Privacy Policy

Last updated: May 03, 2026

1. Introduction

This Privacy Policy ("Policy") describes how Aura Mercantile LLC ("Lotus Ritual," "we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website https://www.lotusritual.com (the "Site"), make a purchase, subscribe to our newsletter, or otherwise interact with our Services.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

This Privacy Policy applies to:

  • Visitors to our website
  • Customers who purchase our products
  • Subscribers to our marketing communications
  • Anyone who contacts our customer support

This Policy does not apply to information collected by any third party, including any third-party website that may link to or be accessible from our Services.


2. Information We Collect

We collect several types of information from and about users of our Services.

2.1 Information You Provide Directly

When you interact with our Services, you may provide us with the following information:

Account and Order Information:

  • Full name
  • Email address
  • Phone number
  • Billing address
  • Shipping address
  • Order history and purchase details
  • Product preferences

Payment Information:

We do not directly collect or store full payment card details. Payment information (such as credit card numbers) is collected and processed by our trusted third-party payment processors (Stripe, PayPal, Apple Pay, Google Pay). We only receive limited information such as the last four digits of your card, card type, and billing zip code for transaction reference.

Communications:

  • Customer service inquiries
  • Email correspondence
  • Survey responses and feedback
  • Reviews and testimonials (if submitted)

Marketing Subscription Information:

  • Email address (collected via website pop-ups, checkout opt-in, or footer subscription form)
  • Marketing preferences

2.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information about your device and browsing behavior, including:

Device and Connection Information:

  • IP address
  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Screen resolution
  • Language preference
  • Referring website URL

Usage Data:

  • Pages viewed and time spent on each page
  • Click-stream data
  • Search queries on our Site
  • Products viewed and added to cart
  • Date and time of visits
  • Geographic location (general, based on IP address)

Cookies and Similar Technologies: See Section 4 for details.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

  • Social media platforms (if you interact with us via social login or social sharing features)
  • Advertising and analytics partners (such as Google and Meta)
  • Payment processors (transaction confirmation data)
  • Shipping carriers (delivery status updates)

3. How We Use Your Information

We use your information for the following purposes:

3.1 To Provide and Manage Our Services

  • Process and fulfill your orders
  • Arrange shipping and delivery
  • Send order confirmations, shipping notifications, and delivery updates
  • Process returns, refunds, and exchanges
  • Provide customer support and respond to inquiries

3.2 To Communicate With You

  • Send transactional emails (order confirmations, shipping updates, account notifications)
  • Send marketing emails, newsletters, and promotional offers (with your consent)
  • Notify you of changes to our Services or policies
  • Respond to your comments, questions, and feedback

3.3 To Improve Our Services

  • Analyze how users interact with our Site
  • Understand customer preferences and shopping behavior
  • Improve our website design, product offerings, and user experience
  • Develop new products and features

3.4 For Marketing and Advertising

  • Personalize your shopping experience
  • Show you relevant product recommendations
  • Display targeted ads on our Site and on third-party platforms (such as Google and Meta)
  • Conduct re-marketing campaigns to users who have visited our Site
  • Measure the effectiveness of our advertising campaigns

3.5 For Legal and Security Purposes

  • Detect, prevent, and address fraud, security breaches, and illegal activities
  • Comply with applicable laws, regulations, and legal processes
  • Enforce our Terms and Conditions
  • Protect the rights, property, and safety of our company, customers, and others

3.6 Legal Basis for Processing (for applicable users)

Where required by law, we rely on the following legal bases:

  • Performance of a contract (e.g., to fulfill your order)
  • Consent (e.g., for marketing emails, non-essential cookies)
  • Legitimate interests (e.g., to prevent fraud, improve our Services)
  • Legal obligations (e.g., tax and accounting requirements)

4. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies (collectively, "Cookies") to enhance your experience on our Site, analyze usage, and support our marketing activities.

4.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device and remember information about your visit.

4.2 Types of Cookies We Use

Strictly Necessary Cookies
These cookies are essential for the operation of our Site (e.g., enabling shopping cart functionality, maintaining secure login). You cannot opt out of these cookies as the Site cannot function properly without them.

