Privacy Policy

1. Who We Are

AELVITA is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your information, you can reach us at hello@aelvita.shop or visit aelvita.shop.

2. What Data We Collect

• Account data: name, email, password (hashed)
• Order data: billing/shipping address, order history
• Payment data: processed by Shopify Payments / Stripe — AELVITA never stores raw card numbers
• Device/usage data: IP address, browser type, pages visited, referring URL
• Communications: emails and messages you send us
• Marketing preferences: consent to email/SMS marketing

3. Legal Basis for Processing (GDPR Article 6)

• Contract performance: to fulfill orders and process returns
• Legitimate interests: fraud prevention, site security, improving services
• Consent: for marketing communications — you may withdraw at any time
• Legal obligation: tax records, regulatory compliance

4. How We Use Your Data

• Process and fulfill orders
• Communicate order status, shipping updates
• Respond to customer service inquiries
• Send marketing emails (only with consent)
• Improve website and product experience
• Comply with legal obligations
• Detect and prevent fraud

5. Cookies & Tracking

We use cookies and similar technologies. See our Cookie Policy for full details.

Essential cookies cannot be disabled. Analytics and marketing cookies require your consent.

6. Third Parties We Share Data With

• Shopify Inc. (e-commerce platform, data processor) — shopify.com/legal/privacy
• Stripe / PayPal (payment processing) — your payment data goes directly to them
• Shipping carriers (e.g., UPS, USPS, DHL) — name and address for delivery
• Google Analytics / Meta Pixel / TikTok Pixel — anonymized analytics (with consent)
• Klaviyo or Mailchimp (email marketing, if enabled) — with your consent only

We do NOT sell your personal data to third parties.

7. International Transfers

If you are located in the EU/EEA, your data may be transferred to the United States. We rely on Standard Contractual Clauses (SCCs) as the legal transfer mechanism (GDPR Chapter V).

8. Your Rights (EU/EEA Residents — GDPR)

• Right of access (Art. 15): request a copy of your data
• Right to rectification (Art. 16): correct inaccurate data
• Right to erasure (Art. 17): "right to be forgotten"
• Right to restriction (Art. 18): limit how we process your data
• Right to data portability (Art. 20): receive your data in a structured format
• Right to object (Art. 21): object to processing based on legitimate interests
• Right to withdraw consent: for marketing at any time
• Right to lodge a complaint with your local supervisory authority (e.g., ICO in the UK, CNIL in France)

To exercise any right, email hello@aelvita.shop. We respond within 30 days.

9. Your Rights (California Residents — CCPA/CPRA)

• Right to Know: what personal information we collect and how we use it
• Right to Delete: request deletion of your personal information
• Right to Opt-Out of Sale: we do NOT sell personal information
• Right to Non-Discrimination: exercising your rights will not affect your service

To submit a California Privacy Request: hello@aelvita.shop or use the "Do Not Sell My Info" link in the footer.

10. Data Retention

• Order data: 7 years (tax/accounting legal requirement)
• Marketing data: until you unsubscribe or request deletion
• Device/analytics data: 26 months (Google Analytics default) or shorter

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy. The "Last Updated" date will reflect any changes. Continued use of our site constitutes acceptance.