Privacy Policy

Personal information means any information relating to an identified or identifiable person. Personal information does not include data that has been irreversibly anonymized or aggregated so that it can no longer identify you individually. We collect and process the following categories of personal information.

Identity and contact data: your name, email address, shipping and billing address, phone number, and country of residence. We collect this information when you create an account, place an order, or otherwise interact with us, and it is necessary to process and fulfill your orders.

Transaction and payment data: the products you purchase, your order history, order value, delivery details, and limited payment information such as payment method type. We do not store full payment card numbers. Full card data is collected and processed by our payment service providers in accordance with applicable PCI-DSS security standards.

Technical data: your IP address, browser type and version, device identifiers, operating system, time zone and location, and referring URLs. This information is collected automatically when you visit our website.

Usage data: pages viewed, products browsed, items added to cart, time spent on site, click paths, and other interactions with our website. This information is collected automatically and helps us understand how our website is used.

Marketing and communications data: your preferences in receiving marketing from us and your communication preferences, including whether you have opted in to receive marketing emails from us.

Customer support data: the content of emails, messages, reviews, and other communications you send to us, including any information you choose to share about your product experience or a reaction to a product.

We may collect and store information locally on your device using mechanisms such as browser web storage, including HTML5, and application data caches. This information is collected through cookies and similar tracking technologies, which are described in Section 5.

We use the information we collect to provide, improve, and develop our products and services, to communicate with you, and to protect us and our customers. More specifically, we use your personal information for the following purposes.

We use your personal information to process and fulfill your orders, arrange delivery, handle returns and refunds, and manage your account. Without this information we would be unable to complete your purchase or arrange delivery of your products. We use it to communicate with you about your order, inform you about changes to our policies and terms, and respond to your support requests. We use it to detect and prevent fraud and to investigate suspicious activity or potential violations of our Terms; this processing is based on our legitimate interest in protecting our customers and our business from fraudulent or unauthorized activity. We use it to analyze website performance, conduct data analysis and research, and improve our products and the overall customer experience. Where you have opted in, we also use your email address to send you marketing communications about our products, offers, and updates — you may opt out at any time. We use it to measure the effectiveness of our advertising campaigns, including through advertising tools such as Meta Pixel.

We collect personal data directly from you when you place an order, create an account, sign up for our newsletter, contact our support team, or otherwise interact with our website. We also collect data automatically when you visit our site through cookies and similar technologies used by us and our third-party partners, including advertising and analytics providers. We may also receive data from our payment and delivery service providers in connection with the execution of your orders — for example, a confirmation from our payment provider that payment has been received, or a delivery status update from a carrier.

We share your information only as necessary to operate our business and to provide our products and services to you. We do not sell your personal information for monetary consideration. We work with two categories of third parties: (a) service providers who act as processors on our behalf, processing your data only on our documented instructions and bound by appropriate data processing agreements; and (b) independent third-party controllers, such as advertising platforms, who receive data from our website and use it for their own purposes under their own privacy policies.

We share data with Shopify Inc., which hosts our online store and processes order and customer data on our behalf as our primary e-commerce platform — Shopify may store data in the United States and Canada. We share payment information with PayPal, which processes payments and is an independent controller of the data it collects directly from you in that context; we recommend reviewing PayPal's own privacy policy. We provide your name, shipping address, and contact details to delivery carriers in order to fulfill your order; carriers receive only the information needed to complete the delivery. We work with an email marketing platform to send order-related and marketing communications on our behalf; this platform acts as a processor and handles your email address and communication preferences only for the purpose of sending messages we have authorized. We use Meta Pixel on our website, which enables Meta (Facebook and Instagram) — acting as an independent controller — to collect data about your interactions with our site and to serve advertising to you on Meta's platforms. This data sharing with Meta may constitute "sharing" of personal information for targeted advertising purposes under California law, and California residents have the right to opt out of this sharing as described in Section 7. You can also manage your Meta advertising preferences directly at facebook.com/settings/ads.

We may also share your information with professional advisers such as accountants and legal counsel where necessary, with fraud prevention services to protect against fraudulent or unauthorized transactions, and with regulators or public authorities where required by applicable law or court order.

Our website uses cookies and similar technologies — including pixels, tags, and local storage — to operate our site, understand how it is used, and support our advertising. When you visit our website, the following categories of technology are active.

Strictly necessary cookies are required for the fundamental operation of our website, such as maintaining your session and shopping cart. These cookies are always active and cannot be disabled without affecting your ability to use the site.

Functionality and preferences cookies remember your settings and preferences, such as your selected currency or region. If you disable these, some features may not persist between visits.

Performance and analytics cookies, including Shopify Analytics, collect information about how visitors use our site — such as which pages are visited most often and how they navigate. This data is aggregated and used to improve the website experience.

