Privacy Policy
# Privacy Policy
**Effective Date:** April 13, 2026
**Last Updated:** April 13, 2026
This Privacy Policy describes how Elaren Ventures LLC, doing business as Arizona Mountain Bike Co. ("AZMTBCo," "we," "us," or "our") collects, uses, and discloses your personal information when you visit arizonamountainbikeco.com (the "Site"), purchase products from our store, subscribe to our email list, or purchase digital products from us.
We take your privacy seriously. This policy is written to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and other applicable privacy laws.
---
## 1. Who We Are (Data Controller)
**Elaren Ventures LLC** (d/b/a Arizona Mountain Bike Co.)
1309 Coffeen Avenue, STE 1200
Sheridan, Wyoming 82801
United States
Email: azmtbco@devincasey.com
Elaren Ventures LLC is the "data controller" for the purposes of GDPR and the "business" for the purposes of the CCPA/CPRA.
---
## 2. Information We Collect
We collect information in the following categories:
**Information you provide directly to us:**
- Email address, first name, and last name when you subscribe to our email list
- Name, shipping address, billing address, email address, phone number (optional), and payment information when you place an apparel order
- Name, email address, and payment information when you purchase a digital product (e-book)
- Payment card data is processed directly by our payment processors — we do not store card numbers
- Any information you voluntarily submit through contact forms or direct correspondence
**Information collected automatically:**
- IP address, browser type, device type, operating system, referring URL, and pages visited
- Cookies and similar tracking technologies (see Section 10)
- Aggregated Site usage data collected through Shopify's built-in analytics
**Information from third parties:**
- Order and transaction confirmation data from Shopify, Payhip, Stripe, and Printful
- Email engagement data (opens, clicks) from Mailchimp
---
## 3. How We Use Your Information
We use your information to:
- Fulfill and ship apparel orders, including coordinating with our print-on-demand partner
- Deliver digital products you have purchased
- Send transactional emails (order confirmations, shipping notifications, receipts, digital product delivery)
- Send marketing emails about our products, content, and offers — only where you have given consent or where permitted by applicable law
- Respond to your inquiries and provide customer support
- Process returns, exchanges, and refunds
- Comply with legal obligations, including sales tax collection and remittance
- Detect, prevent, and respond to fraud, abuse, or security incidents
- Analyze Site usage to improve our products and user experience
---
## 4. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal bases for processing your personal data are:
- **Consent** — for marketing communications. You may withdraw consent at any time.
- **Performance of a contract** — to fulfill your apparel and digital product purchases.
- **Legal obligation** — for tax, accounting, consumer protection, and regulatory compliance.
- **Legitimate interests** — to secure our Site, prevent fraud, and improve our services, provided those interests are not overridden by your rights.
---
## 5. How We Share Your Information
We do not sell your personal information. We share your information only with the following categories of recipients:
**Service providers (processors):**
- **Shopify Inc.** — e-commerce platform, Site hosting, checkout, and built-in analytics. [Privacy Policy](https://www.shopify.com/legal/privacy)
- **Shopify Payments / Stripe, Inc.** — payment processing for apparel orders. [Stripe Privacy Policy](https://stripe.com/privacy)
- **Printful, Inc.** — print-on-demand fulfillment; we share your shipping name, address, and order details with Printful to produce and ship your apparel. [Privacy Policy](https://www.printful.com/policies/privacy)
- **Payhip** (Payhip Ltd.) — digital product checkout and delivery for our e-books. [Privacy Policy](https://payhip.com/privacy)
- **Mailchimp** (Intuit Inc.) — email marketing and list management. [Privacy Policy](https://www.intuit.com/privacy/statement/)
**Legal and safety disclosures:** We may disclose your information to comply with applicable law, valid legal process, or governmental requests, or to protect the rights, property, or safety of Elaren Ventures LLC, our customers, or the public.
**Business transfers:** If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
---
## 6. International Data Transfers
We are based in the United States. If you are accessing the Site from outside the U.S., your information will be transferred to, stored, and processed in the U.S. Our third-party processors (Shopify, Stripe, Printful, Payhip, Mailchimp) may also process data in the U.S., EU, and other jurisdictions.
Where required by GDPR, we rely on Standard Contractual Clauses and equivalent safeguards offered by our processors to protect transfers of personal data from the EEA, UK, or Switzerland to the United States.
---
## 7. Data Retention
We retain your personal information only as long as necessary for the purposes described in this policy:
- **Email subscribers:** Until you unsubscribe or request deletion, plus up to 30 days in backup systems.
- **Customer order records:** Retained for 7 years to comply with U.S. tax and accounting requirements.
- **Support and returns correspondence:** Retained for up to 3 years after the last interaction.
- **Server logs and aggregated analytics:** Retained for up to 14 months.
When the retention period expires, we delete or anonymize the information.
---
## 8. Your Privacy Rights
**If you are in the EEA, UK, or Switzerland (GDPR):** You have the right to access, rectify, erase, restrict processing of, port, and object to the processing of your personal data. You also have the right to withdraw consent at any time and to lodge a complaint with your local data protection authority.
**If you are a California resident (CCPA/CPRA):** You have the right to know what personal information we collect, use, and disclose; the right to request deletion of your personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information (note: we do not sell personal information); and the right to be free from retaliation for exercising these rights.
**How to exercise your rights:** Email **azmtbco@devincasey.com** with your request. We will verify your identity before responding and aim to respond within 30 days (GDPR) or 45 days (CCPA). Exercising these rights is free of charge.
**Unsubscribe from marketing:** Every marketing email we send contains an unsubscribe link. You may also email us to request removal.
---
## 9. Children's Privacy
The Site and our products are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
---
## 10. Cookies and Tracking Technologies
We use cookies and similar technologies to operate the Site and understand how visitors use it.
- **Strictly necessary cookies:** Required for the Site to function (e.g., shopping cart, session management, security).
- **Analytics cookies:** Shopify's built-in store analytics sets cookies to measure aggregated traffic, sessions, and conversion events. These do not identify you individually.
- **Third-party cookies:** Shopify, Stripe, Payhip, and Mailchimp may set cookies when you interact with their checkout, payment, or signup tools embedded on or linked from our Site.
We do not use Google Analytics, Meta Pixel, or other third-party behavioral advertising trackers on this Site.
You can control cookies through your browser settings. Blocking strictly necessary cookies may impair Site functionality, including the shopping cart and checkout.
---
## 11. Data Security
We use commercially reasonable administrative, technical, and physical safeguards to protect your personal information, including encryption in transit (TLS/SSL), access controls, and reputable third-party processors that maintain their own security certifications (Shopify and Stripe are PCI-DSS compliant for payment data). No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
---
## 12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Material changes will be communicated via email to subscribers or a prominent notice on the Site. Your continued use of the Site after changes take effect constitutes acceptance of the updated policy.
---
## 13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
**Elaren Ventures LLC** (d/b/a Arizona Mountain Bike Co.)
1309 Coffeen Avenue, STE 1200
Sheridan, Wyoming 82801
United States
Email: **azmtbco@devincasey.com**