Privacy Policy

Effective Date: May 14, 2026

At Zivaldi, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, purchase products, or otherwise interact with our brand.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We may collect the following categories of information:

Personal Information

When you place an order, create an account, contact us, or subscribe to our newsletter, we may collect:

• Full name
• Email address
• Shipping and billing address
• Phone number
• Account login information

Payment Information

Payments are securely processed through trusted third-party providers such as Stripe and PayPal. Zivaldi does not store your full credit card information on our servers.

Device & Usage Information

We automatically collect certain technical information when you access our website, including:

• IP address
• Browser type
• Device information
• Geographic region
• Pages visited and browsing behavior
• Referral sources

This information may be collected using cookies, pixels, and similar tracking technologies.

2. How We Use Your Information

We use your information to:

• Process and fulfill orders
• Manage shipping, returns, and customer support
• Communicate order updates and service notifications
• Send promotional emails and marketing communications (only where permitted or opted into)
• Improve website performance and user experience
• Analyze traffic, shopping trends, and marketing effectiveness
• Prevent fraud, abuse, and unauthorized activity
• Comply with legal obligations

3. Cookies & Tracking Technologies

We use cookies and similar technologies to improve website functionality, analyze traffic, personalize content, and support advertising efforts.

These technologies may include:

• Essential website cookies
• Analytics tools (such as Google Analytics)
• Advertising and marketing pixels
• Shopping cart and session cookies

If you are located in the European Economic Area or United Kingdom, we will request your consent before placing non-essential cookies on your device. You can manage your cookie preferences at any time through our cookie consent tool, accessible via the “Cookie Preferences” link in the footer of our website. You may also disable cookies through your browser settings; however, some parts of the website may not function properly if cookies are disabled.

4. How We Share Information

Zivaldi does not sell personal information for monetary consideration. However, as described in Section 12, sharing certain information with advertising partners for targeted advertising purposes may be considered a “sale” or “sharing” of personal data under California and other applicable state privacy laws. You have the right to opt out of such sharing as described in Section 12.

We may share information with trusted third parties only when necessary to operate our business, including:

• Payment processors
• Shipping carriers and logistics providers
• E-commerce and website service providers
• Analytics and advertising partners
• Fraud prevention and security providers

We may also disclose information:

• To comply with legal obligations
• To enforce our policies or protect our rights
• In connection with a business transfer, merger, or acquisition

5. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy and to comply with our legal obligations. The following general retention periods apply:

• Order and transaction records: Retained for 7 years to comply with tax, accounting, and legal record keeping requirements.
• Account information: Retained for the duration of your active account, plus up to 3 years following account closure or last interaction, unless a longer period is required by law.
• Customer support communications: Retained for up to 3 years from the date of resolution.
• Marketing preferences and consent records: Retained for 5 years from the date consent was given or last updated, to demonstrate compliance.
• Device and usage data (analytics): Typically retained for up to 26 months, consistent with standard analytics platform practices.
• Fraud prevention records: Retained for up to 5 years where a legitimate interest in preventing fraud or abuse applies.

After applicable retention periods expire, personal information is securely deleted or anonymized.

Retention periods may be extended where required to resolve disputes, enforce agreements, or comply with regulatory requirements.

6. International Data Transfers

Zivaldi operates internationally. Your information may be transferred to and processed in countries outside your own, including the United States.

Where required by applicable law, we implement appropriate safeguards to protect personal information transferred internationally. For transfers of personal data from the European Economic Area or United Kingdom to countries not recognized as providing an adequate level of data protection, we rely on appropriate transfer mechanisms such as the European Commission’s Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA), as applicable.

Copies of relevant transfer safeguards may be obtained by contacting us at [email protected].

7. Your Privacy Rights

Depending on your location, you may have certain privacy rights under applicable laws, including the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict or object to certain processing
• Withdraw consent for marketing communications
• Request a copy of your data

To exercise any applicable rights, contact us using the information below.

California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to request disclosure or deletion of personal information we collect, subject to certain exceptions.

For information about how we handle the sale or sharing of personal data for advertising purposes, see Section 12.

To exercise any applicable privacy rights, please contact us at [email protected] with the subject line “Privacy Rights Request.” We will acknowledge receipt of your request promptly and respond within the following timeframes:

• GDPR (EEA/UK): We will respond within 30 days of receiving a valid request. In complex or high-volume cases, this period may be extended by an additional 60 days, in which case we will notify you of the extension and the reason within the initial 30-day period.
• CCPA/CPRA (California): We will respond within 45 days of receiving a verifiable consumer request. This period may be extended by an additional 45 days where reasonably necessary, with prior notice provided.
• Other jurisdictions: We aim to respond to all privacy rights requests within 30 days. If a different timeframe is required by applicable local law, we will comply with that requirement.

We may need to verify your identity before processing certain requests. We will not charge a fee to process requests unless they are manifestly unfounded or excessive. If we are unable to fulfill a request, we will explain the reason in our response.

