Privacy policy

Privacy Policy

Last updated: October 2026

This Privacy Policy explains how ARUS Trading Inc. (“RIWI”, “we”, “us”, “our”) collects, uses, discloses and protects personal information when you visit riwi-buildit.us (the “Site”), buy from us, or contact us. It also explains the privacy rights you may have under U.S. state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”), and – if you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland – under the data protection laws that apply there.

1. Who is responsible

ARUS Trading Inc.
17350 State Hwy 249, Ste 220
Houston, TX 77064, USA
Email: support@riwi-buildit.us
Phone: +1 (832) 669-2647 (Monday–Friday, 9am–5pm Central Time)

2. Notice at Collection

The table below summarizes the categories of personal information we collect, the purposes for which we use them, whether they are “sold” or “shared” (as these terms are defined by the CCPA), and how long we keep them. Details follow in sections 3 to 9.

Category Examples Purposes Sold or shared? Retention
Identifiers Name, postal address, email address, phone number, account name, IP address, cookie and device identifiers Orders, delivery, customer service, account, security, analytics, advertising Shared (IP address, cookie and device identifiers, hashed email or phone) with advertising partners As long as needed for the order and your account and as required by tax and accounting law; online identifiers per the cookie periods of our partners
Customer records Billing and shipping details, order and return history, tax-exemption certificates (business customers) Orders, delivery, returns, accounting, legal obligations No As required by tax, accounting and other legal obligations
Commercial information Products viewed, added to cart or purchased, order value, discount codes used Orders, analytics, advertising measurement, personalized advertising Shared (products viewed or purchased) with advertising partners Order data as for customer records; browsing data per the retention settings of our analytics and advertising partners
Internet or other electronic network activity Pages viewed, clicks, referring website, interactions with ads and emails Site operation and security, analytics, advertising Shared with advertising partners Per the retention settings of our analytics and advertising partners
Approximate geolocation Country or state derived from your IP address (no precise geolocation) Showing the right shop, currency and shipping options, fraud prevention No Only for the duration of your visit, unless part of order records
Audio, electronic or similar information Content of emails, chat messages and calls with customer service Customer service, handling of claims No As long as needed to handle your request and related claims
Sensitive personal information Account login (email address and password) Providing your customer account and security only No Until you delete your account

We do not use or disclose sensitive personal information for purposes that would give you a right to limit its use, and we do not use it to infer characteristics about you.

3. Sources of personal information

  • From you: when you place an order, create an account, subscribe to emails, write a review, answer an optional post-purchase survey, or contact us by email, phone, chat or contact form.
  • Automatically: from your browser or device when you use the Site, through cookies, pixels and similar technologies (section 7).
  • From third parties: payment and fraud-screening results from our payment providers, and delivery status from carriers.

4. How we use personal information

  • To process and deliver your orders, handle returns and refunds, and send order and shipping updates.
  • To provide customer service and respond to your requests.
  • To operate, secure and improve the Site, including detecting and preventing fraud and misuse.
  • To understand how visitors use the Site (analytics) and to measure the performance of our advertising.
  • To send you marketing emails or messages if you have subscribed. You can unsubscribe at any time using the link in each email.
  • To show you relevant advertising on other websites and platforms (sections 5 and 8).
  • To display product reviews.
  • To comply with legal, tax and accounting obligations and to establish or defend legal claims.

5. How we disclose personal information

Service providers and contractors process personal information on our behalf and only for the purposes described here:

  • E-commerce platform and hosting: Shopify, which hosts the Site, provides the cart, checkout and cookie banner, and processes orders on our behalf.
  • Payment providers: Shopify Payments (including Shop Pay, Apple Pay and Google Pay) and PayPal. These providers process your payment data under their own privacy policies. We do not store full payment card numbers.
  • Shipping and fulfillment: our warehouse and fulfillment partners, shipping software providers and carriers (for example, USPS). If your order ships from Europe, your order and shipping details are shared with our manufacturer in Europe.
  • Customer service and communication: our help-desk provider, our chat provider Freshworks (Freshchat), and our email service provider Klaviyo.
  • Spam protection: hCaptcha (Intuition Machines, Inc., USA), which Shopify uses to protect our forms (contact form, newsletter sign-up and opt-out page) against spam and misuse; it receives your IP address, browser and device information and information about your interaction with the page to determine whether the input comes from a human. On the contact form and newsletter sign-up, the hCaptcha script loads only when you select a field in the form.
  • Inventory check: Cloudflare (see section 6).
  • Reviews: Judge.me, which collects and displays product reviews.
  • Analytics: Google Analytics and Shopify analytics.
  • Shop apps: providers of apps that add features to our shop, such as upsell offers, estimated delivery dates, announcement bars and search engine optimization; they process personal information only as needed to provide these features.
  • Accounting, automation and marketplace tools: service providers we use for bookkeeping, tax compliance, order management and workflow automation.

