Privacy policy
Privacy Policy
Effective from 21 September 2026
This page explains what happens to the details you share while you browse nareya.co, buy something or write to us. We have tried to write it in plain language.
1. Who is responsible for your data
AROAK LLC, a US-incorporated company, uses the brand name Nareya. AROAK LLC decides why and how the information described below is used. In UK and EU terms that makes us the controller of your data; under California law we are the business. You can reach us at help@nareya.co.
2. What we collect
Details you give us: your name, delivery and billing addresses, your email, your telephone number, the contents of your orders, and anything you write to us or post in a review, including photos you choose to upload.
Details created by your order: order history, refunds, and shipment tracking events.
Details collected automatically: your IP address, device and browser type, the pages you view, the site that sent you to us and your approximate location (country and city level). These come from cookies and similar technologies.
Payment details: you type these into the secure checkout and they are handled by our payment processors. We never see or keep your full card number.
3. Why we use it
- To take your order, deliver it and deal with any refund. We need this to carry out our contract with you.
- To send order updates and answer your questions. Same reason, plus our interest in looking after customers properly.
- To keep the site secure, prevent fraud and fix faults. This is a legitimate interest of ours.
- To understand what works on the site and improve it. Legitimate interest or your consent, depending on where you live.
- To send marketing messages and show you relevant ads. Only with your consent, which you can withdraw whenever you like.
- To keep the accounting, tax and other records the law obliges us to keep.
4. Marketing messages
If you sign up, we may email you about new products and offers. Every marketing email has an unsubscribe link, and you can also simply write to us. Order and service emails are not marketing, so you will still receive those.
5. Cookies and advertising tools
We use three kinds. Essential cookies keep your cart, checkout and security working. Analytics cookies tell us how the site is used. Advertising cookies, such as pixels from ad platforms, let us measure our ads and show them to people who may find them useful.
You can control cookies through the banner on the site where one is shown, through your browser or through your device settings. Blocking essential cookies may stop the cart from working. Where the law requires it, we respect opt-out signals sent by your browser, such as Global Privacy Control.
6. Who receives your information
Selling your personal information for money is something we never do. We pass it only to companies that help us run the store, and only what they need: our payment processors, the platform that hosts the shop, delivery carriers and fulfilment partners, email and text messaging services, our review platform, customer support tools, and analytics and advertising platforms. They are bound by contract to protect it. We may also disclose information when a court or authority legally requires it, or as part of a sale or merger of the business.
California residents: some advertising cookies can count as "sharing" personal information for cross-context behavioural advertising. You can opt out at any time by emailing help@nareya.co with the subject "Do not sell or share", or through the cookie settings.
7. Transfers between countries
Our company is American, our shop platform is operated from Canada, and our providers may handle data in the United States and elsewhere. When information leaves the UK or the European Economic Area, we rely on safeguards such as adequacy decisions or standard contractual clauses put in place by those providers.
8. How long we keep it
Order and tax records are retained while tax, accounting and consumer law demand it, typically for a number of years. Marketing details stay until you unsubscribe or ask us to erase them, apart from a minimal record so that we do not contact you again. Support conversations are kept for a limited time after they are resolved. Anything we no longer need is deleted or made anonymous.
9. Your rights
Depending on where you live, you may ask to: see the information we hold about you; have it corrected; have it deleted; receive a copy in a portable format; raise an objection to some uses, or ask us to limit them; withdraw a consent you gave; opt out of the sale or sharing of your information. You will not be treated less favourably for using these rights.
To use any of them, email help@nareya.co. We may need to confirm who you are first. We aim to answer within 30 days, or within 45 days where the law allows an extension.
If you are unhappy with our answer you can complain to your local regulator, for example the Information Commissioner's Office in the UK, your national data protection authority in the EU, the Office of the Privacy Commissioner in Canada, the Office of the Australian Information Commissioner, or the Attorney General in California.
10. Children
This website is intended for adults. We do not knowingly collect information from anyone under 16. If you believe a child has sent us details, tell us and we will erase them.
11. Security
Our site uses encrypted connections, access to your information is limited to the people and providers who need it, and we choose partners with sound security practices. No system is completely secure, so we cannot promise absolute protection.
12. Changes to this page
We may revise this policy from time to time. The effective date at the top shows which version is current, and where the law requires it we will tell you about important changes by email or by a notice on the site.
13. Contact
Questions about this policy or your information: help@nareya.co
AROAK LLC, trading as Nareya