AriaFleets Privacy Policy

This Policy explains how Tyrell Lewis, a sole proprietor trading as Studio Aria, handles personal information in connection with AriaFleets. Studio Aria is located at Seagull Street, San Pedro Town, Belize District, Belize C.A. AriaFleets currently serves businesses in Belize.

This Policy covers AriaFleets. Orders, buyer contact details and gift cards from the studioaria.net shop are outside its scope and require a separate shop privacy notice, even though the services share database infrastructure.

1. Our role and the customer's role

Studio Aria determines how information is used for its own subscriptions, billing, support and service administration. For renter, staff and operational records entered by a customer business, that business generally determines the purposes and authorized users; Studio Aria processes those records on its behalf to operate AriaFleets.

These roles depend on the actual processing, not ownership labels alone. Customers remain responsible for their collection authority and notices; Studio Aria remains responsible for its own handling of information.

2. Information processed

Depending on the features used, AriaFleets processes:

• Account and staff details: names, business names, email addresses, roles, login and authentication information, preferences and staff activity logs.
• Renter details: ID type and number, driver's licence number, nationality, address, telephone number, email address and emergency contact details. These are identification details entered into records; this description does not imply that document images are collected.
• Operational records: vehicles, assets, inventory, reservations, rentals, maintenance, sales, notes and reports.
• Traffic-ticket information: alleged offences, fines and court details linked to the renter recorded as having the vehicle at the relevant time.
• Financial records: rental charges, payments, deposits, refunds, cart sales and ticket fines, including payment dates, amounts and methods.
• Subscription and support information: invoices, payment status and communications with Studio Aria.
• Technical information: IP addresses, timestamps and service logs maintained by Netlify and Supabase.

AriaFleets does not store renters' card or bank account numbers. Studio Aria does not use an integrated subscription payment processor. Bank transfer or in-person payments may create separate billing evidence held by Studio Aria outside AriaFleets.

Identity, financial and offence-related records require particular care. Free-text notes may contain personal information even where there is no dedicated field for it.

3. Purposes and authority

Studio Aria uses information to provide account access and requested features, administer subscriptions, answer support requests, maintain security and activity records, troubleshoot faults, back up and restore the service, and comply with applicable legal obligations.

Customer operational records are processed on the customer's lawful instructions to provide the service, or where required by law. They are not sold or used for advertising. Identifiable renter records are not used for unrelated product development.

Where applicable law requires a lawful basis, Studio Aria identifies the basis appropriate to each activity, including contractual necessity, legal obligations, legitimate interests where permitted, or consent where required. A business's subscription agreement does not by itself establish authority to process every renter's or employee's information. Additional conditions may apply to sensitive information.

4. Service providers and disclosure

Supabase provides the database, authentication and backups using Amazon Web Services infrastructure in Oregon, USA, region us-west-2. Netlify provides web hosting in the USA. Zoho Mail supports password resets, invitations and other service email. Netlify and Supabase maintain technical logs that may contain IP addresses and timestamps.

Cloudflare provides DNS only; application traffic is not routed through Cloudflare under the current setup. UptimeRobot checks the health endpoint without receiving customer records. GitHub stores source code and is not used to store customer records.

Providers receive information needed for their functions. Hosting locations stated here describe the known primary setup; provider support, email and ancillary processing locations depend on their applicable arrangements. Contact Studio Aria for available information about provider arrangements and safeguards.

Information may also be disclosed where required by law, to address fraud or security incidents, to establish or defend legal claims, or in a lawful business transfer subject to appropriate confidentiality and privacy protections. Access by Studio Aria personnel is limited to authorized service purposes.

5. Processing outside Belize

AriaFleets's primary database, authentication and backups are hosted in Oregon, USA. Using AriaFleets therefore involves processing outside Belize. Overseas providers may be subject to laws different from Belize's.

Studio Aria is responsible for assessing and implementing any transfer conditions and safeguards required by applicable law. This disclosure and acceptance of the Terms are not a substitute for those safeguards or any specific consent legally required.

6. Security and incidents

Studio Aria uses technical and administrative safeguards appropriate to the service and information handled. Customers must protect credentials, secure devices, limit staff permissions and promptly report suspected unauthorized access. No system can guarantee complete security.

Studio Aria will investigate incidents, take reasonable containment and corrective measures, and notify affected customer businesses without undue delay when their personal information is affected. Notifications to regulators or individuals will be made within applicable legal deadlines and subject to applicable thresholds and exceptions. Studio Aria will assist customer businesses with information reasonably needed to meet their own obligations.

7. Retention and account closure

Operational data is retained while the account is active or suspended. Suspension for an unpaid invoice does not itself delete records. After cancellation takes effect, business data is retained for 30 days, then deleted from the active system. An authorized representative may request an export; Studio Aria will deliver it within 14 days after verifying authority. Requests should be made before the deletion deadline.

Daily database backups are kept for seven days. Under the current arrangement, deleted records expire from those backups within seven days after active deletion. If a backup is restored, applicable deletions will be reapplied.

Records required by law or needed for a specific legal claim may be retained separately for that limited purpose. Studio Aria's own invoices and payment records are retained for the period Belize tax law requires. Technical and email records may follow provider-specific retention arrangements; the seven-day database backup period does not describe every provider's logs or messages.

Exports and cancellation-related deletion are currently performed manually by Studio Aria.

8. Requests and individual rights

Contact Studio Aria using the details below to ask about personal information, obtain access, correct inaccurate information, request deletion or restriction, request portability, object to applicable processing or withdraw consent where processing relies on it. Rights and exceptions depend on applicable law. Withdrawal does not invalidate earlier lawful processing.

Studio Aria will verify identity using information proportionate to the request, explain any refusal or limitation, and respond within any applicable statutory period. Where no statutory period applies, Studio Aria aims to respond within one month. Requests are ordinarily free; any charge or refusal for abusive or excessive requests must be permitted by applicable law.

For a renter or staff record controlled by a customer business, contact that business first. Studio Aria will direct or assist requests as appropriate rather than disclose another business's records without authority. Where available under applicable law, you may complain to the competent data protection authority or seek judicial remedies. Studio Aria can provide available information about the appropriate route on request.

9. Cookies and analytics

AriaFleets uses browser storage and session technologies as needed for login, security and application operation. The application currently contains no advertising, analytics or tracking scripts. Infrastructure logging by Netlify and Supabase continues as described above. Material changes involving additional tracking will be disclosed and any legally required consent obtained before use.

10. Children and unnecessary information

AriaFleets is intended for business use. It does not collect dates of birth and cannot determine whether a renter is a minor. Customer businesses must ensure appropriate authority and protections for any child's information they enter. Do not enter unnecessary health details or other sensitive information into free-text notes.

11. Changes and contact

Studio Aria will notify customers by email of material changes before they take effect where practicable, with earlier changes only where reasonably necessary for legal or urgent security reasons. Any legally required consent will be obtained. The revision date identifies the latest update.

Tyrell Lewis trading as Studio Aria Seagull Street, San Pedro Town, Belize District, Belize C.A. Email: customerservice@studioaria.net WhatsApp: +501 613-8041 Website: studioaria.net

© Studio Aria. All rights reserved.