Privacy policy | Shavello

1. Who we are

This Privacy Policy explains how Shavello (“we”, “us”), operating the online store at shavello.store, collects, uses, shares and protects personal information when you visit the store, place an order or contact customer care. It also describes your rights, including rights under the California Consumer Privacy Act as amended by the CPRA (“CCPA”) and the Colorado Privacy Act (“CPA”).

Shavello
1940 Broadway
Boulder, CO 80302, US
Email: contact@shavello.store
Phone: +1 218 502 7843

2. Information we collect

Information you provide: name, email address, phone number, delivery and billing addresses, order details, and any messages, photos or information you send us when contacting us or requesting a return.

Payment information: card and wallet payments (Visa, Mastercard, American Express, Discover, Apple Pay, Google Pay) are handled by our payment processor. We receive confirmation of payment, the card type and the last four digits, but never your full card number or security code.

Information collected automatically: when you browse the store, our hosting and security providers process technical data such as IP address, browser and device type, pages viewed, referring page and the date and time of requests. We do not request your precise location.

Browser storage: your shopping bag is saved in your browser’s local storage under the key shavello-bag, containing only product identifiers and quantities. It stays on your device until you clear it. See our Cookie Policy.

3. How we use your information

To process, pack, ship and deliver your order and send order and shipping confirmations.
To handle cancellations, returns, refunds, delivery issues and customer care requests.
To operate, secure and improve the website and prevent fraud and misuse.
To keep records required for accounting, tax and legal obligations.
To send marketing emails only if you have opted in; every marketing email includes an opt-out link.

4. Legal bases and consent

We process personal information to perform our contract with you (your order), to comply with legal obligations, for our legitimate interests in running a secure store, and, for optional marketing, with your consent, which you can withdraw at any time.

5. Cookies and similar technologies

The store uses browser storage only for essential functions such as remembering your bag. It does not currently use advertising pixels, third-party advertising cookies or optional analytics. Fonts are loaded from Google Fonts, so your browser connects to Google’s servers and shares technical data such as your IP address; see Google’s Privacy Policy. Details are in our Cookie Policy.

6. How we share information

We share personal information only with service providers who help us run the store, under contracts that limit their use of it: payment processing, website hosting and security, order fulfillment and shipping carriers, and email services. We may also disclose information when required by law, to respond to valid legal requests, to protect our rights or customers, or as part of a business transfer.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising.

7. How long we keep information

We keep order and transaction records as long as needed to fulfil your order, handle returns and meet tax, accounting and legal obligations, generally up to 7 years. Customer care messages are kept for up to 3 years after the matter is resolved. Technical logs are kept for a limited period according to our hosting provider’s practices. When information is no longer needed, we delete or anonymize it.

8. Security

The store is served over HTTPS, payments are handled by a PCI DSS-compliant processor, and access to customer data is limited to people who need it to help you. No method of transmission or storage is completely secure, so please never send full card numbers or passwords by email.

9. Your privacy rights

Depending on where you live, you may have the right to access, correct or delete your personal information, to receive a portable copy, and to opt out of the sale of personal information, targeted advertising and profiling. To make a request, email contact@shavello.store with the subject “Privacy request” or call +1 218 502 7843. We verify requests by matching the information you provide with our records and respond within the time required by law. If we decline a request, you may appeal by replying to our decision with the subject “Privacy appeal”.

10. California residents (CCPA)

California residents have the right to know the categories and specific pieces of personal information we collect, the sources, purposes and the categories of recipients; to delete and correct personal information; to opt out of sale or sharing (we do neither, and we honor Global Privacy Control signals); to limit use of sensitive personal information (we do not use it for purposes requiring this right); and to non-discrimination for exercising these rights.

Categories collected in the past 12 months: identifiers (name, email, phone, address, IP address); customer records and commercial information (orders, products purchased); and internet activity (technical browsing data). They are collected from you, your device and our service providers, for the purposes in section 3, and disclosed to the service providers in section 6. We confirm requests within 10 business days and respond within 45 days, extendable once by 45 days.

11. Colorado residents (CPA)

Colorado residents may confirm whether we process their personal data and access, correct, delete or obtain a portable copy of it, and opt out of targeted advertising, sale and profiling. We do not sell personal data or use it for targeted advertising or profiling. We respond within 45 days, extendable once by 45 days, and you may appeal any decision; if you are unhappy with the result of an appeal, you may contact the Colorado Attorney General.

12. Children

Our store is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The “Last updated” date shows the latest revision. If we make material changes, we will highlight them on this page or notify you by email where appropriate.