Privacy Policy

Privacy Policy


Last Updated: July 19, 2025


Introduction: This Privacy Policy describes how Aurévé Inc. (“we”, “us”, or “our”) collects, uses, and shares personal information when you visit or make a purchase from our website or otherwise use our services, as well as your rights regarding that information. We are committed to protecting your privacy & ensuring compliance with applicable laws, including the California Consumer Privacy Act (as amended by the CPRA) and the EU General Data Protection Regulation (GDPR), among others.


Information We Collect


We collect various types of personal information from & about our customers & website visitors in order to provide our services & operate our e-commerce business. In the past 12 months, the categories of personal information we may have collected include:


  • Identifiers: such as your name, billing & shipping address, email address, phone number, and unique customer ID (for example, when you create an account or place an order).

 

  • Order & Payment Information: details of the products you have ordered, payment information (e.g. credit/debit card details or other payment credentials) & transaction history. Note: We use third-party payment processors, so we do not store full payment card numbers; payment information is handled securely by our payment provider & transmitted with encryption.

 

  • Commercial Information: records of your purchases & interactions with our site, such as items added to cart, wishlist, or products viewed.

 

  • Internet or Other Electronic Activity: information about your device & browsing actions automatically collected through cookies & similar technologies when you use our site. This may include your IP address, browser type, access times, pages viewed, the website you came from, and clickstream data. We also use cookies or pixels to remember your preferences & analyze site traffic (see Cookies & Tracking section below).

 

  • Geolocation Data: general location information inferred from your IP address (e.g. city or country) to customize our service (for instance, showing local currency or shipping rates & options).

 

  • Inferences: inferences drawn from the above data to create profiles about preferences or purchasing trends. For example, we may analyze your past orders or browsing behavior to recommend products you might be interested in.


We generally do not collect sensitive personal information such as government ID numbers, financial account numbers, precise geolocation, or protected characteristics (e.g. ethnicity, religion) unless you voluntarily provide such information for a specific purpose. We do not knowingly collect any information from children under 13 (see Children’s Privacy below). If we ever need to collect sensitive data, we will obtain any required consent & provide the necessary disclosures.


Sources of Information: We collect personal information directly from you, for example when you place an order, create an account, subscribe to our newsletter, fill out a form on our site, or contact us via; email or phone. We also collect data automatically as you navigate our site (through cookies, analytics tools, and log files). In some cases, we may receive information from 3rd parties – for instance, if you use a 3rd-party login (like signing in via; a social media account) or if we run marketing campaigns on platforms that provide us with customer leads. We will always comply with any applicable laws regarding all 3-party data sources.


How We Use Your Information


We use personal information for the following business & commercial purposes, consistent with the ways permitted by applicable data protection laws:


  • To Fulfill Orders & Provide Services: We process your name, address, and payment details to process & ship your orders, handle returns or exchanges, and provide customer support. For example, we need your email to send order confirmations & shipping updates, and your address to deliver products.

 

  • Communication: We use contact information (email or phone) to communicate with you about your orders, respond to inquiries, and deliver important notices (such as updates about your order or changes to our policies). We may also send you newsletters or promotional communications if you have subscribed (see Email & SMS Marketing below).

 

  • Marketing & Personalization: With your consent where required, we may use your email, phone number, browsing behavior, or purchase history to send promotional offers, product recommendations, or personalized advertising content. This helps us to show you products that may interest you. You can opt-out of marketing at any time (see Your Rights & Choices).

 

  • Analytics & Improvement: We analyze how users interact with our website (through cookies & analytics tools) to improve our site design, product offerings, and user experience. For instance, we monitor which pages are most visited or how users navigate the site, in order to make our content more useful.

 

  • Fraud Prevention & Security: We may use personal information (like device information or order history) to detect & prevent fraud, scams, or other unauthorized or illegal activities. This includes verifying identity for large transactions & using automated systems to flag suspicious activity.

 

  • Legal Compliance: We might need to use & retain your information to comply with legal obligations (such as tax & accounting requirements, or responding to lawful requests by public authorities). For example, records of purchases are kept for accounting & may be disclosed if required by law or in response to a court order.

