactional matters.
  • To send marketing communications about our products, offers, and events, where you have not opted out.
  • To deliver targeted advertising, including by sharing limited information with advertising partners as described below.
  • To analyze and improve the Site, including through analytics, session replay, A/B testing, and other product improvement activities.
  • To detect, prevent, and address fraud, abuse, security incidents, and illegal activity.
  • To comply with our legal obligations, including tax, accounting, consumer protection, and law enforcement requirements.
  • To evaluate or conduct business transfers, such as a merger, acquisition, or sale of assets.

4. How We Share Your Personal Data

We may share your Personal Data in the following situations:

  • With Service Providers who help us operate, analyze, market, and support the Site (listed in Section 7 below).
  • With business partners in connection with joint promotions or offerings.
  • With Affiliates, who will be required to honor this Privacy Policy.
  • In connection with a business transfer, such as a merger, financing, acquisition, or sale of all or part of our business.
  • For legal reasons, including to comply with law, respond to lawful requests from public authorities, enforce our agreements, or protect our rights, property, safety, or that of others.
  • With your consent, for any other purpose disclosed to you at the time we ask.

5. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, tags, and similar tracking technologies to operate the Site, analyze how it is used, personalize your experience, and serve advertising.

We use both "Session" cookies (deleted when you close your browser) and "Persistent" cookies (remain on your device until expiration or deletion).

Categories of Cookies We Use

  • Necessary / Essential Cookies — Required to operate the Site, authenticate users, and prevent fraud. These cannot be disabled.
  • Functionality Cookies — Remember your preferences and choices to personalize your experience.
  • Analytics and Performance Cookies — Help us understand how visitors use the Site (e.g., Google Analytics, Microsoft Clarity).
  • Advertising and Targeting Cookies — Used by us and our advertising partners to deliver relevant advertising and measure its effectiveness (e.g., Meta Pixel, Google Ads, Pinterest, TikTok).

Managing Your Cookie Preferences

We use Pandectes to manage cookie consent on the Site. You can review and change your cookie preferences at any time by clicking the "Cookie Preferences" or "Your Privacy Choices" link in the footer of the Site, or by using your browser settings to refuse or delete cookies.

Where required by applicable law, we use non-essential cookies only with your consent. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

Do Not Track and Global Privacy Control

Our Site does not respond to Do Not Track ("DNT") browser signals because no consistent industry standard has emerged. However, we do honor Global Privacy Control ("GPC") signals as a valid opt-out of "sale" or "sharing" of personal information under applicable U.S. state privacy laws, including the CCPA/CPRA.

6. Session Replay and Heatmap Analytics

We use Microsoft Clarity to analyze how visitors interact with the Site, including by recording sessions (mouse movements, clicks, scrolls, and interactions with page elements), generating heatmaps, and producing aggregated behavioral analytics.

Microsoft Clarity automatically masks sensitive content (such as password fields and payment information) and we have enabled additional masking and IP-handling features available within Microsoft Clarity to reduce the amount of personal information captured. These recordings are used for product improvement, debugging, and conversion optimization purposes. Microsoft processes this data in accordance with Microsoft's Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement.

You can opt out of session recording by changing your cookie preferences as described in Section 5.

7. Service Providers

We share Personal Data with the following Service Providers for the purposes indicated. Each operates under its own privacy policy:

Platform and Subscriptions

  • Shopify — e-commerce platform, hosting, checkout, customer accounts. Privacy policy.
  • Recharge — subscription management and recurring billing for our subscription plans. Privacy policy.

Payments

We do not store full payment card details on our servers. Card data is provided directly to our payment processors, which adhere to PCI-DSS standards:

Email Marketing and Customer Profiles

  • Klaviyo — email marketing, customer profile management, behavioral tracking on the Site (browsing history, product views, cart activity), audience segmentation, and predictive analytics. Klaviyo's onsite tracking links your behavior to your profile when you have provided us with your email address. Privacy notice.

