Privacy policy

Last updated: April 18, 2026

INTRODUCTION

Rivelor ("we", "us", "our") operates rivelor.com. This Privacy Policy explains
how we collect, use, and protect your personal information when you visit or
make a purchase from our store.

Data Controller: Mouikha Rayan, 147 rue Saint-Denis, 75002 Paris, France
📧 contact@rivelor.com

INFORMATION WE COLLECT

When you visit our site or place an order, we may collect:
— Name, billing and shipping address
— Email address and phone number
— Payment information (processed securely via Shopify Payments and Stripe —
we do not store card details)
— IP address, browser type, and browsing behavior on our site
— Information collected automatically via cookies, pixels, and similar
tracking technologies

HOW WE USE YOUR INFORMATION

We use your information to:
— Process and fulfill your orders
— Send order confirmations and shipping updates (transactional emails sent
without prior consent, as required for contract fulfillment)
— Respond to customer service requests
— Improve our website and product offering
— Serve relevant advertising and marketing communications
— Comply with legal obligations
— Detect and prevent fraud or illegal activity

Legal bases for processing (GDPR Art. 6):
— Contract fulfillment (Art. 6(1)(b)): processing necessary to fulfill
your order
— Legitimate interests (Art. 6(1)(f)): security, fraud prevention,
service improvement, and marketing
— Legal obligation (Art. 6(1)(c)): compliance with applicable law
— Consent (Art. 6(1)(a)): where explicitly requested

We do not sell your personal information for monetary consideration.
However, certain data may be shared with advertising partners (e.g.,
Google, Meta) for targeted advertising purposes, which may be considered
"sharing" under applicable laws such as the CCPA/CPRA.
Marketing communications are sent only with your explicit consent.
Transactional emails are sent without consent as required for contract
fulfillment.

SHARING YOUR INFORMATION

We may share your information with:
— Shipping carriers, solely to fulfill your order
— Shopify Payments and Stripe, for secure payment processing
— Shopify, our e-commerce platform provider
— Google Analytics and Meta Pixel, for analytics and advertising purposes
— Legal authorities, if required by law

We have disclosed the following categories of personal information for
business purposes over the past 12 months: identifiers, commercial
information, and usage data — shared with service providers and business
partners as outlined above.

INTERNATIONAL DATA TRANSFERS

Your information may be transferred and processed outside your country,
including in the United States, where our service providers (Shopify,
Stripe) operate. Where we transfer data outside the EEA, we rely on
recognized transfer mechanisms including the European Commission's Standard
Contractual Clauses.

DATA RETENTION

We retain your personal data for as long as necessary to fulfill the
purposes outlined above, or as required by applicable law.

YOUR RIGHTS

Depending on where you live, you may have the right to:
— Access the personal data we hold about you
— Request correction or deletion of your data
— Request data portability
— Restrict or object to processing
— Withdraw consent at any time
— Opt out of the sale or sharing of your personal information
— Lodge a complaint with a supervisory authority (such as the CNIL in
France or your local data protection authority)

California residents have additional rights under the CCPA/CPRA, including
the right to opt out of the "sale" or "sharing" of personal information
for targeted advertising purposes. To exercise this right, contact us at
contact@rivelor.com.

To exercise any of these rights, contact us at contact@rivelor.com.
Please note that we may need to verify your identity before processing
your request.

COOKIES & TRACKING

Our site uses cookies to enhance your browsing experience and analyze site
traffic. We use Google Analytics and Meta Pixel for analytics and
advertising purposes.

Our website recognizes the Global Privacy Control (GPC) signal. If you
visit our site with GPC enabled, we will treat this as a valid opt-out
request from the sale or sharing of your data for the associated browser
or device.

You may disable cookies in your browser settings, though some features may
not function properly.

SECURITY

We implement appropriate technical and organizational security measures to
protect your personal data against unauthorized access, alteration, or
disclosure. Please note that no security system is impenetrable and we
cannot guarantee absolute security.

MINORS

The Services are not intended for individuals under the age of 18. We do
not knowingly collect personal data from minors. If you believe a minor
has provided us with personal information, please contact us and we will
delete it promptly.

THIRD-PARTY LINKS

Our site may contain links to third-party websites. We are not responsible
for their privacy practices or content.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes will be posted
on this page with an updated date. We encourage you to review this policy
periodically.

COMPLAINTS

If you have concerns about how we handle your personal information and are
not satisfied with our response, you have the right to lodge a complaint
with your local data protection authority. For EEA residents, a list of
supervisory authorities is available at: https://edpb.europa.eu