 

  • Other Business Purposes: We could use data for internal purposes such as auditing, data analysis, troubleshooting, or research to enhance our services. If we use your information in a way not described here, we will disclose it at the time of collection or obtain your consent where required.


We will not use the personal information we collect for materially different, unrelated, or incompatible purposes without updating this Policy or obtaining your consent.


Cookies & Tracking Technologies


Our site uses cookies & similar tracking technologies (such as web beacons or pixels) to provide & improve our services, for analytics, and for advertising. Cookies are small text files placed on your device that allow us to recognize your browser or device & remember certain information. We use the following types of cookies:


  • Essential Cookies: These are necessary for the website to function (e.g. keeping items in your cart or enabling checkout). You cannot opt-out of essential cookies, as the site cannot operate properly without them.

 

  • Analytics Cookies: These cookies collect information about how visitors use our site, which pages are popular, or if an error occurs. We use this data to improve site performance & user experience. For example, we use Google Analytics or similar tools which may set their own cookies.

 

  • Advertising Cookies: We may partner with advertising networks (like Facebook/Meta or Google) that use cookies & pixels to deliver ads that are relevant to your interests on other websites. This is known as interest-based or cross-context behavioral advertising. These cookies remember that you visited our site & what your interests were, and this information is shared with 3rd-party advertisers. California residents: please note that use of such advertising cookies could be considered as a “share” of personal information under California laws (see “Your Rights – Do Not Sell/Share” below) .


When you first visit our site, you will be presented with a cookie notice or banner that allows you to accept or adjust non-essential cookies, in compliance with applicable laws (like GDPR’s consent requirements). You can also control cookies through your browser settings – for example, by refusing all or some cookies or deleting cookies. Note that disabling cookies may affect certain features of our site (such as remembering your preferences or items in your cart).


We also respect browser settings or signals where required by law. For instance, if your browser is sending a Global Privacy Control (GPC) signal, we will treat it as a valid opt-out of sale/sharing for California residents. (See “Do Not Sell or Share” below for more information on opting out of cookies used for advertising.)


How We Share Your Information


We value your privacy & do not sell your personal information for money to 3rd parties. However, in the normal course of business we do share personal information with certain categories of recipients, as described below, for the purposes outlined in this Policy:


  • Service Providers: We share information with trusted 3rd-party service providers who perform services on our behalf. This includes, for example, payment processors (to securely handle credit/debit card transactions), shipping carriers & logistics partners (to deliver your orders), email service providers (to send order confirmations or marketing emails), and platform hosts (our website is hosted on Shopify Inc., which provides the e-commerce platform that enables us to operate our online storefront). These service providers are given access only to the information necessary to perform their functions & are contractually obligated to protect your data & use it only for our specified purposes.

 

  • Marketing & Analytics Partners: We may share limited personal information (such as cookies or hashed email addresses) with advertising partners or analytics companies to help us with marketing, personalization, and understanding site usage. For example, we might use a service like Google Analytics or Facebook Pixel on our site, which means those providers could receive information about your device or browsing activity on our site. Any such “sharing” for cross-context behavioral advertising is done in accordance with applicable law & you have the right to opt-out at any time (see Your Rights – Do Not Sell/Share).

 

  • Affiliates & Business Transfers: If we ever expand our business, we may share information with our corporate affiliates (e.g., a parent or subsidiary company) for internal reasons (such as centralized record-keeping or customer management). Additionally, if our company is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be disclosed or transferred as part of that transaction, in accordance with law.

 

  • Legal & Safety Disclosures: We may disclose personal information when required to do so by law or in a good-faith belief that such action is necessary to (i) comply with a legal obligation, court order, or subpoena; (ii) protect & defend our rights or property; (iii) prevent or investigate possible wrongdoing, fraud or security issues; (iv) protect the personal safety of our users or the public; or (v) protect against legal liability. In all such cases, we will only disclose what is necessary & will ensure any request is valid.

 

  • With Your Consent: We will only share your personal information with other 3rd parties (or allow them to collect it) in cases where you have given the consent. For example, if you opt-in to a 3rd-party app or service (such as a product review app that displays your name & comments on our site, or a social media sharing feature), we will forward over your data as instructed by you.


