Privacy policy

Last updated: September 5, 2026

1. Information We Collect

• What you give us directly: name, email, shipping/billing address, phone number, and anything you write to us in a support message.
• What's generated by an order: items purchased, order value, order history, returns and refund records.
• What your device tells us: IP address, browser and device type, pages viewed, and how you got to our site, collected automatically via cookies and similar technology.
• Payment status: whether a payment succeeded and a transaction ID. We do not receive or store full card numbers — those go directly to our payment processor.

2. How We Use It

• Fulfilling and shipping your order, and keeping you updated on it
• Handling returns, refunds, and customer service requests
• Keeping the store secure and catching fraudulent orders
• Understanding which pages and products perform well, so we can improve them
• Sending marketing emails, but only if you've opted in — and only until you opt back out
• Meeting our own legal, tax, and accounting obligations

3. Legal Basis for Processing (UK/EU GDPR Visitors)

• Performance of a contract: to take and fulfill your order
• Legitimate interest: fraud prevention, site analytics, improving our service
• Consent: marketing emails, non-essential cookies
• Legal obligation: tax and accounting records

You can withdraw consent at any time; this doesn't affect anything already processed before that point.

4. Cookies

We use essential cookies to run the cart and checkout, and — with your consent where required — analytics and advertising cookies to understand traffic and measure ads. You can manage non-essential cookies through the banner on our site or your browser settings.

5. Who We Share Information With

We don't sell your personal information for money. We do share it with the vendors that let us run the store:

• Shopify, our ecommerce and checkout platform
• Our payment processor(s), to authorize and process payments
• Our fulfillment and shipping partners, to get orders to you
• Email and customer-service tools we use to communicate with you
• Analytics and advertising platforms, where you've consented to non-essential cookies

We may also disclose information if required by law, or as part of a merger, financing, or sale of the business.

6. International Transfers

Because we ship internationally and use providers like Shopify, your information may be processed in countries other than your own, including the United States. Where required, we rely on approved transfer mechanisms for this.

7. How Long We Keep It

We keep order and account records for as long as needed to handle returns, warranty claims, and our own tax/accounting obligations, then delete or anonymize what we're not legally required to retain.

8. Your Rights

Depending on where you live, you may be able to:

• Ask what personal information we hold about you
• Ask us to correct or delete it
• Object to or restrict certain processing
• Ask for a portable copy of your data
• Opt out of marketing or, where applicable, "sale"/"sharing" for advertising
• Lodge a complaint with your local data protection authority

To exercise any of these, email info@getcorvale.com. We may need to verify your identity first.

9. Children

Corvale isn't intended for anyone under 13 (or a higher age if your local law sets one). We don't knowingly collect data from children — contact us if you believe we have, and we'll remove it.

10. Changes to This Policy

We'll update the date at the top when this policy changes, and post the revised version here.

11. Contact

For questions regarding this policy, contact:

Email: info@getcorvale.com

You may also contact us through our contact form. We aim to respond within 3 business days.