In addition to California privacy rights described above, residents of certain other U.S. states may have privacy rights under their applicable state laws.

The following states currently have comprehensive consumer privacy laws that may apply to our processing of your personal information:

• Virginia (VCDPA): Virginia residents may have the right to access, correct, delete, and obtain a copy of their personal data, and to opt out of the sale of personal data, targeted advertising, and certain profiling activities.
• Colorado (CPA): Colorado residents may have similar rights, including the right to opt out of the processing of personal data for targeted advertising or the sale of personal data.
• Connecticut (CTDPA): Connecticut residents may have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising and sale of personal data.
• Texas (TDPSA): Texas residents may have rights to access, correct, and delete personal data, and to opt out of the sale of personal data and targeted advertising.
• Oregon, Montana, and other states: Additional state privacy laws may apply depending on your state of residence. We will comply with applicable requirements as they come into effect.

To submit a privacy rights request under any applicable state law, please contact us at [email protected]. We do not discriminate against individuals who exercise their privacy rights.

8. Third-Party Services & Links

Our website may contain links to third-party websites, platforms, or social media services. We are not responsible for the privacy practices or content of those third parties.

We encourage users to review the privacy policies of any third-party services they access.

9. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect your information.

However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

Zivaldi does not knowingly collect personal information from children under the age of 16. If we become aware that such information has been collected, we will take reasonable steps to delete it.

11. Legal Basis for Processing (EEA/UK)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal information only where we have a valid legal basis to do so under applicable data protection laws.

These legal bases may include:

• Performance of a contract when processing is necessary to fulfill orders, provide services, or respond to customer inquiries.
• Compliance with legal obligations.
• Legitimate business interests, such as improving our website, preventing fraud, and analyzing site performance.
• Your consent, including for certain marketing communications and optional cookies or tracking technologies where required by law.

12. Analytics, Advertising & Marketing Technologies

Zivaldi uses third-party analytics and advertising tools, including Meta/Facebook Pixel, Google Analytics, Klaviyo, and TikTok Pixel. These services may collect information about your browsing behavior and interactions with our website, and may use that information for advertising personalization, marketing, and campaign measurement.

Under certain U.S. state privacy laws (including CCPA/CPRA and Colorado CPA), the sharing of personal information with advertising partners for targeted advertising purposes may constitute a “sale” or “sharing” of personal data, even where no money is exchanged.

You have the right to opt out of the sale or sharing of your personal information for targeted advertising purposes. To exercise this right, you may:

• Click the “Do Not Sell or Share My Personal Information” link in the footer of our website.
• Submit a request directly to [email protected] with the subject line “Opt-Out Request.”
• Use a legally recognized opt-out preference signal (such as the Global Privacy Control) where supported by your browser. We will honor such signals where required by applicable law.

Please note that opting out of targeted advertising does not mean you will stop seeing ads — it means ads you see may be less relevant to your interests. Certain essential website functions and non-targeted communications may continue regardless of your opt-out.

13. Marketing Communications & Unsubscribe

If you subscribe to marketing communications, we may send promotional emails regarding new products, collections, offers, or brand updates.

You may unsubscribe from marketing emails at any time by clicking the “unsubscribe” link included in our emails or by contacting us directly.

14. Do Not Track Signals

Some web browsers include a “Do Not Track” (DNT) setting that signals to websites that you prefer not to be tracked across sites. Because there is currently no universally accepted technical standard for recognizing or honoring DNT signals, our website does not alter its data collection practices based on DNT browser signals alone.

However, we offer meaningful alternatives for managing your tracking and advertising preferences:

• Cookie preferences: You can manage or withdraw consent for non-essential cookies, including analytics and advertising cookies, through your browser settings or our cookie management tool.
• Advertising opt-outs: You may opt out of interest-based advertising through the Digital Advertising Alliance (optout.aboutads.info), the Network Advertising Initiative (optout.networkadvertising.org), or your device’s ad settings.
• Platform-level controls: You can adjust privacy settings directly within platforms such as Meta, Google, and TikTok to limit how your data is used for advertising.

We encourage you to use these tools to manage your preferences in a way that works best for you.

15. Data Breach Notification

In the event of a data breach that affects your personal information, Zivaldi will take prompt action in accordance with applicable law. Where required, we will notify affected individuals and relevant regulatory authorities within the timeframes mandated by law, including within 72 hours of becoming aware of a breach where required under GDPR.

Notification will be provided via email to the address associated with your account, or by other means if required. We will describe the nature of the breach, the categories of data affected, the steps we have taken to address the incident, and any recommended actions you may take to protect yourself.

Not all security incidents rise to the level requiring notification. We will assess each incident individually and act in accordance with our legal obligations.

16. Changes to This Policy

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Updates will be posted on this page with a revised effective date.

17. Contact Information

If you have questions about this Privacy Policy or your personal information, please contact us: