Privacy Policy

Last updated: October 2026

At Reviva Store, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and share personal data when you visit our website, purchase our products or interact with our services.

This policy applies to customers and visitors accessing our website, particularly those purchasing products in the United Kingdom. We handle personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We may collect the following categories of personal information when you use our website:

Personal and contact details: Your name, email address, telephone number and delivery or billing address.
Order information: Products purchased, order history, transaction references, delivery details and information relating to returns or refunds.
Payment information: Relevant payment and transaction details processed through our checkout and payment service providers.
Account information: Login details and preferences, where you choose to create an account.
Communications: Information you provide when contacting us through our website or submitting a request.
Technical information: Internet Protocol (IP) address, browser type, device information, approximate location derived from technical data and website usage information.
Marketing preferences: Your newsletter subscription status, communication preferences and applicable consent records.
Cookie and tracking information: Information collected through cookies and similar technologies, subject to your cookie preferences and applicable law.

We only collect personal information that is relevant and necessary for the purposes described in this policy.

2. How We Collect Your Information

We collect personal information through several channels, including:

Directly from you when you place an order, create an account, complete a form or subscribe to our newsletter.
Automatically when you browse or interact with our website, using technical tools, cookies and similar technologies as permitted by law.
From payment providers, delivery companies and other service providers involved in processing and fulfilling your order.
From fraud prevention, security and transaction verification services where necessary and lawful.

Where we obtain information from another source, we will provide any additional privacy information required by applicable law.

3. How We Use Your Information

We use personal information for the following purposes:

To process payments and fulfil orders.
To arrange delivery, provide order updates and manage returns or refunds.
To respond to enquiries and provide customer support.
To maintain customer accounts and manage your preferences.
To prevent fraud, detect suspicious activity and protect the security of our website.
To maintain business, accounting and transaction records.
To understand website performance and improve the shopping experience, where permitted.
To send promotional communications where we have the necessary consent or another lawful basis permitted by applicable law.
To comply with legal obligations and establish, exercise or defend legal claims where necessary.

We do not use personal information for purposes that are incompatible with those explained in this policy unless we have a lawful basis and provide any additional information required.

4. Our Lawful Bases for Processing

Under the UK GDPR, we must have a lawful basis for processing personal information. Depending on the circumstances, we rely on the following bases:

Contract: To process orders, arrange delivery, administer payments and take necessary steps to fulfil our agreement with you.
Legal obligation: To comply with applicable tax, accounting, consumer protection and other legal requirements.
Legitimate interests: To operate and improve our business, maintain website security, prevent fraud, respond to enquiries and protect our legal interests, provided these interests are not overridden by your rights and freedoms.
Consent: To send marketing communications where consent is required and to use non-essential cookies or similar technologies where consent is required.

Where we rely on consent, you may withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

5. Payments and Online Shopping

When you place an order, relevant information is processed to authorise payment, confirm your purchase and arrange fulfilment.

Our online store operates through an e-commerce platform, and payments may be handled by third-party payment service providers. These providers process payment information according to their applicable terms, privacy notices and security procedures.

Depending on the payment method selected, we may receive transaction references, payment status and limited payment-related information required to manage your order.

We do not intend to collect or retain complete payment card details beyond what is necessary and permitted for the relevant transaction and payment arrangements.

6. Sharing Your Personal Information

We may share personal information with trusted third parties where necessary for the purposes described in this policy, including:

E-commerce and hosting providers: To operate our website, checkout, customer accounts and online services.
Payment providers: To process transactions, verify payments and prevent fraud.
Delivery and fulfilment providers: To prepare, dispatch and deliver your purchases.
Customer service providers: To help manage enquiries and after-sales requests.
Email and marketing providers: To manage newsletters and promotional communications where permitted.
Analytics and advertising providers: To understand website performance and support relevant advertising, subject to applicable consent requirements.
Professional advisers and public authorities: Where necessary for legal compliance, regulatory purposes or the establishment and defence of legal claims.

We do not sell your personal information to third parties in exchange for payment. Where information is shared, we take reasonable steps to ensure that it is handled appropriately and in accordance with applicable law.

7. International Data Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take the measures required by applicable data protection law to ensure that the transfer is lawful and that appropriate protection is in place.

Depending on the circumstances, this may include relying on applicable adequacy regulations, approved contractual safeguards or another legally recognised transfer mechanism.

Further information about relevant international transfers and safeguards may be requested through our website's Contact page.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functions, remember preferences, analyse performance and, where enabled, support advertising activities.

Strictly necessary technologies may be used where required to operate the services you request. Non-essential cookies and similar technologies will be used in accordance with applicable consent requirements.

You can manage your preferences through the available cookie settings on our website and through your browser settings.

For further details about the categories of cookies used, their purposes and how to manage your preferences, please consult our Cookie Policy.

9. Marketing Communications

We may send promotional emails about products, offers, new arrivals and other updates where we have the necessary permission or another lawful basis permitted by applicable law.

You can unsubscribe from marketing emails at any time by using the unsubscribe link provided in the message or by submitting a request through our website's Contact page.

Even after you unsubscribe from marketing communications, we may continue to send essential service messages relating to your purchases, transactions, deliveries or other contractual matters.

We will respect your marketing preferences and applicable direct marketing rules.

10. Data Retention and Security

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including legal, accounting, reporting and record-keeping requirements.

Retention periods depend on the type of information, the reason it is held and any applicable legal obligations. Transaction and accounting records may need to be retained for statutory periods, while marketing information may be retained until you withdraw consent or unsubscribe, subject to any necessary suppression records.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of electronic transmission or storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security in every circumstance.

11. Your Data Protection Rights

Under applicable UK data protection law, you may have the right to:

Access: Request a copy of the personal information we hold about you.
Rectification: Request the correction of inaccurate or incomplete information.
Erasure: Request the deletion of personal information in circumstances permitted by law.
Restriction: Request that we restrict the processing of your information in certain circumstances.
Data portability: Request certain personal information in a structured, commonly used and machine-readable format where this right applies.
Object: Object to processing based on legitimate interests and to direct marketing, subject to the applicable legal rules.
Withdraw consent: Withdraw consent where processing is based on your consent.
Complain: Lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

These rights are subject to legal conditions and exceptions. For example, we may need to retain certain information to comply with legal obligations even if you request deletion.

To exercise your rights, please use the Contact page available on our website. We may request information reasonably necessary to verify your identity before responding.

12. Automated Processing

We may use automated tools supplied by payment, security or fraud prevention providers to assist with transaction verification, website security and the detection of suspicious activity.

Where applicable, we will comply with the legal requirements concerning solely automated decisions that produce legal or similarly significant effects on individuals.

You may exercise any rights relating to such decisions that are available to you under applicable data protection law.

13. Children's Privacy and Third-Party Websites

Our website is intended for general shopping purposes and is not specifically directed at children.

We do not knowingly seek to collect personal information from children in circumstances where parental authorisation or other safeguards are legally required. If you believe that a child has provided personal information improperly, please contact us through our website.

Our website may contain links to third-party websites or services. These websites operate under their own privacy policies, and we are not responsible for their independent data handling practices. We encourage you to review their privacy information before sharing personal information with them.

14. Changes and Contact Information

We may update this Privacy Policy from time to time to reflect changes in our business practices, website functionality, service providers or applicable legal requirements.

The latest version will be published on this page, together with the date of the most recent update.

If you have questions about this policy, the way we process personal information or your data protection rights, please use the Contact page available on the Reviva Store website.

We will review and respond to requests in accordance with applicable data protection law.