Privacy policy

Last updated: August 6, 2026

VIREVA operates this store and website, including all related information, content, features, tools, products and services, to provide you, the customer, with a curated shopping experience (the “Services”). VIREVA is powered by Shopify, which enables us to provide the Services. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make purchases or other transactions through the Services, or otherwise communicate with us. If our Terms of Service conflict with this Privacy Policy, this Privacy Policy governs the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described here.

Personal information we collect or process

“Personal information” means information that identifies you or another person or can reasonably be linked to you or another person. It does not include information collected anonymously or de-identified so that it cannot identify or reasonably be linked to you. Depending on how you interact with the Services, where you live and what applicable law permits or requires, we may collect or process the following categories of personal information, including inferences drawn from that information:

  • Contact details, including your name, address, billing address, shipping address, telephone number and email address.
  • Financial information, including credit card, debit card and bank account numbers, payment card details, financial account information, transaction details, payment information and other payment confirmation details.
  • Account information, including your username, password, security questions, preferences and settings.
  • Transaction information, including products you view, put in your basket, add to a wishlist, purchase, return, exchange or cancel, and your past transactions.
  • Communications with us, including information you provide when contacting us, for example with a customer support enquiry.
  • Device information, including information about your device, browser or network connection, your IP address and other personal identifiers.
  • Usage information, including how and when you interact with or navigate the Services.

Sources of personal information

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, interact with us or otherwise provide personal information.
  • Automatically through the Services, including from your device when you use our products or services or visit our websites, and through cookies and similar technologies.
  • Through our service providers, including when we engage them to use certain technology or they collect or process personal information on our behalf.
  • From our Shopify partners or other third parties.

How we use your personal information

Depending on how you interact with us and which Services you use, we may use your personal information for the following purposes:

  • Providing, personalising and improving the Services. We use personal information to provide the Services, including to perform our contract with you, process payments, fulfil orders, remember your preferences and products of interest, send account notifications, process purchases, returns, exchanges and other transactions, create, maintain and manage your account, arrange shipping, facilitate returns and exchanges, enable reviews and create a personalised shopping experience, such as recommending products related to your purchases. This may include using personal information to better tailor and improve the Services.
  • Marketing and advertising. We use personal information for marketing and advertising, including sending marketing, advertising and promotional communications by email, text message or post and displaying online advertisements for products or services on the Services or other websites. This may be based on products you previously bought or added to your basket and other previous activity on the Services.
  • Security and fraud prevention. We use personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate or take action concerning potentially fraudulent, illegal, unsafe or malicious activity, protect general safety and secure our Services. If you register an account, you are responsible for keeping your login credentials safe. We strongly recommend that you do not share your username, password or other login information with anyone.
  • Communicating with you. We use personal information to provide customer support, respond to you, offer effective services and maintain our business relationship.
  • Legal purposes. We use personal information to comply with applicable laws or respond to valid legal process, including requests from law enforcement or government agencies, investigate or participate in civil discovery, potential or actual litigation or other contested proceedings, or investigate possible violations of our terms or policies.

How we disclose personal information

In certain circumstances, we may disclose personal information to third parties for legitimate purposes in accordance with this Privacy Policy. These circumstances may include:

  • To Shopify, vendors and other third parties that perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.
  • To business and marketing partners to provide marketing services and advertisements. For example, we use Shopify to support personalised advertising with third parties based on your online interactions with different merchants and websites. Our business and marketing partners use information according to their own privacy notices. Depending on where you live, you may have the right to ask us not to share information about you for targeted advertising and marketing based on online activity across merchants and websites.
  • When you direct, request or otherwise consent to disclosure of certain information to third parties, such as to ship products to you or through your use of social media widgets or login integrations.
  • With our affiliates or otherwise within our corporate group.
  • In connection with business transactions, such as a merger or bankruptcy; to comply with legal obligations, including responding to subpoenas, search warrants or similar requests; to enforce applicable terms or policies; and to protect or defend the Services, our rights and the rights of users or others.

Our relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your use of the Services to provide and improve them. Information you submit is transmitted to and shared with Shopify and third parties that may be located in countries other than your country of residence, to provide and improve the Services. We also use certain enhanced Shopify features that involve information from your interactions with our store, other merchants and Shopify to help protect, grow and improve our business. To provide these features, Shopify may use personal information collected from these interactions. In these cases, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights regarding its use for these purposes. For more information about Shopify's use of personal information and your rights, see Shopify's Consumer Privacy Policy. Depending on where you live, you may exercise certain rights at Shopify's privacy portal.

Third-party websites and links

The Services may contain links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, review their privacy and security policies and other terms. We do not guarantee and are not responsible for their privacy or security, including the accuracy, completeness or reliability of information on them. Information you provide in public or semi-public spaces, including information shared on third-party social media platforms, may be visible to other users of the Services or those platforms without restrictions on its use by us or third parties. Including a link does not by itself imply endorsement of its content, owners or operators, except as stated in the Services.

Children's information

The Services are not intended for children, and we do not knowingly collect personal information from children below the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided personal information, you may contact us using the details below to request its deletion. As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell”, as defined by applicable law, personal information of individuals under 16.

Security and retention of your information

No security measures are perfect or impenetrable, and we cannot guarantee perfect security. Information you send may not be secure while in transit. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

How long we retain personal information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal obligations, resolve disputes or enforce applicable agreements and policies.

Your rights and choices

Depending on where you live, you may have some or all of the rights listed below regarding personal information. These rights are not absolute, may apply only in certain circumstances and may be subject to requests being declined where permitted by law.

  • Right of access or to know. You may have the right to request access to personal information we hold about you.
  • Right to deletion. You may have the right to ask us to delete personal information we hold about you.
  • Right to correction. You may have the right to ask us to correct inaccurate personal information we hold about you.
  • Right to portability. You may have the right to receive a copy of your personal information and request that we transfer it to a third party in certain circumstances and subject to exceptions.
  • Managing communication preferences. We may send promotional emails. You can opt out at any time using the unsubscribe option in those emails. We may still send non-promotional emails, such as messages about your account or orders.

If you live in the United Kingdom or European Economic Area, subject to exceptions and limitations under local law, you may also have the following rights:

  • Objecting to and restricting processing. You may have the right to ask us to stop or restrict processing your personal information for certain purposes.
  • Withdrawing consent. Where processing relies on your consent, you may withdraw it. Withdrawal does not affect the lawfulness of processing based on consent before it was withdrawn.

You may exercise these rights as indicated in the Services or by contacting us using the details below. To learn about Shopify's use of personal information and your rights concerning data processed by Shopify, visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising these rights. We may need to verify your identity before fulfilling requests, as permitted or required by law. Where applicable law allows, you may appoint an authorised agent to make requests on your behalf. Before accepting such a request, we require evidence that you authorised the agent, and we may require you to verify your identity directly with us. We respond promptly as required by applicable law.

Complaints

If you have a complaint about how we process personal information, contact us using the details below. Depending on where you live, you may have the right to appeal our decision by contacting us or to complain to your local data protection authority. A list of the relevant EEA supervisory authorities is available here.

International transfers

We may transfer, store and process your personal information outside your country of residence.

If we transfer personal information outside the European Economic Area or United Kingdom, we rely on recognised transfer mechanisms, such as the European Commission's Standard Contractual Clauses or equivalent contracts issued by the competent UK authority, where applicable, unless the transfer is to a country recognised as providing an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal or regulatory reasons. We will publish the updated policy on this website, update the “Last updated” date and provide notice as required by applicable law.

Contact us

If you have questions about our privacy practices or this Privacy Policy, or wish to exercise any available rights, email support@virevanordic.com.