Performance and Analytics Cookies
These cookies help us understand how visitors interact with our Site. We use:

  • Google Analytics 4 (GA4) — to analyze traffic, user behavior, and Site performance

Marketing and Advertising Cookies
These cookies track your browsing activity to enable us to show you relevant ads on third-party platforms. We use:

  • Meta Pixel (Facebook) — for advertising and conversion tracking on Facebook and Instagram
  • Google Ads — for re-marketing and conversion tracking
  • Email Marketing Tracking (Klaviyo / Mailchimp or similar) — to track email opens, clicks, and shopping behavior

Functional Cookies
These cookies enable enhanced functionality, such as remembering your preferences and language settings.

4.3 Managing Your Cookie Preferences

You can control cookies through:

Please note that disabling certain cookies may affect the functionality of our Site.


5. Sharing of Your Information

We do not sell your personal information for monetary consideration. However, we share your information with the following categories of third parties for legitimate business purposes:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

Category Purpose Examples
Payment Processors Process your payments Stripe, PayPal, Apple Pay, Google Pay
Shipping & Logistics Fulfill and deliver orders International shipping carriers, customs brokers, fulfillment centers in China
Email Marketing Platforms Send marketing and transactional emails Klaviyo, Mailchimp, or similar
Analytics Providers Analyze Site usage and performance Google Analytics
Advertising Networks Display targeted ads Google Ads, Meta (Facebook/Instagram)
Customer Support Tools Manage customer inquiries Email service providers, helpdesk software
Hosting and Infrastructure Host our website and store data Web hosting providers, CDN services

These service providers are contractually obligated to protect your information and use it only for the purposes for which we share it.

5.2 Business Transfers

If we are involved in a merger, acquisition, sale of assets, financing, bankruptcy, or similar business transaction, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or use of your personal information.

5.3 Legal Compliance and Protection

We may disclose your information when we believe in good faith that disclosure is necessary to:

  • Comply with applicable laws, regulations, court orders, or legal processes (such as subpoenas or warrants)
  • Enforce our Terms and Conditions
  • Protect the rights, property, or safety of Lotus Ritual, our customers, or others
  • Detect, prevent, or address fraud, security, or technical issues

5.4 With Your Consent

We may share your information for any other purpose disclosed to you and with your explicit consent.


6. Third-Party Services and Service Providers

Our Site may contain links to third-party websites and services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party site you visit.

Key third parties whose services are integrated into our Site include:

  • Google (Analytics, Ads, Fonts)
  • Meta / Facebook (Pixel, Advertising)
  • Stripe (Payment Processing)
  • PayPal (Payment Processing)
  • Klaviyo / Mailchimp (Email Marketing)

7. International Data Transfers

7.1 Cross-Border Processing Notice

Please be aware that to fulfill your order, your personal information (including your name, shipping address, phone number, and order details) will be transferred to and processed by our fulfillment partners located in China. This is necessary because our products are shipped directly from our facility in China to your delivery address.

7.2 Other International Transfers

Your information may also be transferred to, stored, and processed in countries other than your country of residence, including the United States, China, and other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

7.3 Safeguards

When we transfer your personal information internationally, we take steps to ensure appropriate safeguards are in place, including:

  • Limiting transfers to information strictly necessary to fulfill your order or the purpose disclosed
  • Requiring our service providers to implement reasonable security measures
  • Complying with applicable data protection laws

By using our Services and placing an order, you consent to the transfer of your personal information to China and other jurisdictions for the purposes described in this Privacy Policy.


8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Type of Data Retention Period
Order and transaction records Up to 7 years (for tax, accounting, and legal compliance)
Customer account information While your account is active, plus a reasonable period thereafter
Marketing email subscriptions Until you unsubscribe, plus a brief retention period for record-keeping
Customer support inquiries Up to 3 years after the inquiry is resolved
Website analytics data Up to 26 months (Google Analytics default)
Cookies Varies by cookie type — see browser settings for details

When data is no longer needed, we will securely delete or anonymize it.


9. Data Security

We implement reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

  • SSL/TLS encryption for all data transmitted between your browser and our Site
  • Secure payment processing through PCI-DSS compliant third-party processors
  • Access controls limiting employee and contractor access to personal data
  • Regular security reviews of our systems and practices
  • Strong password requirements for accounts that store sensitive data

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. You provide your personal information at your own risk.

