Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
This privacy policy raises several concerns regarding user data and security. The company states that the transmission of information via the Internet or e-mail is not completely secure, and they cannot guarantee its security, meaning any transmission is at your own risk. In the event of a sale or merger, customer personal information may be transferred as part of business assets (risk_flags-2). The company reserves the right to retain personal information indefinitely for its legitimate interests or legal obligations and may delete it at its discretion, advising users not to rely on its storage (risk_flags-3). Furthermore, personal information may be transferred and stored outside of the user's country of origin, even to countries with lower data protection standards than the EU. The company may also collect sensitive personal information, including health data, wellness information, physical activities, and account credentials (data_use-1). User data is used for profiling characteristics and preferences to send targeted promotional messages and advertising (data_use-2). Automated decision-making processes, specifically through Shopify, use personal information to block transactions identified as fraudulent during checkout (data_use-3). Lastly, when orders are shipped, personal information is shared with shipping providers who may use it according to their own terms and privacy policies (data_use-4).
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risks to be aware of
2 findings
Clauses that may be harmful to users, or that are important to know.
high95% confidence
Company can share information during business transfer
In the event of a sale or merger, customer personal information and other collected data may be among the transferred business assets.
Why it matters: Your personal information could be transferred to another company if ALO, LLC is sold or merges with another business.
In the event of a sale or merger of Color Image Apparel, Inc., ALO, LLC, or any of our affiliated businesses, our customers' personal information and other information we have collected as described in this policy may be among the transferred business assets.
HOW WE SHARE YOUR PERSONAL INFORMATION, paragraph 7 · Citation strength: strong
medium90% confidence
Information may be stored indefinitely
The company reserves the right to retain your personal information for as long as necessary for their legitimate interests or legal obligations, and to the full extent not prohibited by law, and may delete it at their discretion, advising users to retain their own records.
Why it matters: Your personal information might be stored indefinitely, and the company may delete it at its discretion, meaning you shouldn't rely on them to store your data.
We will store your personal information for as long as is necessary to achieve the purposes for which it was collected, whether that is to provide services to you, for our own legitimate interests (described above), or to comply with our legal obligations. We reserve the right to retain it to the full extent not prohibited by law. We may delete personal information in our discretion, so you should retain your own records, and not rely upon our storage of any personal information, content, or other data.
HOW LONG WE RETAIN YOUR PERSONAL INFORMATION, paragraph 1 · Citation strength: strong
How your data is used
4 findings
Clauses that explain how the company collects, processes, and shares your personal information.
medium90% confidence
Collection of sensitive personal information
The company may collect sensitive personal information, such as data related to health, wellness, and physical activities, and also usernames and passwords for accounts.
Why it matters: The company might collect sensitive details about your health and activities, in addition to your account login credentials, which could be a privacy concern.
We may collect information that may be considered sensitive personal information under certain state or local laws. For example, we may collect information relating to your health, wellness, and/or physical activities. We may also collect the username and password for any account you create with us.
INFORMATION WE COLLECT, paragraph 10 · Citation strength: strong
medium90% confidence
User data is used for profiling and personalized advertising
The company conducts profiling on user characteristics and preferences based on provided information, interactions with services, third-party data, and search/booking history to send promotional messages, marketing, and advertising.
Why it matters: Your personal data, including browsing habits and preferences, may be used to create profiles that inform targeted marketing and advertising messages sent to you.
Conduct profiling on your characteristics and preferences (based on the information you provide to us, your interactions with the Services, information obtained from third parties, and your search and booking history) to send you promotional messages, marketing, advertising and other information that we think may be of interest to you.
Enforce our Terms or other policies, paragraph 7 · Citation strength: strong
medium90% confidence
Use of automated decision-making for fraud protection
The company uses personal information in connection with automated decision-making through a third-party service provider (Shopify) to block transactions that appear fraudulent during the checkout process.
Why it matters: Automated systems may block your transactions based on personal information if they are flagged as potentially fraudulent, which could lead to inconvenience.
We use your personal information in connection with automated decision making via our third-party service provider Shopify to protect our business from fraud during the checkout process. Shopify uses customers' personal information to block certain transactions that appear to be fraudulent through automated decision-making (you can review Shopify's Privacy Policy here ).
Enforce our Terms or other policies, paragraph 1 · Citation strength: strong
low90% confidence
Shipping providers may use your data according to their own policies
When orders are shipped, personal information is shared with shipping providers (UPS, DHL, FedEx, etc.) who may use this information consistent with their own terms and conditions and privacy policies.
Why it matters: Your personal information shared with shipping providers will be subject to their individual terms and privacy policies, which may differ from the company's policy.
Additionally, we use various shipping providers, including UPS, DHL, FedEx, and others. When your orders are shipped using these providers, we share your information with them and they may use your information consistent with their own terms and conditions (available here: UPS Terms and Conditions , FedEx Terms of Use , DHL Terms of Use ) and privacy policies (available here: UPS Privacy Notice , FedEx Global Privacy Notice , DHL Privacy Notice ).
HOW WE SHARE YOUR PERSONAL INFORMATION, paragraph 3 · Citation strength: strong
Cancellation and renewal terms
Not clearly stated
Clauses that describe how subscriptions or services can be canceled or renewed, including any associated costs or penalties.
?
Not clearly stated
No cited billing terms — wording is unclear
No information regarding cancellation or renewal terms was found.
Other tricky clauses
Not clearly stated
Unexpected or less-common practices that may be a disadvantage to users.
?
Not clearly stated
No cited gotchas — wording is unclear
No information regarding other tricky clauses was found.
User protections
3 findings
Clauses that protect users.
Protection90% confidence
Opt-out of marketing communications
Users can opt-out of receiving marketing communications by following the unsubscribe instructions included in marketing emails.
Why it helps: Users have a clear mechanism to stop receiving unwanted marketing emails, giving them control over direct marketing.
You can opt-out of receiving marketing communications from us by following the unsubscribe instructions included in our marketing communications.
Enforce our Terms or other policies, paragraph 8 · Citation strength: strong
Protection95% confidence
No collection of information from children under 16
The company does not knowingly contact or collect information from persons under the age of 16, and the services are not intended for use by anyone under that age.
Why it helps: This prevents the collection of personal data from minors, protecting their privacy online.
We do not knowingly contact or collect information from persons under the age of 16. The Services are not intended for use by anyone under the age of 16.
CHILDREN, paragraph 1 · Citation strength: strong
Protection90% confidence
Right to opt-out of cookie-based tracking for behavioral advertising
Users can opt out of cookie-based tracking for behavioral advertising purposes by setting cookie preferences or broadcasting an opt-out preference signal.
Why it helps: Users can prevent their online activity from being used for targeted advertising, enhancing their privacy and control over their data.
Please note that if you would like to opt out of sales or our targeted advertising through certain cookie-based tracking for advertising purposes, you will need to separately set your cookie preferences by clicking on the Cookie Preferences link that may be in the footer of our site or broadcasting an opt-out preference signal recognized by us, such as a Global Privacy Control signal, on the browser or browser extensions that support such a signal.
Limit the Use/Disclosure of Sensitive Personal Information, paragraph 25 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.