We do not sell customer personal information to data brokers or other 3rd parties for monetary consideration. We also do not share your personal information with unrelated 3rd parties for their own direct marketing purposes unless you explicitly agree. In the context of California’s “Shine the Light” law, we do not disclose personal information (such as your email or address) to 3rd parties for those parties’ direct marketing use without your consent.


Email & SMS Marketing


Email Marketing: With your permission, we may send you marketing emails about new products, special offers, or other updates. You will receive such emails only if you have subscribed to our newsletter or explicitly opted in (for instance, by checking a box at checkout to receive updates). You can unsubscribe from marketing emails at any time by clicking the “unsubscribe” link included in each email or by contacting us. Please note that even if you opt-out of marketing communications, we may still send you transactional or service-related messages (such as order confirmations or shipping notices) as those are not promotional.


SMS/Text Messaging: If you provide your phone number & consent to receive marketing text messages (SMS/MMS), we will send you recurring automated text messages about our products & offers. Consent to receive texts is not a condition of any purchase – you can shop with us without agreeing to SMS marketing. By opting in, you agree that messages may be sent using an automatic telephone dialing system or other technology, and that text messages may be sent to the mobile number you provided. Message frequency may vary. Message & data rates may apply to any SMS/MMS we send, as imposed by your mobile carrier. You are responsible for any such charges.


You can opt-out of the SMS service at any time. To unsubscribe from promotional texts, reply “STOP” to any of our messages (or follow any other opt-out instructions provided) to cancel SMS messages . After texting STOP, you may receive one final confirmation message. You can also contact us at our email or customer service to be removed. If you need help or have questions regarding our text messaging, you can reply “HELP” or contact us at our support email. We will not charge you for opting out or for asking for helpful guidance, but as noted, standard carrier rates may apply for messages.


We take your privacy seriously in our messaging programs. We do not share your phone number with 3rd parties for their own marketing, and we will only use it to send you messages you’ve signed up for or for important service communications. Carriers (your mobile network operators) are not liable for delayed or undelivered messages. While we strive to deliver messages promptly, we are not responsible for any delays or failures in SMS delivery, or any errors in the content of messages, to the extent permitted by law. If your mobile number changes, please let us know so we can update our records.


Your Rights & Choices


You have certain rights & choices regarding your personal information, which may vary based on your location or applicable law. We are committed to honoring your rights & will facilitate your exercise of the following:


1. General Rights (All Users): Regardless of jurisdiction, all of our users can contact us to access, update, or correct your personal information at any time. For example, if you have an account on our site, you can log in & edit your profile details (like your name, password, or mailing address). If any information we have is inaccurate or outdated, please let us know so we can correct it. You may also request that we delete your personal data. We will accommodate deletion requests to the extent we are able, though please note we may need to retain certain information for legitimate business or legal reasons (such as completing a transaction you initiated or for record-keeping as required by law).


2. California Privacy Rights: If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA) & its amendments (CPRA). These include the right to know what personal information we collect, use, disclose, and sell or share; the right to delete personal information we have collected from you; the right to correct inaccuracies in your personal information; the right to opt-out of the sale or sharing of your personal information; the right to limit use & disclosure of sensitive personal information (if we collect any); and the right to non-discrimination for exercising your privacy rights.


  • Right to Know: You can request that we disclose the categories & specific pieces of personal information we have collected about you in the last 12 months, the categories of sources, our purposes for collecting it, and the categories of 3rd parties with whom we share it. Upon verification of your identity, we will provide this information to you in a portable and, if feasible, readily usable format.

 

  • Right to Delete: You can request that we delete all personal information we have collected from you. Once we verify your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies (for example, if we need to retain certain data to complete a transaction, to detect fraud, to exercise legal rights, or comply with a legal obligation).

 

  • Right to Correct: If you find that any personal information we maintain about you is inaccurate or incomplete, you can request that we correct it. After verifying your identity & the accuracy of the new information, we will correct our records accordingly.