Customer Support and Live Chat

  • Commslayer — live chat on the Site and email-based customer support handling for messages submitted through our contact form. Chat sessions and email correspondence are stored as described in Section 9 below. By initiating a chat session, you acknowledge that the conversation will be recorded and stored. Privacy policy.

Reviews

  • Judge.me — collection and display of verified customer product reviews. Privacy policy.

Analytics

Advertising and Remarketing

We use the following advertising partners. We may share information such as hashed email addresses, online identifiers, and behavioral data with them so they can show you our advertisements on other sites and apps and measure campaign performance. Under CCPA/CPRA and similar U.S. state laws, these activities may constitute "sale" or "sharing" of personal information. You can opt out via the controls described in Section 11 ("Your U.S. State Privacy Rights").

Consent Management

  • Pandectes — cookie consent management, processing of GPC signals, and DSR intake. Privacy policy.

You can also opt out of interest-based advertising across many participating networks using the following industry tools:

8. How Long We Keep Your Personal Data

We retain your Personal Data only as long as necessary for the purposes set out in this Privacy Policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Specific retention periods are below; we may delete sooner where the data is no longer needed.

Account Information

  • Account records: duration of the account relationship plus up to 24 months after account closure.

Customer Support Data

  • Support tickets and email correspondence: up to 24 months from ticket closure.
  • Live chat transcripts: up to 24 months from the date of the session, for quality assurance and training.

Usage Data

  • Website analytics data (cookies, IP addresses, device identifiers): up to 24 months from collection.
  • Session recordings (Microsoft Clarity): up to 13 months per Microsoft's default retention.
  • Server logs: up to 24 months for security and troubleshooting.

Marketing Data

  • Email marketing profile and engagement data: retained until you unsubscribe or up to 24 months from your last engagement (open or click), whichever comes first.
  • Advertising identifiers and profiles: up to 24 months from last interaction or until you opt out.

Subscription Data

  • Subscription configuration, billing schedule, and history: duration of the active subscription plus up to 24 months after cancellation for dispute resolution and customer service.

Financial and Transaction Data

  • Transaction records, invoices, and billing records: up to 10 years from the date of the transaction, for tax, accounting, and regulatory compliance.

We may retain data longer where required by law, necessary to defend legal claims, or stored in encrypted backups subject to routine deletion schedules. Where retention periods expire, we securely delete or anonymize the data.

9. Security of Your Personal Data

We use commercially reasonable administrative, technical, and physical safeguards to protect your Personal Data. No method of transmission over the Internet or method of electronic storage is 100% secure, however, and we cannot guarantee absolute security. Where we discover a security incident affecting your Personal Data, we will notify you as required by applicable law.

10. International Data Transfers

AquaBliss is a U.S. company and processes your Personal Data primarily in the United States. Some of our Service Providers may process data in other jurisdictions. By using the Site, you consent to the transfer of your Personal Data to the United States and to other jurisdictions where our Service Providers operate. Where required by applicable law, we will ensure appropriate safeguards are in place.

11. Your U.S. State Privacy Rights

Residents of certain U.S. states have specific rights regarding their Personal Data. The rights described below apply to the extent provided by the privacy law of your state of residence. Currently this includes residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, among others. We will update this list as new state laws take effect.

Your Rights

  • Right to Know / Access. You have the right to request confirmation of whether we process your Personal Data and to access a copy of that data.
  • Right to Correct. You have the right to request that we correct inaccurate Personal Data we hold about you.
  • Right to Delete. You have the right to request that we delete Personal Data we have collected from you, subject to legal exceptions.
  • Right to Data Portability. You have the right to receive your Personal Data in a portable and, to the extent technically feasible, machine-readable format.
  • Right to Opt Out of Sale or Sharing for Targeted Advertising. You have the right to opt out of the "sale" or "sharing" of your Personal Data for cross-context behavioral advertising. See "How to Opt Out" below.
  • Right to Opt Out of Profiling. Where applicable, you have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not currently engage in such profiling.
  • Right to Limit Use of Sensitive Personal Information. California residents have the right to limit our use of sensitive personal information. We do not currently collect sensitive personal information for purposes beyond what is necessary to provide our Service.
  • Right to Appeal. If we decline to act on your request, you have the right to appeal our decision. Appeals should be sent to support@aquabliss.com with the subject line "Privacy Rights Appeal."
  • Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.

