Privacy policy

Xoravessa (“we,” “us,” or “our”) operates www.xoravessa.com, including its related content, features, products, and services (collectively, the “Services”). Our store is powered by Shopify.

This Privacy Policy explains how we collect, use, disclose, and retain personal information when you visit our website, make a purchase, interact with our Services, or contact us. It also explains the privacy choices and rights that may be available to you.

If this Privacy Policy conflicts with our Terms of Service regarding the handling of personal information, this Privacy Policy controls for those matters.

1. Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you. It does not include information that has been appropriately anonymized or de-identified so that it cannot reasonably be linked to an individual.

Depending on how you interact with our Services, we may collect the following categories:

• Contact information: Your name, email address, telephone number, billing address, and shipping address.
• Payment and transaction information: Your selected payment method, payment status, transaction identifiers, purchase amounts, and related billing information. Payment providers collect the payment credentials needed to process your transaction. The information available to us depends on the payment method and provider.
• Account information: Information used to create or manage an account, including account identifiers, authentication information, preferences, and settings.
• Shopping activity: Products you view, items you add to your cart, purchases, returns, exchanges, cancellations, and associated order history.
• Communications: Information you provide when contacting us, requesting support, or submitting feedback or reviews.
• Device and connection information: Your IP address, browser type, device information, network information, and other online identifiers.
• Usage information: How you navigate and interact with our website, including pages viewed, links clicked, and interaction dates and times.
• Preferences and inferences: Interests or preferences inferred from your interactions with the Services, where permitted by applicable law.

The information collected depends on the features you use and the choices you make.

2. Sources of Personal Information

We collect personal information:

• Directly from you, such as when you place an order, create an account, complete a form, or contact us.
• Automatically, through cookies and similar technologies when you visit or interact with the Services.
• From service providers, including Shopify, payment processors, shipping providers, and technology providers supporting our operations.
• From business and marketing partners, where permitted by law and consistent with your privacy choices.

3. How We Use Personal Information

We use personal information for the following purposes:

Providing and managing the Services

To process payments, fulfill and deliver orders, manage accounts, process returns and exchanges, remember preferences, and provide order updates.

Customer support

To respond to questions, investigate delivery or payment issues, handle requests, and communicate about your relationship with us.

Improving and personalizing the Services

To understand how visitors use our website, troubleshoot problems, improve functionality, and provide relevant shopping experiences and product recommendations.

Marketing and advertising

To send promotional communications where permitted, measure campaign performance, and display relevant advertisements on our Services or other platforms. Advertising may be based on your interactions with our store and, where applicable, other websites or services.

Security and fraud prevention

To verify transactions, protect accounts, detect suspicious activity, investigate misuse, and help safeguard our customers and Services.

Legal and business obligations

To maintain required records, comply with applicable laws and valid legal requests, resolve disputes, enforce applicable terms, and protect our rights and the rights of others.

Where applicable law requires consent for a particular activity, we obtain that consent before carrying out the activity.

4. Cookies and Similar Technologies

Our Services use cookies and similar technologies to support functions such as shopping carts, checkout, account access, preferences, security, analytics, and advertising.

Some technologies are necessary for the Services to function. Others help us understand website usage or provide personalized content and advertising.

Where available, you can manage your preferences using the cookie banner or privacy controls on our website. Where required by law, we request consent before using non-essential cookies or similar technologies.

You can also manage cookies through your browser settings. Blocking certain cookies may affect website functionality.

For choices related to targeted advertising or the sale or sharing of personal information, please see Section 9.

5. How We Disclose Personal Information

We may disclose personal information to:

• Shopify and service providers supporting store hosting, payments, order fulfillment, shipping, customer support, analytics, security, and technology services.
• Marketing and advertising partners to help deliver, personalize, and measure advertising, subject to applicable law and your privacy choices.
• Third parties you authorize, such as when you choose a third-party payment service or request that we share information to complete a service.
• Professional advisers and authorities, where necessary for legal compliance, fraud prevention, dispute resolution, or the protection of rights and safety.
• Parties involved in a business transaction, such as a proposed merger, acquisition, restructuring, or sale of business assets, subject to applicable legal requirements.

Information disclosed may include contact details, order information, online identifiers, device information, and browsing or shopping activity, depending on the purpose.

Certain advertising-related disclosures may be considered a “sale,” “sharing,” or processing for “targeted advertising” under applicable privacy laws, even when no money is exchanged. Your choices are described below.

6. Our Relationship with Shopify

Shopify hosts our store and processes personal information to operate and improve the Services.

Information submitted through our Services may be transmitted to Shopify and other providers located outside your country of residence.

As described in the Shopify features used by our store, we use enhanced services that may combine information about your interactions with Xoravessa with information about your interactions with other merchants and Shopify. These services help support business improvements, personalization, and advertising.

For certain processing associated with these enhanced services, Shopify is responsible for handling your personal information and responding to requests concerning that processing.