 

  • Right to Opt-Out of Sale or Sharing: California law gives you the right to opt-out of the sale of personal information or the sharing of personal information for cross-context behavioral advertising. We do not sell personal data for money, but we may share certain identifiers & online activity with advertising partners to serve ads (as described in Cookies & Tracking). This type of sharing can be considered a “sale” or “sharing” under California law. You can direct us not to share your information for targeted advertising. To exercise this right, you may click the “Do Not Sell or Share My Personal Information” link on our website (if available) or contact us by email with your opt-out request. If we detect a Global Privacy Control (GPC) signal from your browser, we will treat it as a valid opt-out request for that browser/device.

 

  • Right to Limit Use of Sensitive Info: If we ever collect “sensitive personal information” (as defined by California law) for purposes beyond what is necessary to provide our goods or services, California residents would have the right to limit our use of that sensitive data. We do not currently use sensitive personal information for inferring characteristics about consumers. If that changes, we will update this Policy & provide a means to exercise this right.

 

  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. This means we will not deny you goods or services, charge you a different price, or provide a different level of quality based on your choice to exercise your privacy rights. (However, please note that if you ask us to delete your data, we might not be able to provide some services that rely on that data – for example, if you delete your account data, you would need to re-create an account to make new purchases.)


Submitting Requests: California residents can submit requests to know, delete, correct, or opt-out by emailing us at our contact email (see Contact Us below). Please include “California Privacy Rights Request” in the subject line & specify which right you seek to exercise. We will need to verify your identity to process certain requests (for instance, by confirming information we already have on file, like your past order details or email address). If you prefer, you may designate an authorized agent to make a request on your behalf; we will take steps to verify the agent’s authority & your identity in such cases. We aim to respond to consumer requests as required by law (generally within 45 days, with the possibility of an extension), and will inform you as soon as possible if we need more time.


3. EU/EEA (GDPR) Rights: If you are located in the European Union, European Economic Area, or a similar jurisdiction with GDPR-equivalent laws (such as the UK or Switzerland), you have the following rights regarding your personal data, in addition to general rights above:


  • Right of Access: You have the right to request any confirmation of whether we are processing your personal data, and if so, to obtain a copy of the data we hold about you, along with information about how we use & share it.

 

  • Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data about you.

 

  • Right to Erasure: You can request that we delete your personal data under certain circumstances – for example, if the data is no longer necessary for the purposes it was collected, or if you withdraw consent & we have no other legal basis to continue processing. This is sometimes called the “right to be forgotten.” Please note this right is not absolute; for instance, we may retain data if needed for compliance with a legal obligation or for establishment or defense of legal claims.

 

  • Right to Restrict Processing: You have the right to ask us to limit the processing of your personal data in certain cases – for example, if you contest the accuracy of the data, or if the processing is unlawful but you prefer restriction over deletion.

 

  • Right to Data Portability: You may request a copy of certain personal data in a structured, commonly used, and machine-readable format so that you can transmit it to another controller. This applies to information you provided to us & that we process by automated means based on your consent or a contract.

 

  • Right to Object: You have the right to object to our processing of your personal data in some situations. In particular, you can object to processing of your data for direct marketing at any time, and we will stop processing for that purpose. You can also object if we are processing your data based on a legitimate interest & there is something about your particular situation that makes you want to object. If you exercise this right, we will consider whether we have compelling legitimate grounds that override your rights & freedoms, or if we need to continue processing for legal claims.

 

  • Automated Decision-Making: We do not make any decisions based solely on automated processing (including profiling) that produce legal effects or similarly significant effects for you, as per GDPR Article 22. In the event that we ever engage in such activity, you would have the right not to be subject to a decision based purely on automated means.

 

  • Right to Withdraw Consent: If we rely on your consent to process personal data (for example, for sending marketing emails or certain cookie usage), you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing before the withdrawal.

 

  • Right to Complain: If you believe we have infringed your data protection rights, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where the alleged infringement occurred (for example, an EU member state’s Data Protection Authority). We would appreciate the chance to address your concerns first by contacting us directly, but you are free to reach out to the regulator.


4. Other Jurisdictions: If you are in a jurisdiction with additional privacy rights (for example, certain other U.S. states have privacy laws coming into effect, or countries like Canada or Australia have their own rights), we will also respect those rights as applicable. For instance, residents of some states may have rights to access or delete data similar to CCPA rights, and we will accommodate those requests. Canadian individuals have the right to access personal information we hold & to request correction if needed (per PIPEDA). If you have any questions about your privacy rights in your jurisdiction, please feel free to contact us immediately.


