We may collect the following, depending on how you use the Services:
- Contact details — name, email, phone number, billing and shipping addresses.
- Payment information — card or payment account details, transaction records and payment confirmations (processed through our payment provider; we do not store full card numbers ourselves).
- Account details — username, password, saved preferences.
- Order and browsing activity — items viewed, added to cart or wishlist, purchased, returned or exchanged.
- Support communications — anything you send us through customer service, email or chat.
- Device and usage data — IP address, browser type, device identifiers, and how you interact with our site.
- Directly from you (account creation, checkout, contacting support).
- Automatically, through cookies and similar tracking technology as you browse.
- From service providers who help us run the store, such as payment processors and shipping partners.
- From advertising or analytics partners.
- Running the store. Processing orders and payments, managing your account, arranging shipping, handling returns and providing customer support.
- Personalization. Recommending products, remembering preferences and tailoring your experience.
- Marketing. Sending promotional emails or texts and showing ads, including based on past purchases or browsing — you can opt out at any time (see below).
- Security and fraud prevention. Verifying account activity, protecting against fraud and keeping the site secure.
- Legal compliance. Responding to legal requests, enforcing our terms and meeting regulatory obligations.
We do not sell your personal information for cash. We may share it with:
- Service providers who help operate the store — payment processing, shipping, IT, customer support, analytics.
- Marketing and advertising partners, to run and measure campaigns; where required by law, you can opt out of this kind of sharing.
- Shopify, which hosts our store and processes data on our behalf, and may use aggregated data to power features like fraud protection across merchants. See Shopify's privacy policy for how they handle this.
- Business transfers — if Ruvia is acquired, merges or sells assets, customer data may transfer as part of that deal.
- Legal authorities, when required to comply with law, enforce our agreements, or protect our rights and users.
Our site may link out to other websites. We are not responsible for their privacy practices — check their policies before sharing information with them.
The Services are not directed at children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you believe a child has provided us information, contact us and we will delete it.
No system is perfectly secure, and we cannot guarantee that information sent to us (including over email) is fully protected in transit. We keep personal information only as long as needed to provide the Services, meet legal obligations or resolve disputes.
Depending on where you live, you may have rights to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your personal information.
- Port your data to another provider.
- Opt out of the sale or sharing of personal information, or of targeted advertising.
- Object to or restrict certain processing (EU/UK residents).
- Withdraw consent where we rely on it (EU/UK residents).
You can unsubscribe from marketing emails at any time using the link in those emails; this will not affect transactional emails about your orders or account. To exercise any other right, contact us using the details below. We may need to verify your identity first, and you may be able to authorize someone to act on your behalf where permitted by law.
If you are unhappy with how we have handled your information, contact us first. Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority.
We may store or process your information outside the country you live in. Where required — for example, transfers out of the EEA or UK — we rely on approved transfer mechanisms such as Standard Contractual Clauses, unless the destination country is already recognized as providing adequate protection.
We may update this Policy periodically. Material changes will be reflected by an updated “Last updated” date, and we will provide notice where required by law.
Questions or requests regarding this Policy or your personal information can be sent to info@ruviahealth.com. For purposes of applicable data protection law, Ruvia is the data controller of your personal information.