Privacy Policy

Last Updated: May 29, 2026

Welcome to ELVEVA (“we,” “us,” or “our”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, www.elveva.com, and purchase our cosmetic and skincare products.

Please read this policy carefully. By accessing or using our website, you agree to the collection and use of your information in accordance with this Privacy Policy.

1. Information We Collect

To provide you with our products and services, we collect various types of information, including:

  • Personal Identification Information: When you make a purchase or attempt to make a purchase, we collect your name, billing address, shipping address, email address, and phone number.
  • Payment Information: We process payments securely via PayPal. We do not collect, store, or have direct access to your full credit card numbers or bank account details. All payment data is encrypted and handled directly by PayPal.
  • Device and Usage Data: When you visit ELVEVA, we automatically collect certain information about your device, including your IP address, browser type, time zone, and cookies installed on your device. As you browse the site, we collect information about the individual web pages or products that you view and how you interact with our store.

2. How We Use and Process Your Data (GDPR Legal Basis)

We use the personal information we collect for specific business purposes. We process your data on the basis of contractual necessity (to fulfill your order) and our legitimate interests (fraud prevention and site improvement). Specifically, we use your data:

  • To Fulfill Orders: To process your transactions, arrange for shipping via our global logistics network, and provide you with invoices and order confirmations.
  • Customer Communication: To communicate with you regarding your order, answer support inquiries, and send shipping updates.
  • Fraud Prevention: To screen our orders for potential risk or fraud (in particular, verifying your IP address).
  • Site Improvement & Analytics: To improve and optimize our website (using tools like Google Analytics and WooCommerce Analytics to evaluate how our customers browse and interact with our store).

3. How We Share Your Information & California Privacy Rights (CCPA)

To operate effectively on a global scale, we share your information with trusted third parties to fulfill your order and manage our store operations:

  • Fulfillment Partners: We share your shipping name, address, and phone number with our trusted international manufacturers and global logistics partners solely for the purpose of picking, packing, and securely shipping your products directly to you.
  • E-commerce Platform: Our store is built on WordPress and powered by WooCommerce. We share your data with these platforms to host our store and manage your data securely.
  • Payment Processors: We share transaction data with PayPal to process your payments securely.
  • Legal Compliance: We may share your personal information to comply with applicable laws and regulations, to respond to a lawful request for information we receive, or to otherwise protect our rights.

California Consumer Privacy Act (CCPA) Statement: We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. International Data Transfers

ELVEVA operates globally. Because our logistics network utilizes manufacturing partners and warehouses based in different regions, your shipping information will be transferred to and processed in countries outside of your own (including processing hubs outside the EEA). Such transfers are necessary for the performance of our contract with you — specifically, to ship your order to your address.

5. Your Data Protection Rights (GDPR)

Depending on your location (such as the European Economic Area), you have specific legal rights regarding your personal data:

  • The Right to Access: You have the right to request copies of your personal data.
  • The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate.
  • The Right to Erasure (“Right to be Forgotten”): You have the right to request that we erase your personal data, under certain conditions.
  • The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
  • The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you.
  • The Right to Object: You have the right to object to our processing of your personal data under certain circumstances, including data processed for direct marketing.
  • The Right to Withdraw Consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
  • The Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority or data protection officer in your jurisdiction if you believe our processing of your data violates data protection laws.

If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us at our support email below.

6. Marketing Communications & Opt-Out

If you opt-in to receive our newsletter or promotional updates, we may send you marketing emails. You can opt-out of receiving these communications at any time by clicking the “Unsubscribe” link at the bottom of any email we send, or by contacting us directly.

7. Data Security

We implement industry-standard technical and organizational security measures to protect your data. Our website uses Secure Sockets Layer (SSL) encryption to protect data in transit, and all payment processing is handled via secure tokenization on PayPal’s PCI-DSS compliant infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. We retain order transaction history for a minimum period of 7 years to comply with statutory financial, accounting, and tax obligations, after which it is securely deleted or anonymized. For non-transactional data (such as customer support inquiries), we retain data until it is no longer required for business purposes or until you request its deletion.

9. Product Disclaimer

The products sold on ELVEVA, including our beauty masks and skincare devices, are designed for cosmetic purposes to enhance your daily skincare routine and promote a glowing complexion. They are not intended to diagnose, treat, cure, or prevent any disease or medical condition.

10. Minors

Our website is not intended for individuals under the age of 18. We do not intentionally collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.

12. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to exercise your data rights, please contact us by email at: Email: support@elveva.com