Advertising and targeting cookies, including Meta Pixel, collect information about your browsing activity across websites in order to deliver and measure targeted advertising on platforms such as Facebook and Instagram.

You can manage your preferences in the following ways: block or delete cookies through your browser settings; opt out of Meta advertising at facebook.com/settings/ads; or use a Global Privacy Control (GPC) opt-out signal, which we will treat as a request to opt out of data sharing for targeted advertising purposes for the device and browser you used to visit our site.

If you opted in at checkout, we may send you occasional emails about our products, offers, and updates. You may unsubscribe at any time by clicking the unsubscribe link in any of our emails or by contacting support@mylavero.com. We will not use your email address for direct marketing purposes unless you have opted in, and we will not pass your details to third parties for their own marketing purposes without your prior consent.

We take reasonable steps to ensure that your personal data is accurate, complete, and up to date. Depending on where you live, you may have the following rights in relation to your personal information.

Right of access: you may request confirmation of whether we process your personal data and, where we do, obtain a copy of it together with information about how and why we process it. We will provide this within 30 days of receiving your request.

Right to rectification: you may request that we correct any inaccurate personal data we hold about you, or complete any incomplete personal data.

Right to erasure: you may request that we delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected.

Right to restrict processing: you may request that we limit how we process your personal data in certain circumstances.

Right to data portability: you may request to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.

Right to object: you may object at any time to our processing of your personal data where we rely on legitimate interests as our legal basis.

Right to withdraw consent: where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Right to lodge a complaint: if you believe we have not handled your personal data in accordance with applicable law, you may lodge a complaint with a relevant supervisory authority. We would appreciate the opportunity to address your concerns first — please contact us at support@mylavero.com.

California residents have additional rights under the CCPA/CPRA, including the right to opt out of the sharing of personal information for targeted advertising purposes. Residents of other states with applicable privacy laws, including Virginia, Colorado, Texas, and Connecticut, may have similar rights under their respective state laws. To exercise any of these rights, contact us at support@mylavero.com.

We retain your personal information only as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Order and transaction records are retained for 7 years. Customer support communications are retained for 3 years. Marketing data is retained until you unsubscribe, after which we retain a suppression record to ensure we do not contact you again. Analytics and cookie data is retained for up to 13 months. Where personal data is no longer needed, we will securely delete or anonymize it.

You may contact us at any time to request the deletion of your personal information. Please be aware that deleting certain types of data may affect your ability to use our services. If your order and transaction data is deleted, we may be unable to process a refund or verify your purchase history. If your account data is deleted, your account will be closed. We may retain data related to you if we believe it may be necessary to prevent fraud or future abuse, if required by law, or for legitimate purposes such as analysis of aggregated non-personal data, account recovery, or enforcing our rights and obligations under our agreements.

It may be necessary — by law, legal process, litigation, or requests from public and governmental authorities within or outside your country of residence — for us to disclose your personal information. We may also disclose personal information if we determine in good faith that disclosure is reasonably necessary to protect our rights, pursue available remedies, enforce our Terms, investigate fraud, or protect our operations or users.

In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party as part of that transaction.

We do not deliberately collect sensitive personal data. Lavero's filter is designed to remove harmful elements from your water — it does not come into direct contact with your skin. In the rare event that changes in your water quality affect your skin and you believe this to be related to your Lavero product, please contact us at support@mylavero.com. Any information you voluntarily share in this context will be used only to respond to your report and to improve product safety, and will not be retained beyond what is necessary for those purposes.

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have collected information from a child, please contact us at support@mylavero.com and we will delete it promptly.

We use reasonable technical, administrative, and physical security measures designed to safeguard your personal information and help prevent unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using industry-standard TLS protocols, PCI-DSS-compliant payment processing through Shopify and PayPal (which means we do not handle or store full card numbers), and access controls that limit who within our organization can access your personal data. We have also established procedures to respond to any suspected personal data breach. In the event of a breach that affects your rights and freedoms, we will notify you and the appropriate authorities as required by applicable law. Please be aware that despite our best efforts, no security system is impenetrable.

We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you. We do use automated tools to assist with fraud prevention, which may involve automated analysis of order and payment data to flag potentially fraudulent transactions for human review. Where you have given your consent, we may also use automated tools to personalize marketing communications and advertising based on your browsing and purchase history. You have the right to object to any automated processing that affects you by contacting us at support@mylavero.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will place a notice on our website when we make material changes to this Policy. Where changes are material, we will provide you with at least 30 days' notice before they take effect, whether by email or by a prominent notice on our website. The "Last updated" date at the top of this page shows when this Policy was last revised. Your continued use of our website after any changes are posted constitutes your acceptance of those changes.

For questions about this Privacy Policy, to exercise your privacy rights, or if you have any concerns about how we handle your personal information, contact us at support@mylavero.com.