Exercising Your Rights: To exercise any applicable rights or make requests regarding your personal information, please contact us using the information in the Contact Us section of this Privacy Policy. We will attempt to respond to your request as soon as reasonably possible & within any timeframes required by law. For certain requests, we may need to often verify your identity to ensure the security of your data – for example, by asking you to confirm any information we may already have on file, or by requiring any authentication through your account.


Do Not Track: Some web browsers offer a “Do Not Track” (DNT) setting that signals to websites that you do not want to be tracked across different sites. Currently, there is no uniform consensus on how to respond to DNT signals, and our site does not respond to browser DNT signals in a standardized way. However, as noted above, we do respond to Global Privacy Control (GPC) signals as an opt-out of sale/sharing for all California residents. Additionally, you can manage cookies & trackers as described in the Cookies section to control personalized advertising.


Data Retention


We will retain your personal information only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For example, we keep order & transaction records as required by taxing & commerce laws, typically for atleast 7 years. If you create an account with us, we will retain your account information until you delete your account or it’s no longer needed to provide services.


In determining retention periods, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes of processing & whether those purposes can be achieved by other means, and applicable legal requirements. When we no longer require personal information (or upon your request, where applicable), we will securely destroy or anonymize the information. If deletion is not feasible (for example, because your data is stored in backup archives), we will isolate it from further processing until deletion is possible.


Data Security


The security of your personal information is important to us. We implement reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. For instance, our store platform (Shopify) is PCI-DSS compliant for handling payment information, and credit/debit card data is encrypted during transmission using industry-standard SSL/TLS encryption. We also limit access to personal data to employees & service providers who need to know it for the purposes described in this Policy, and they are subject to confidentiality obligations.


However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You should also take steps to protect your information – for example, by choosing a strong, unique password for our site & not sharing it, and by logging out of your account when using a shared device.


In the event of any data breach that affects your personal information, we will notify you & the appropriate authorities as required by law.


International Data Transfers


Aurévé Inc. is based in the United States. If you are visiting our site from outside the U.S. (for example, from the European Union or another region with data protection laws), be aware that your personal information will likely be transferred to & processed in the United States. The data protection & privacy laws in the U.S. may not be equivalent to those in your home country. However, we will take steps to ensure that your data is treated securely & in accordance with this Privacy Policy & applicable law.


For transfers from the European Economic Area (EEA) or United Kingdom to the U.S., we rely on legally-provided mechanisms to lawfully transfer data across borders, such as Standard Contractual Clauses approved by the European Commission, or the EU-U.S. Data Privacy Framework (if applicable). By using our services or providing us with your information, you acknowledge the transfer of your personal data to the U.S. & the processing of your information in the U.S. as described in this Policy. We will implement appropriate safeguards to protect personal data transferred internationally.


Children’s Privacy


Our website & services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 years old (or under 16 in certain jurisdictions, such as the European Union, without parental consent). If you are under 13, please do not provide any personal information to us. If we learn that we have inadvertently collected personal information from a child under 13 without proper consent, we will take steps to delete that information promptly.


Parents or guardians who believe that we might have information about a child under the age of 13 may contact us (see Contact Us below) to request deletion.


Changes to This Privacy Policy


We may update or modify this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will post the updated policy on this page & update the “Last Updated” date at the top. Material changes will be prominently noted (e.g., via; an email notice or a notice on our homepage) if required by law. We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices. Your continued use of our website or services after any changes to this Policy constitutes your acknowledgment of the changes & acceptance of the revised Privacy Policy.


Contact Us


If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:


  • By Email: [support@aureveinc.com] (please include “Privacy Inquiry” in the subject line for quicker assistance)

 

  • By Mail: Aurévé Inc., Cincinnati, Ohio, United States (physical address may be provided)


We will do our best to address your inquiry promptly & resolve any of your concerns. If you are not satisfied with our response, you may have the right to lodge a complaint with a data protection authority as mentioned above.


Thank you for trusting Aurévé Inc. with your personal information. Your privacy is important to us, and we are committed to safeguarding it & using your data responsibly.