Advertising partners (third parties): Google (Google Ads), Meta (Facebook and Instagram), Pinterest, and Shopify (Shopify Audiences). These partners may receive device and usage information and information about your interactions with the Site (for example, products viewed or purchased) through cookies, pixels and similar technologies, and may use it for their own purposes, including targeted advertising.

Other disclosures: to authorities, courts or advisers where required by law, to enforce our terms, or to protect our rights, property or safety and that of others; and in connection with a merger, acquisition or sale of assets, subject to this Privacy Policy.

“Sale” and “sharing” of personal information. We do not sell personal information for money. However, disclosing device and usage information to advertising partners for targeted or cross-context behavioral advertising may be considered a “sale” or “sharing” of personal information, or “targeted advertising”, under the CCPA and other U.S. state privacy laws. In the past 12 months, we may have sold or shared the following categories in this way: identifiers (such as IP address, cookie and device identifiers, hashed email address or phone number), internet or other electronic network activity information, and commercial information (such as products viewed or purchased). You can opt out as described in section 8.

6. Inventory check (Cloudflare)

To show you only colors and variants that are in stock (for example in the cart), your browser retrieves current stock levels from a service we operate on the Cloudflare Workers platform (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare acts as our service provider and processes your IP address and the requesting website (origin) only to deliver this function; it may also keep technical server logs for security and operation. We do not permanently store or log your IP address in this process; it is held only briefly in the service's memory to prevent abuse (rate limiting). No cookies or tracking technologies are used; for monitoring we only record anonymous counts (result, country, response time) that do not identify you. The result is cached in your browser's session storage for about 5 minutes. We do not sell or share this information.

7. Cookies, pixels and similar technologies

We and our partners use cookies, pixels, tags and similar technologies to keep the Site and your cart working, remember your preferences, analyze Site traffic, measure advertising and show you relevant ads. These include:

  • Strictly necessary: Shopify cookies and browser storage required for the shopping cart, checkout, account login, security, saving your privacy choices (cookie “_tracking_consent”), and our inventory check (section 6).
  • Analytics: Shopify analytics and Google Analytics, which help us understand how visitors use the Site.
  • Advertising: Google Ads, Meta Pixel (and, where enabled, Meta's Conversions API, through which Shopify transmits the same events server-side) and Pinterest Tag, which measure the effectiveness of our ads and enable targeted advertising, as well as Shopify Audiences.
  • Marketing tools: our email service provider Klaviyo, which receives information about products you view or add to your cart for our email marketing.
  • Functional: product reviews (Judge.me) and our support chat (Freshchat), which loads only after you click on the chat icon. Some reviews and their photos were imported from Amazon; when these photos are displayed, your browser loads them from Amazon servers (Amazon CDN), which transmits your IP address and browser information to Amazon.
  • Embedded videos: YouTube videos are loaded from youtube-nocookie.com only after you click on them.

You can control cookies through our cookie banner (where it is shown in your region), the “Cookie Settings” link (section 13) and the “Your Privacy Choices” link (section 8) and delete or block cookies in your browser settings. Blocking some cookies may affect how the Site works.

8. Your Privacy Choices: opt-out of sale, sharing and targeted advertising

You can opt out of the “sale” or “sharing” of your personal information and of targeted advertising at any time by clicking “Your Privacy Choices” in the footer of every page of the Site, which takes you to our opt-out page, and following the instructions there. The opt-out page is available if you are browsing from a U.S. state that grants this right. Your opt-out applies to the browser and device you use; if you use other browsers or devices or delete your cookies, please opt out again. You can also opt out at any time by emailing us at support@riwi-buildit.us.

Global Privacy Control (GPC): if your browser sends a GPC signal and you are in a U.S. state where such signals are legally recognized, we treat it as a valid request to opt out of the sale or sharing of your personal information and of targeted advertising for that browser and device.