In the event of a data breach affecting your personal information, we will notify you and applicable authorities as required by law.


10. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

10.1 General Rights

  • Right to Access — Request a copy of the personal information we hold about you
  • Right to Correction — Request correction of inaccurate or incomplete information
  • Right to Deletion — Request deletion of your personal information (subject to legal exceptions)
  • Right to Restrict Processing — Request that we limit how we use your information
  • Right to Data Portability — Request your information in a structured, machine-readable format
  • Right to Object — Object to certain types of processing, including direct marketing
  • Right to Withdraw Consent — Withdraw consent at any time where we rely on consent for processing

10.2 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with:

  • Your full name
  • The email address associated with your account or orders
  • A clear description of your request

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request to protect your information.

You will not be discriminated against for exercising your privacy rights.


11. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

11.1 Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information from California residents:

  • Identifiers (name, email, phone number, IP address)
  • Customer records (billing/shipping address, payment information)
  • Commercial information (purchase history, products viewed)
  • Internet activity (browsing history on our Site, interaction with ads)
  • Geolocation data (general location based on IP address)
  • Inferences drawn from the above (preferences, characteristics)

11.2 Your CCPA/CPRA Rights

As a California resident, you have the right to:

  • Right to Know — Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell or share
  • Right to Delete — Request deletion of personal information we have collected from you
  • Right to Correct — Request correction of inaccurate personal information
  • Right to Opt Out of Sale or Sharing — Opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising
  • Right to Limit Use of Sensitive Personal Information — Limit the use of sensitive personal information (we generally do not collect sensitive personal information as defined by CPRA)
  • Right to Non-Discrimination — Not be discriminated against for exercising your rights

11.3 "Sale" or "Sharing" of Personal Information

We do not sell personal information for monetary consideration. However, under the broad definition of "sharing" in California law, our use of advertising cookies (such as Meta Pixel and Google Ads) for cross-context behavioral advertising may be considered "sharing" of personal information.

To opt out of this sharing, you may:

  • Email us at [email protected] with the subject line "CCPA Opt-Out"
  • Use Global Privacy Control (GPC) signals in your browser, which we honor

11.4 Authorized Agents

You may designate an authorized agent to make a request on your behalf. The agent must provide written authorization, and we may verify the agent's identity.

11.5 Shine the Light Law

California Civil Code Section 1798.83 permits California residents to request information regarding our disclosure of personal information to third parties for direct marketing purposes. To make such a request, contact us at [email protected].


12. Canadian Privacy Rights

If you are a resident of Canada, you have rights under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws.

You have the right to:

  • Access your personal information
  • Request correction of inaccurate information
  • Withdraw consent for the collection, use, or disclosure of your information
  • File a complaint with the Office of the Privacy Commissioner of Canada

We comply with Canada's Anti-Spam Legislation (CASL). You may unsubscribe from marketing emails at any time using the unsubscribe link in our emails.

To exercise your rights, contact us at [email protected].


13. Children's Privacy

Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA).

If you are under 18, please do not use our Services or provide any personal information to us.

If we become aware that we have collected personal information from a child under 13 without verified parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us at [email protected].


14. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal that allows users to express a preference not to be tracked across websites. Currently, there is no industry-wide standard for responding to DNT signals.

We do not currently respond to browser DNT signals. However, we honor Global Privacy Control (GPC) signals as required under California law for opt-out of sale/sharing of personal information.


15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

  • Update the "Last updated" date at the top of this Policy
  • Post the revised Policy on our Site
  • For significant changes, notify you by email or via a prominent notice on our Site

Your continued use of our Services after the effective date of the revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically.


16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Aura Mercantile LLC
1500 N Grant St Ste R
Denver, CO 80203
United States

📧 Email: [email protected]
🌐 Website: https://www.lotusritual.com

For privacy-specific inquiries, please use the subject line "Privacy Request" to ensure prompt handling.

Complaints to Regulatory Authorities

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the relevant data protection authority:

This Privacy Policy is effective as of the date listed above and supersedes all prior versions.

Last updated: May 03, 2026

0
0
Your Cart
Your cart is emptyReturn to Shop