Last updated: July 16, 2026

At Rivellux, your privacy matters to us. This policy explains, in plain language, what information we collect when you visit our store or place an order, how we use it, who we share it with, and the choices you have. It is written in line with the UK GDPR and the Data Protection Act 2018. By using our website, you agree to the practices described here.

1. Who We Are (Data Controller)

Rivellux is the “data controller” responsible for your personal information. If you have any questions about this policy or how we handle your data, contact us at teamrivellux@gmail.com.

2. The Information We Collect

Information you give us

•             When you place an order: your name, delivery and billing address, email address, phone number, and the products you purchased. We need this to get your order to your door.

•             When you pay: your payment is handled entirely by secure payment providers such as Shopify Payments or PayPal. Your full card number never reaches us and we never store it.

•             When you get in touch or subscribe: anything you share when you contact support, leave a review, or join our email list.

Information collected automatically

•             Device and browsing data: your IP address, browser, device type, and how you move through our store.

•             Cookies and pixels: like nearly every online store, we use cookies and advertising pixels (such as the Meta Pixel and TikTok Pixel) to keep your basket working, remember your preferences, measure our ads, and understand what our visitors enjoy. You can manage non-essential cookies through our cookie banner or your browser settings, though parts of the store may not work without the essential ones.

3. How We Use Your Information — and Our Legal Basis

Under UK GDPR, we must have a lawful basis for using your data. Here’s how it breaks down:

•             To process, deliver, and support your orders — this is necessary to perform our contract with you.

•             To answer your questions and keep you updated about your purchase — necessary for our contract with you.

•             To send you offers and news by email — only with your consent, which you give when you sign up. You can withdraw it and unsubscribe with one click at any time.

•             To improve our products, store, and advertising, and to prevent fraud — based on our legitimate interests in running and growing a safe, effective business.

•             To meet our tax, accounting, and other legal obligations — necessary to comply with the law.

That’s it. We collect what we need to serve you well, and nothing more.

4. Who We Share It With

We never sell your personal information. We share it only with the partners that make the store run:

•             Shopify — hosts our store and powers the checkout (see Shopify’s privacy policy).

•             Payment processors — to complete your purchase securely.

•             Delivery carriers — to deliver your order.

•             Advertising and analytics partners — such as Meta, TikTok, and Google, to measure and improve our campaigns.

We may also disclose information when the law requires it, or to protect our customers and our business.

5. International Transfers

Rivellux operates from Spain (within the EU), and some of our service providers process data in the United States and other countries outside the UK. Wherever your data is transferred outside the UK, we make sure it is protected by appropriate safeguards recognised under UK data protection law — such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.