Privacy Policy

PRIVACY POLICY
Last updated: November 9, 2026

This Privacy Policy explains how Resiva ("Resiva", "we", "us" or "our") collects, uses and discloses your personal information when you visit or buy from resiva.shop (the "Site") or otherwise communicate with us about the Site (together, the "Services"). "You" means any customer, website visitor or other individual whose information we collect under this policy.

Please read this policy carefully.

CHANGES TO THIS PRIVACY POLICY
We may update this policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons. We will post the revised policy on the Site, update the "Last updated" date and take any other steps required by law.

HOW WE COLLECT AND USE YOUR PERSONAL INFORMATION
To provide the Services, we collect personal information about you from several sources, described below. What we collect and how we use it depends on how you interact with us.

Besides the specific uses described below, we may use the information we collect to communicate with you, provide and improve the Services, comply with legal obligations, enforce our terms of service, and protect or defend the Services, our rights and the rights of our users and others.

If you have questions about this policy or how we handle your personal information, contact us at:

Resiva
30 N Gould St, Ste 100
Sheridan, WY 82801
United States
Email: help@resiva.shop

WHAT PERSONAL INFORMATION WE COLLECT
"Personal information" means information that identifies, relates to, describes or can be linked to you. The types we collect depend on how you use the Site and Services.

Information you give us directly
- Contact details: your name, address, phone number and email.
- Order information: your name, billing and shipping address, payment confirmation, email and phone number.
- Account information: your username, password, security questions and other details used to secure your account.
- Shopping information: items you view, add to your cart or save to your account (such as loyalty points, reviews, referrals or gift cards), and items you buy.
- Customer support information: whatever you choose to include when you contact us, for example through a message on the Site.
Some features require you to give us certain information. You can choose not to, but then you may not be able to use those features.

Information we collect about your usage
We automatically collect certain information about how you interact with the Services ("Usage Data"). To do this we use cookies, pixels and similar technologies ("Cookies"). Usage Data may include device and browser information, information about your network connection, your IP address, and other information about how you use the Site and your account.

Information we obtain from third parties
We may also receive information about you from vendors and service providers who collect it on our behalf, such as:
- Companies that support the Site and Services, such as Shopify.
- Payment processors, who collect payment information (for example bank account or card details and billing address) to process your payment, fulfil your order and provide the products you asked for.
- Online tracking technologies, including pixels, web beacons, software development kits, third-party libraries and cookies, which may collect information when you visit the Site, open or click our emails, or interact with our Services or ads.
Information we obtain from third parties is treated under this policy. See also "Third-Party Websites and Links" below.

HOW WE USE YOUR PERSONAL INFORMATION
Providing products and services. We use your personal information to provide the Services and perform our contract with you: to process payments, fulfil orders, send notifications about your account, purchases, returns, exchanges and other transactions, create and manage your account, arrange shipping, and handle returns and exchanges. We may also let Shopify match your account with other Shopify services you choose to use; Shopify then processes your information under its own Privacy Policy and Consumer Privacy Policy.

Marketing and advertising. We may use your personal information for marketing and promotion, such as sending marketing messages by email, text message or post, and showing you ads for products or services. This may include using your information to tailor the Services and the ads you see on our Site and other websites. If you are an EEA resident, the legal basis is our legitimate interest in selling our products (Art. 6(1)(f) GDPR).

Security and fraud prevention. We use your personal information to detect, investigate and act on suspected fraudulent, illegal or malicious activity. If you register an account, you are responsible for keeping your login details safe. We strongly recommend that you do not share your username, password or other access details with anyone. If you think your account has been compromised, contact us immediately. If you are an EEA resident, the legal basis is our legitimate interest in keeping our website secure for you and other customers (Art. 6(1)(f) GDPR).

Communicating with you and improving our Services. We use your personal information to give you customer support and to improve the Services. This is in our legitimate interests, so that we can respond to you, provide effective services and maintain our relationship with you. If you are an EEA resident, the legal basis is Art. 6(1)(f) GDPR.

COOKIES
Like most websites, we use Cookies. For information about the Cookies used to power our store with Shopify, see https://www.shopify.com/legal/cookies. We use Cookies to run and improve the Site and Services (including remembering your actions and preferences) and to run analytics and understand how people use the Services. We may also allow third parties and service providers to use Cookies on the Site to tailor the services, products and ads you see on our Site and other websites.

Most browsers accept Cookies by default, but you can remove or reject them in your browser settings. Removing or blocking Cookies may make parts of the Services work incorrectly or become unavailable. Blocking Cookies may also not completely stop us from sharing information with third parties such as our advertising partners.

The Site recognises the Global Privacy Control (GPC) signal, which lets you opt out of certain uses or disclosures of your information. If you send us a GPC signal, we treat it as a valid request to opt out of sharing and targeted advertising for that browser or device. If we can link that device to a Shopify account, we apply the opt-out to the account too. To learn more, visit https://globalprivacycontrol.org/. Apart from GPC, we do not respond to other "Do Not Track" signals sent by your browser or device.

HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose your personal information to third parties to fulfil contracts, for legitimate purposes and for other reasons under this policy. For example:
- With vendors and other third parties who perform services for us (such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).
- With business and marketing partners who help us provide services and advertise to you. They will use your information under their own privacy notices.
- When you direct us or consent to a disclosure, for example to ship you products or when you use social media widgets or login integrations.
- With our affiliates or within our corporate group, in our legitimate interest in running a successful business.
- In connection with a merger, sale or bankruptcy; to comply with legal obligations (including responding to subpoenas, search warrants and similar requests); to enforce our terms of service; and to protect or defend the Services, our rights and the rights of our users and others.

Categories of personal information we disclose, and to whom:
- Identifiers (basic contact details and certain order and account information)
- Personal information categories listed in the California Customer Records statute (basic contact details and certain order and account information)
- Commercial information (order, shopping and customer support information)
- Internet or similar network activity (Usage Data)
- Geolocation data (such as location determined by IP address)
Recipients: vendors and third parties who perform services for us (such as internet service providers, payment processors, fulfilment partners, customer support partners and analytics providers); business and marketing partners; and affiliates.

We do not use or disclose sensitive personal information without your consent, or for the purpose of inferring characteristics about you.

With your consent, we share personal information for advertising and marketing. In the preceding 12 months we have "sold" or "shared" (as those terms are defined by applicable law) the following for advertising and marketing, with business and marketing partners:
- Identifiers such as name, email address and phone number
- Commercial information such as records of products purchased
- Usage Data

THIRD-PARTY WEBSITES AND LINKS
The Site may link to websites or platforms run by third parties. If you follow a link to a site we do not control, read its privacy and security policies and terms. We do not guarantee, and are not responsible for, the privacy or security of those sites, or the accuracy, completeness or reliability of their content. Information you share in public or semi-public places, including on social networking platforms, may be viewable by other users without limit on how it is used by us or anyone else. A link to a third-party site does not, by itself, mean we endorse it or its owners or operators, except where we say so on the Services.

CHILDREN'S DATA
The Services are not intended for children and we do not knowingly collect personal information about children. If you are a parent or guardian and your child has given us personal information, contact us using the details above and we will delete it.

We do not have actual knowledge that we "sell" or "share" the personal information of anyone under 16.

SECURITY AND RETENTION OF YOUR INFORMATION
No security measure is perfect or impenetrable, and we cannot guarantee "perfect security." Information you send to us may not be secure in transit. We recommend that you do not use insecure channels to send us sensitive or confidential information.

How long we keep your personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes or enforce our agreements and policies.

YOUR RIGHTS
Depending on where you live, you may have some or all of the following rights. They are not absolute, may apply only in certain situations, and in some cases we may decline a request as the law permits.
- Right to access / know: ask for the personal information we hold about you and details of how we use and share it.
- Right to delete: ask us to delete personal information we hold about you.
- Right to correct: ask us to correct inaccurate personal information.
- Right of portability: receive a copy of your personal information and, in some cases, have it sent to a third party.
- Right to opt out of sale, sharing or targeted advertising: tell us not to "sell" or "share" your personal information or to process it for targeted advertising as defined by applicable privacy laws. If you visit the Site with the Global Privacy Control signal enabled, then depending on where you are, we treat it as an opt-out request for the device and browser you use.
- Restriction of processing: ask us to stop or limit how we process your personal information.
- Withdrawal of consent: where we rely on your consent, withdraw it at any time.
- Appeal: if we decline your request, you may appeal by replying directly to our decision.
- Managing communication preferences: you can opt out of promotional emails at any time using the unsubscribe link in them. If you do, we may still send non-promotional messages, such as those about your account or orders.

You can use these rights where indicated on the Site or by contacting us at help@resiva.shop.

We will not discriminate against you for exercising your rights. We may need to collect information from you, such as your email address or account details, to verify your identity before responding. You may use an authorised agent to make a request for you. Before accepting a request from an agent, we may require proof that you authorised them and may ask you to verify your identity directly with us. We will respond within the time required by law.

COMPLAINTS
If you have a complaint about how we handle your personal information, contact us at help@resiva.shop. If you are not satisfied with our response, depending on where you live you may have the right to appeal, or to complain to your local data protection authority. For the EEA, a list of supervisory authorities is available from the European Data Protection Board at https://edpb.europa.eu.

INTERNATIONAL USERS
We may transfer, store and process your personal information outside the country where you live, and our staff, service providers and partners in those countries may process it too.

If we transfer personal information out of Europe, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant UK authority, unless the transfer is to a country determined to provide an adequate level of protection.

CONTACT
If you have questions about our privacy practices or this policy, or want to use your rights, email help@resiva.shop or write to us at: Resiva, 30 N Gould St, Ste 100, Sheridan, WY 82801, United States.

For the purposes of applicable data protection laws, and unless we state otherwise, Resiva is the data controller of your personal information.