To learn more, visit the Shopify Consumer Privacy Policy.

You can also visit the Shopify Privacy Portal to learn about available rights and submit requests relating to Shopify’s processing.

7. Third-Party Websites and Services

Our website may link to third-party websites or allow you to use services provided by other companies, including payment services and social platforms.

Their handling of personal information is governed by their own privacy notices. Please review those notices before submitting information.

Information you post publicly, such as a public review or social media comment, may be visible to others. Avoid including sensitive information in public submissions.

8. Retention and Security

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, maintaining accounts, providing support, complying with recordkeeping obligations, resolving disputes, and preventing fraud.

Retention periods vary according to the type of information, the reason it was collected, and applicable legal requirements.

We use reasonable safeguards designed to protect personal information. However, no method of transmission or storage is completely secure.

Please do not email full payment card numbers, security codes, passwords, or one-time authentication codes. If you have an account, keep your login credentials confidential.

9. Your Privacy Rights and Choices

Depending on where you live and applicable law, you may have the right to:

• Request access to or information about the personal information we hold about you.
• Request deletion of personal information, subject to applicable exceptions.
• Request correction of inaccurate personal information.
• Obtain a portable copy of certain personal information.
• Opt out of the sale or sharing of personal information or processing for targeted advertising.
• Object to or request restrictions on certain processing.
• Withdraw consent where processing relies on consent.
• Appeal a decision concerning a privacy request, where applicable.

These rights may be subject to conditions and exceptions under applicable law.

Opting out of data sharing and targeted advertising

You can submit an opt-out request through our Your Privacy Choices page. You may also contact us at hello@xoravessa.com.

Opting out does not stop information processing needed to complete your orders, provide requested services, maintain security, or meet legal obligations. It also does not necessarily remove all advertising.

Global Privacy Control

Where required by applicable law, we recognize Global Privacy Control (GPC) signals as requests to opt out of applicable sale, sharing, or targeted advertising activities for the browser and device sending the signal. Where the signal can be associated with an account, the request will also be applied as required by law.

Learn more at globalprivacycontrol.org.

Other than GPC and legally required opt-out signals, our Services do not respond to browser “Do Not Track” signals.

Marketing emails

You can unsubscribe from promotional emails using the unsubscribe link included in those messages. You may still receive non-promotional communications about orders, refunds, account security, or other service matters.

10. How to Exercise Your Rights

To submit a privacy request, email hello@xoravessa.com or use the applicable privacy controls on our website.

We may need to verify your identity before completing a request. We will request only information reasonably necessary for verification and handling your request.

Where permitted by law, an authorized agent may submit a request on your behalf. We may require proof of authorization and verification of your identity.

We will respond within the time required by applicable law and will not unlawfully discriminate against you for exercising your privacy rights.

11. Additional Information for EEA and UK Individuals

Where EEA or UK data protection law applies, our legal basis for processing depends on the purpose. It may include:

• Performing a contract with you, such as fulfilling an order.
• Meeting a legal obligation.
• Our legitimate interests, such as maintaining security, providing support, and improving the Services, where those interests are not overridden by your rights.
• Your consent, where required.

You may have additional rights to object to processing, restrict processing, or withdraw consent. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

12. International Data Transfers

Your personal information may be transferred to, stored in, or processed in countries outside the country where you live. Those countries may have different data protection laws.

Where applicable law requires safeguards for international transfers, we rely on recognized mechanisms, such as adequacy decisions, the European Commission’s Standard Contractual Clauses, or applicable UK transfer safeguards.

13. Children’s Privacy

Our Services are intended for a general audience and are not directed to children. We do not knowingly collect personal information from children under the age specified by applicable law.

If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate action.

We do not have actual knowledge that we sell or share personal information of individuals under 16 years of age, as those terms are defined by applicable law.

14. Complaints and Appeals

If you have concerns about how we handle personal information, contact us at hello@xoravessa.com.

Where applicable law provides a right to appeal a privacy request decision, you may submit an appeal using the same email address. Please explain the request and the decision you would like reviewed.

You may also have the right to complain to your local privacy or data protection authority. A list of EEA supervisory authorities is available through the European Data Protection Board.

15. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices, Services, or legal requirements.

We will publish the updated version on this page, revise the “Last updated” date, and provide additional notice or obtain consent where required by law.

16. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact:

Xoravessa
Website: www.xoravessa.com
Email: hello@xoravessa.com
Phone: +1 407-652-4614

Mailing address:
10021 Reevesbury Dr
Beverly Hills, CA 90210
United States

Customer support hours:
Monday–Friday: 9:00 AM–6:00 PM Pacific Time (PT)
Saturday–Sunday: Closed

For purposes of applicable data protection law, Xoravessa is the controller of personal information for the processing purposes it determines, except where Shopify or another provider independently controls processing as explained in this policy.