Privacy policy
RIVELIA ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use and safeguard your information when you visit our online store or place an order, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
RIVELIA is the data controller responsible for your personal data. You can contact us about anything in this policy at help@myrivelia.com.
The Data We Collect
- Identity and contact data: name, email address, phone number, billing and delivery address;
- Order and transaction data: items purchased, order value in pounds sterling (GBP), payment method (we never store your full card details — payments are processed securely by our payment providers);
- Technical data: IP address, browser type, device information and how you use our website;
- Marketing data: your preferences for receiving news and offers from us.
How and Why We Use Your Data
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Handling returns and refunds | Performance of a contract / legal obligation |
| Customer service enquiries | Legitimate interests |
| Sending our newsletter and offers (only if you opt in) | Consent |
| Fraud prevention and website security | Legitimate interests / legal obligation |
| Tax and accounting records | Legal obligation |
Who We Share Your Data With
We only share your data with trusted service providers who help us run the store:
- Shopify — the platform that hosts our store and processes orders;
- Payment providers — Visa, Mastercard, American Express, PayPal, Klarna, Apple Pay and Google Pay, to process your payment securely;
- Delivery couriers — to deliver your parcel and provide tracking;
- Email service providers — to send order confirmations and, with your consent, marketing.
We never sell your personal data. Where a provider processes data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.
Cookies
Our website uses cookies to keep your basket working, remember your preferences and understand how visitors use the site. You can manage cookies in your browser settings at any time. Essential cookies are required for the checkout to function.
How Long We Keep Your Data
We keep order and transaction records for 6 years to comply with UK tax law. Marketing data is kept until you unsubscribe. Data that is no longer needed is securely deleted.
Your Rights
Under the UK GDPR, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten");
- Restrict or object to our processing of your data;
- Portability — receive your data in a usable format;
- Withdraw consent to marketing at any time, via the unsubscribe link in any email or by contacting us.
To exercise any of these rights, email help@myrivelia.com. We will respond within one month.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to This Policy
We may update this policy from time to time. The latest version will always be published on this page.
Contact
For any privacy questions or to exercise your data rights, contact us at help@myrivelia.com.