Privacy Policy for arthrostim.store
Effective Date: April 18, 2023
Last Updated: August 14, 2025
At IMPAC Inc., operating arthrostim.store, we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, store, and protect your data, including customer order details, email communications, and SMS messaging. We never sell or give away your personal information to third parties for marketing purposes. This policy complies with applicable laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Information We Collect
We collect information to provide you with a seamless shopping experience, process orders, and communicate effectively. The information we collect falls into two categories: voluntarily provided and automatically collected.
Voluntarily Provided Information
- Personal Identifiable Information (PII): When you create an account, place an order, or contact us, we collect:
- Name
- Email address
- Phone/mobile number
- Shipping and billing address
- Payment Details: Credit card information and billing details are securely processed through our payment provider, Stripe and Affirm. IMPAC Inc. does not store or retain your credit card information.
- Preferences and Feedback: We may collect survey responses, feedback, or purchase history to personalize your experience and improve our services.
- SMS Opt-In Consent: During checkout, you may opt in to receive SMS order updates and promotional offers by checking a box with the following statement:
“Get order updates and occasional deals via SMS from arthrostim.store. Opt out anytime by texting STOP.”
This consent is optional and recorded to ensure compliance with regulations.
Automatically Collected Information
- Log Data: When you visit arthrostim.store, our servers may log:
- IP address
- Browser type and version
- Pages visited
- Time and date of visit
- Time spent on each page
- Device Data: We may collect:
- Device type
- Operating system
- Unique device identifiers
- Geo-location data (if enabled)
- Cookies and Tracking Technologies: We use cookies to enhance site functionality, analyze performance, and deliver personalized content. See Section 6 for details.
2. How We Use Your Information
We use your information for legitimate business purposes, including:
- Service Delivery: To process and fulfill orders, manage your account, arrange shipping, and provide order confirmations or invoices.
- Communication: To send order updates, respond to inquiries, and, with your consent, deliver promotional offers via email or SMS.
- Customization: To provide personalized product recommendations based on your purchase history or browsing behavior.
- Fraud Prevention: To screen orders for potential fraud or security risks.
- Business Improvement: To analyze feedback and website performance to enhance our services.
3. Email and SMS Policies
- Email Policy: We use your email address to send order confirmations, shipping updates, and, if you opt in, promotional offers. We never sell, share, or give away your email address to third parties for marketing purposes. You can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in our emails.
- SMS Policy: If you opt in at checkout, we may send SMS messages for order updates (e.g., confirmations, shipping notifications) and occasional promotional offers. We never sell, share, or give away your phone number to third parties for marketing purposes. You can opt out at any time by replying STOP to any SMS message. Message and data rates may apply.
4. Data Sharing and Disclosure
We only share your data as necessary to operate our business or comply with legal obligations. We do not sell or share your data for third-party marketing purposes.
- Third-Party Service Providers: We share data with trusted partners for:
- Payment processing (e.g., Stripe for secure credit card transactions)
- Shipping and delivery services
- Website analytics (e.g., Google Analytics)
- Customer support tools
These providers are bound by strict confidentiality agreements and only access data required to perform their services.
- Legal Obligations: We may disclose data to comply with court orders, subpoenas, or other legal requirements.
- Business Transfers: In the event of a merger, acquisition, or sale, your data may be transferred to ensure service continuity, with prior notice to you.
- Safety and Security: We may disclose data to prevent fraud, harm, or unlawful activities.
5. Data Protection and Security
We prioritize the security of your personal information and use industry-standard measures, including:
- Encryption: Personal data is encrypted during transmission and storage using SSL/TLS protocols. Payment data is handled securely by Stripe.
- Access Controls: Only authorized personnel with privacy training can access sensitive data.
- Regular Audits: We conduct routine security audits to maintain robust protections.
- Breach Response: In the unlikely event of a data breach, we will notify affected users promptly and take immediate containment measures.
Despite our efforts, no electronic system is 100% secure. We encourage you to use strong passwords and safeguard your account details.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to improve your experience and analyze site performance. You can manage cookie preferences through your browser settings.
- Necessary Cookies: Enable core functions like secure logins (session-based).
- Analytical Cookies: Track site traffic and performance (up to 12 months).
- Functional Cookies: Remember your preferences and settings (up to 12 months).
- Advertising Cookies: Deliver relevant ads based on your behavior (up to 6 months).
You can opt out of non-essential cookies via our cookie consent banner or your browser settings.
7. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy:
- Order Data: Retained for 7 years to comply with tax and accounting regulations.
- Account Data: Kept while your account is active; deleted or anonymized upon account closure.
- Marketing Data: Email and SMS opt-in data is retained until you unsubscribe, after which it is deleted.
Data no longer needed is securely deleted or anonymized.
8. Your Rights
You have the following rights regarding your personal information, subject to applicable laws:
- Access: Request a copy of the data we hold about you.
- Correction: Update inaccurate or incomplete data.
- Deletion: Request deletion of your data (subject to legal retention requirements).
- Opt-Out: Unsubscribe from marketing emails or SMS by clicking “unsubscribe” or texting STOP.
- Restrict Processing: Limit how we use your data in certain cases.
- Data Portability: Request your data in a transferable format.
To exercise these rights, contact us at infomail@impacinc.net or use the data request form on our website.
9. International Data Transfers
If you are located outside the United States, your data may be transferred to our servers in the US. We ensure compliance with GDPR and other regulations through secure transfer protocols and contractual safeguards.
10. Children’s Privacy
Our website is not intended for individuals under 18. We do not knowingly collect data from minors. If you believe we have collected data from a minor, please contact us immediately at infomail@impacinc.net.
11. Policy Updates
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on this page, and we will notify you via email or website notice. Continued use of arthrostim.store after updates constitutes acceptance of the revised policy.
12. Contact Information
For questions, concerns, or to exercise your data rights, contact us at:
IMPAC Inc.
Address: 1828 23rd St SE, Salem, OR 97302
Email: infomail@impacinc.net
Phone: 503-581-3239
We are committed to resolving any issues promptly and transparently.
By using arthrostim.store, you agree to this Privacy Policy. Thank you for trusting IMPAC Inc. with your personal information.