How to Exercise Your Rights

You can submit a privacy rights request by:

We will verify your identity before fulfilling your request. We may ask you to provide information that matches information we hold about you. We will respond to verified requests within the timeframes required by your state's law (generally 45 days, extendable once by an additional 45 days where reasonably necessary). If you are submitting a request on behalf of another person, you must provide proof of authorization.

How to Opt Out of Sale or Sharing

You can opt out of the "sale" or "sharing" of your Personal Data for targeted advertising in any of the following ways:

  • Click the "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" link in the footer of the Site.
  • Enable Global Privacy Control (GPC) in your browser. We will treat GPC signals as a valid opt-out request.
  • Email us at support@aquabliss.com with the subject line "Opt Out of Sale or Sharing."

Please note that opt-out preferences are typically browser- and device-specific. You may need to opt out from each browser and device you use.

12. California-Specific Privacy Notice (CCPA/CPRA)

This section supplements the information above and applies solely to California residents.

Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information from California residents:

  • Category A: Identifiers — name, postal address, email, phone, IP address, online identifiers, account identifiers. Collected: Yes.
  • Category B: Cal. Civ. Code § 1798.80(e) — name, address, phone, financial information (limited; full card data not stored). Collected: Yes.
  • Category C: Protected classifications. Collected: No.
  • Category D: Commercial information — products purchased, order history. Collected: Yes.
  • Category E: Biometric information. Collected: No.
  • Category F: Internet or network activity — browsing history, interactions with our Site, session recordings, ad interactions. Collected: Yes.
  • Category G: Geolocation data — approximate location derived from IP address only. Collected: Yes (coarse/approximate only; no precise GPS).
  • Category H: Sensory data. Collected: No.
  • Category I: Professional or employment information. Collected: No.
  • Category J: Non-public education information. Collected: No.
  • Category K: Inferences — predictive scores and audience segments derived by our marketing tools (e.g., Klaviyo). Collected: Yes.
  • Category L: Sensitive personal information. Collected: No.

Sources of Personal Information

  • Directly from you (forms, orders, account creation, contact form, chat).
  • Automatically through your use of the Site (cookies, server logs, session recordings).
  • From Service Providers (analytics, advertising, fraud prevention, payment processing).

Sale and Sharing of Personal Information

We do not sell Personal Information in exchange for money. However, our use of advertising and analytics cookies and pixels may qualify as a "sale" or "sharing" of Personal Information under the CCPA/CPRA. In the past 12 months, we may have "sold" or "shared" the following categories for cross-context behavioral advertising: Category A (Identifiers), Category D (Commercial information), Category F (Internet activity), and Category K (Inferences). The categories of third parties to whom this information is disclosed are advertising networks and analytics providers (listed in Section 7).

You have the right to opt out of this "sale" or "sharing." See "How to Opt Out of Sale or Sharing" above.

Sale or Sharing of Personal Information of Minors

We do not knowingly sell or share the Personal Information of consumers under 16 years of age.

Shine the Light

California Civil Code Section 1798.83 ("Shine the Light") permits California residents with an established business relationship with us to request information once per year about our disclosure of their personal information to third parties for the third parties' direct marketing purposes. To request this information, contact us at support@aquabliss.com.

Notice at Collection

The categories of Personal Information we collect, the purposes for which we use them, and our retention periods are described above. We provide this notice at or before the point of collection.

13. Children's Privacy

The Site is not directed to children. We do not knowingly collect Personal Information from anyone under the age of 16. Our products are sold only to individuals 18 years or older. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at support@aquabliss.com and we will take steps to delete it.

14. Links to Other Websites

The Site may contain links to other websites we do not operate. We are not responsible for the content or privacy practices of those sites. We encourage you to review their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date above. Where required by law, we will provide additional notice (such as via email). Your continued use of the Site after the changes take effect constitutes your acceptance of the revised Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights: