Privacy policy

Last updated: September 2026

This Privacy Policy describes how ARETIX collects, uses, stores, shares and otherwise processes personal information when you visit our website, purchase or access our digital products, create an account, subscribe to a membership, use our private areas, submit information through our forms, contact us or otherwise interact with our services.

ARETIX operates this online store using Shopify and may use other third-party service providers to deliver digital products, manage memberships, process forms, payments, communications and other features.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood this Privacy Policy. Where consent is legally required, including for certain cookies, marketing activities or the processing of health-related information, we will request that consent separately.

1. DATA CONTROLLER

For the purposes of applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the data controller is:

Legal name: Iacopo Giuseppe Garcea
Trading name: ARETIX
VAT number & REA: IT14866760961, MI - 2812203
Business address: Via Dora Baltea, 7, Milan, 20161, Italy
Phone: +39 339 642 2989
Email: info@aretix.it

2. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with ARETIX, we may collect or process the following categories of personal information:

Contact information, including name, surname, email address, telephone number, billing address and other contact details.
Account information, including account identifiers, login information, preferences and membership status.
Transaction information, including products or memberships purchased, order information, transaction history, cancellations, refund requests and related records.
Payment information, including payment status, payment method and transaction information. Full payment card information is generally processed by Shopify and/or the applicable payment provider rather than directly stored by ARETIX.
Communications, including messages, customer support requests, membership support requests and other communications sent to ARETIX.
Device and technical information, including IP address, browser, device type, operating system, network information and other technical identifiers.
Usage information, including information about how you browse and interact with the ARETIX website, products, pages and services.
Marketing information, including marketing preferences and interactions with advertisements or promotional communications where applicable.
Membership and training information, including information voluntarily submitted through ARETIX private areas, membership forms or services, such as training goals, experience level, preferences and information needed to provide the requested service.
Health-related information, where voluntarily provided through forms such as My Goal, including information concerning injuries, medical conditions, physical limitations, symptoms or other information that may reveal information about your health.

3. HEALTH-RELATED INFORMATION

Certain ARETIX membership features or forms may allow you to voluntarily provide information relating to your health, physical condition, injuries, medical conditions or limitations in order to help ARETIX understand your training circumstances and provide the service you request.

Under applicable data protection law, information concerning health may constitute a special category of personal data.

Where ARETIX relies on consent to process such information, we will request your explicit consent separately before processing it.

Health-related information submitted through ARETIX forms will be used only for purposes connected with the membership, training-related service or request for which it was provided and will not be used for unrelated advertising purposes without a separate lawful basis where required.

You may withdraw your consent to the processing of health-related information at any time by contacting ARETIX. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

If the information is necessary to provide a specific requested service, withdrawal of consent may mean that ARETIX can no longer provide the part of the service that requires processing such information.

ARETIX services and forms are not a substitute for medical diagnosis, treatment or emergency medical assistance.

4. SOURCES OF PERSONAL INFORMATION

We may collect personal information:

Directly from you, when you purchase a product, create an account, subscribe to a membership, complete a form, contact us or otherwise provide information.
Automatically, when you browse or interact with the website, through cookies and similar technologies where permitted.
From Shopify, which provides the ecommerce infrastructure used by ARETIX.
From payment providers, in connection with transactions and payment confirmation.
From service providers used to operate membership areas, forms, digital delivery, communications, analytics and other ARETIX functions.
From advertising and marketing partners, where applicable and permitted by law.

5. HOW WE USE PERSONAL INFORMATION

ARETIX may process personal information for purposes including:

processing and fulfilling purchases;
delivering digital products;
creating and managing customer accounts;
providing access to private areas and memberships;
managing recurring subscriptions;
processing information submitted through membership forms;
providing training-related resources or support requested by the customer;
responding to customer service requests;
processing cancellations, refunds and withdrawal requests;
preventing fraud and protecting the security of the website;
protecting ARETIX digital products against unauthorised distribution;
maintaining transaction and accounting records;
complying with legal, tax and regulatory obligations;
improving the website, products and customer experience;
performing analytics where permitted;
sending marketing communications where permitted by law;
displaying or measuring advertising where the required consent has been obtained.

6. LEGAL BASES FOR PROCESSING

Where the GDPR or similar laws apply, ARETIX processes personal information using the applicable legal basis depending on the purpose of processing.

These legal bases may include:

Performance of a contract, where processing is necessary to process an order, deliver a digital product, provide a membership or otherwise provide a service requested by you.
Legal obligations, including accounting, taxation, regulatory and legal record-keeping requirements.
Legitimate interests, where appropriate, including website security, fraud prevention, protection of ARETIX intellectual property and reasonable business administration, provided those interests are not overridden by your rights and freedoms.
Consent, including where required for marketing communications, certain cookies or advertising technologies.
Explicit consent, where required for the processing of health-related information voluntarily provided through ARETIX membership or training forms.

7. MEMBERSHIPS AND PRIVATE AREAS

ARETIX may operate private customer areas available only to customers with an eligible membership or purchase.

We may process account information, membership status, submitted goals, support requests and other information necessary to provide and manage these services.

Access credentials and membership information may also be processed for security purposes and to prevent unauthorised sharing of paid resources.

8. FORMS AND MY GOAL

ARETIX may provide forms through its website or private membership area, including forms that allow customers to submit their goals and information relevant to a requested service.

The information submitted through these forms will be used to review the customer's request, understand their stated objectives and provide the relevant ARETIX service.

Forms may be operated using third-party technology providers, including form-management services such as HulkApps or similar providers used by ARETIX.

Where a form requests health-related information, an additional explicit consent mechanism will be presented where required by applicable law.

9. DIGITAL PRODUCT PROTECTION

ARETIX may process limited customer and order information for the purpose of protecting digital products against unauthorised copying, sharing or resale.

This may include associating a digital product with information such as:

customer name;
customer email;
order number;
unique download identifiers;
customer-specific watermarks.

Such measures will be used only where reasonably necessary to protect ARETIX content and will be implemented in accordance with applicable data protection law.

10. HOW WE DISCLOSE PERSONAL INFORMATION

ARETIX may disclose personal information to third parties where necessary to operate the Services or where otherwise permitted by law.

Recipients may include:

Shopify, which hosts and operates the ecommerce infrastructure;
payment processors used to process transactions;
membership service providers used to manage customer access and subscriptions;
form service providers, including providers used to operate ARETIX forms;
email and communication providers;
cloud and hosting providers;
analytics providers, where applicable;
marketing and advertising providers, where permitted and where required consent has been obtained;
professional advisers, such as accountants or legal advisers where necessary;
public authorities, where disclosure is required by applicable law.

Service providers are permitted to process personal information only as necessary for the services they provide, subject to applicable contractual and legal requirements.

11. RELATIONSHIP WITH SHOPIFY

The ARETIX online store is powered by Shopify.

Shopify collects and processes personal information relating to your access to and use of the store in order to provide its ecommerce services and related functionality.

Information submitted through the store may therefore be transmitted to Shopify and other service providers involved in providing the Services.

For further information regarding Shopify's processing of personal information, you can review the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Shopify may also process information about your interactions with ARETIX together with information from your interactions with other merchants and with Shopify in order to provide enhanced services, including personalised experiences, advertising, analytics and service improvements.

Information may be shared with Shopify and other third parties, including providers located in countries other than your country of residence, where necessary to provide these services.

You can learn more about Shopify’s processing of personal information through the Shopify Consumer Privacy Policy and exercise applicable privacy rights through the Shopify Privacy Portal.

12. COOKIES AND SIMILAR TECHNOLOGIES

ARETIX and its service providers may use cookies and similar technologies to operate the website, remember preferences, provide functionality, perform analytics and support advertising activities.

Where required by applicable law, non-essential cookies and similar technologies will not be activated until the customer has provided the required consent.

Customers may manage their cookie choices using the cookie consent tools provided on the ARETIX website.

13. MARKETING AND ADVERTISING

ARETIX may use personal information to send promotional communications or support advertising activities where permitted by applicable law.