9. Your privacy rights

Depending on where you live (for example, California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with comprehensive privacy laws), you may have the right to:

  • Know and access the personal information we have collected about you, including the categories of personal information, sources, purposes and the categories of third parties to whom we disclose it.
  • Delete personal information we have collected from you, subject to legal exceptions.
  • Correct inaccurate personal information.
  • Data portability: receive your personal information in a portable format.
  • Opt out of the “sale” or “sharing” of your personal information and of targeted advertising (section 8).
  • Appeal our decision on your request, where your state law provides this right.
  • Non-discrimination: we will not discriminate against you for exercising your privacy rights.

How to submit a request. Email support@riwi-buildit.us or call +1 (832) 669-2647 (Monday–Friday, 9am–5pm Central Time). To protect your information, we will verify your identity by matching information you provide with information we hold (for example, your email address and order number). You may use an authorized agent; we may ask the agent for proof of authorization and ask you to verify your identity directly. We confirm receipt of your request within 10 business days and respond within 45 days; if we need more time (up to a further 45 days), we will tell you why. If we deny your request, you may appeal by replying to our decision with the subject line “Privacy Appeal”; we will respond to appeals within the time required by your state law.

California “Shine the Light”. California residents may ask us once per year, free of charge, for information about personal information we have disclosed to third parties for their direct marketing purposes in the previous calendar year. Please email support@riwi-buildit.us.

10. Children’s privacy

Our products are toys for children aged 3 years and older, but the Site and our services are directed to parents and adults. We do not knowingly collect personal information from children under 13 years of age, in line with the Children’s Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us with personal information, please contact us at support@riwi-buildit.us and we will delete it. We do not sell or share personal information of consumers we know to be under 16 years of age.

11. Data retention

We keep personal information only as long as necessary for the purposes described in this Privacy Policy: order and transaction records as long as required by tax, accounting and other legal obligations; customer service records for as long as needed to handle your request and related claims; marketing data until you unsubscribe or ask us to delete it; and analytics and advertising data for the retention periods set by the respective partners. Afterwards, we delete or anonymize the information.

12. Data security

We use reasonable technical and organizational measures to protect personal information, including encrypted (HTTPS) connections and access controls. Payments are processed by PCI-DSS-compliant payment providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Visitors from the EU, EEA, United Kingdom and Switzerland

If you visit the Site from the European Union, the European Economic Area, the United Kingdom or Switzerland, our cookie banner asks for your consent before analytics and advertising technologies are activated. You can choose separately for the categories analytics, marketing and preferences; strictly necessary technologies are always active. You can change or withdraw your consent at any time via “Cookie Settings” in the footer. We process your personal information to perform our contract with you and take steps at your request before entering into a contract, to comply with legal obligations, on the basis of our legitimate interests (operating, securing and improving the Site; customer service), and on the basis of your consent (analytics, advertising, marketing emails). You have the right to access, rectification, erasure, restriction of processing, data portability and objection, the right to withdraw consent at any time with effect for the future, and the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, email support@riwi-buildit.us. We are based in the United States; your personal information is processed in the United States and by our service providers in the countries where they operate.

 Anonymous counting of your cookie choice

If you see our cookie banner (EU, EEA, UK and Switzerland), your browser sends an anonymous count message after you make your choice to a service we operate on the Cloudflare platform (Cloudflare, Inc., USA; our service provider), so that we can understand whether visitors accept all, decline all or choose individual categories. The message contains only the shop, the type of your choice (“all accepted”, “all declined” or “individual selection”), the page type (e.g. home page) and the language. Technically, the service receives your IP address; we derive only the country from it and do not store the IP address. We store only a daily counter per combination of these values. The daily counters are deleted automatically after 13 months. No cookies or identifiers are set, you are not recognized, no profile is created, and we do not sell or share this information. For visitors from the EU, EEA, UK and Switzerland, the legal basis is our legitimate interest in running the consent process lawfully and in a user-friendly way (Art. 6(1)(f) GDPR). Because we cannot identify you from this data, data subject rights are limited in this respect under Art. 11 GDPR. Like the rest of our processing, this data is processed in the United States; see section 13 for your rights and how to contact us.

14. International processing

We are based in the United States. Some of our service providers and our manufacturer are located outside the United States, including in the European Union, and may process your personal information there for the purposes described above.

15. Third-party websites

The Site may link to third-party websites and social media platforms (such as YouTube, Instagram, Facebook or Pinterest). Their privacy practices are governed by their own policies.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last changed. Material changes will be posted on this page.

17. Contact

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:
ARUS Trading Inc., 17350 State Hwy 249, Ste 220, Houston, TX 77064, USA
Email: support@riwi-buildit.us · Phone: +1 (832) 669-2647