Where consent is required, marketing communications or advertising technologies will be used only after the required consent has been obtained.

Customers may unsubscribe from promotional emails at any time using the unsubscribe mechanism included in such communications.

Unsubscribing from marketing communications does not prevent ARETIX from sending necessary transactional or service-related communications concerning orders, accounts or memberships.

14. THIRD-PARTY WEBSITES AND SERVICES

The ARETIX website may contain links to websites or platforms operated by third parties.

ARETIX is not responsible for the privacy practices of independent third-party websites.

Customers should review the privacy policies of those services before submitting personal information to them.

15. INTERNATIONAL DATA TRANSFERS

Some service providers used by ARETIX or Shopify may process personal information in countries outside the European Economic Area.

Where required by applicable law, appropriate safeguards will be used for international transfers, including adequacy decisions, Standard Contractual Clauses approved by the European Commission or another legally recognised transfer mechanism.

16. DATA RETENTION

ARETIX retains personal information only for as long as reasonably necessary for the purpose for which it was collected and as required to comply with applicable legal, accounting, taxation, contractual and regulatory obligations.

Order and transaction records may be retained for the periods required by applicable accounting and tax law.

Account and membership information may be retained for as long as the relevant account or membership remains active and for an appropriate period afterwards where necessary for legal, administrative, security or dispute-resolution purposes.

Health-related information submitted through membership forms will be retained only for as long as reasonably necessary for the purpose for which it was provided, unless a longer period is required or permitted by law.

Where processing is based on consent, withdrawal of consent may result in deletion or restriction of the relevant information unless another lawful basis requires or permits continued retention.

17. SECURITY

ARETIX takes reasonable technical and organisational measures intended to protect personal information from unauthorised access, disclosure, alteration, loss or misuse.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

Customers are responsible for protecting their account credentials and should not share login details with unauthorised third parties.

18. YOUR GDPR AND PRIVACY RIGHTS

Depending on your location and applicable law, you may have rights concerning your personal information, including:

Right of access – to obtain confirmation as to whether personal information concerning you is processed and to receive access to it.
Right to rectification – to request correction of inaccurate or incomplete personal information.
Right to erasure – to request deletion of personal information where the applicable legal requirements are satisfied.
Right to restriction – to request restriction of processing in certain circumstances.
Right to data portability – to receive certain personal information in a structured, commonly used and machine-readable format where applicable.
Right to object – to object to certain processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw that consent at any time.
Right to lodge a complaint – you may lodge a complaint with the competent data protection supervisory authority.

The exercise of these rights may be subject to conditions and exceptions provided by applicable law.

ARETIX may need to verify your identity before responding to certain requests.

19. WITHDRAWAL OF HEALTH DATA CONSENT

Where you have provided explicit consent to the processing of health-related information through an ARETIX form, you may withdraw that consent at any time by contacting:

info@aretix.it

Withdrawal will not affect the lawfulness of processing carried out before your consent was withdrawn.

20. CHILDREN'S DATA

The Services are not intended for children who are not legally permitted to enter into the relevant transaction or use the relevant service without the involvement or consent of a parent or legal guardian.

ARETIX does not knowingly seek to collect personal information from children contrary to applicable law.

If a parent or legal guardian believes that a child has provided personal information improperly, they may contact ARETIX using the details below.

21. COMPLAINTS

If you have concerns regarding the way ARETIX processes your personal information, please contact us first using the contact details below.

If you are located in Italy or otherwise subject to the GDPR, you also have the right to lodge a complaint with the competent data protection supervisory authority, including the Italian Data Protection Authority (Garante per la protezione dei dati personali), where applicable.

22. CHANGES TO THIS PRIVACY POLICY

ARETIX may update this Privacy Policy from time to time to reflect changes to its services, data-processing practices, technology, legal obligations or regulatory requirements.

When this Privacy Policy is updated, the "Last updated" date at the top of the Policy will be revised and additional notice will be provided where required by applicable law.

23. CONTACT

For questions about this Privacy Policy, the processing of your personal information, withdrawal of consent or the exercise of privacy rights, contact: