Privacy policy

1. Introduction

Welcome to Civaré Collective ("we", "our", "us"). We are committed to protecting your personal data and your right to privacy. This Privacy Policy explains how we collect, use, and share information about you when you visit or make a purchase from our website.

2. Who We Are

Civaré Collective
Email: info@civarecollective.com
Website: www.civarecollective.com

3. What Information We Collect

We collect information you provide directly to us, including:

Personal identification information — name, email address, phone number, billing and shipping address
Payment information — credit card details (processed securely via our payment provider, we do not store full card details)
Account information — if you create an account, your username and password
Order information — products purchased, order history, preferences
Communications — any messages you send us via email or contact forms

We also collect information automatically when you visit our website:

Device and browser information — IP address, browser type, operating system
Usage data — pages visited, time spent, links clicked
Cookies and tracking technologies — see Section 8 for details

4. How We Use Your Information

We use your personal data to:

Process and fulfill your orders
Send order confirmations, shipping updates, and receipts
Respond to your questions and customer service requests
Send marketing emails and promotional offers (only with your consent)
Improve our website and shopping experience
Prevent fraud and ensure security
Comply with legal obligations

5. Legal Basis for Processing (GDPR)

If you are located in the European Union, we process your personal data on the following legal bases:

Contract — to fulfill your order
Legitimate interests — to improve our services and prevent fraud
Consent — for marketing communications and cookies
Legal obligation — to comply with applicable laws

6. How We Share Your Information

We do not sell your personal data. We may share your information with:

Payment processors — such as Stripe or Shopify Payments to handle transactions securely
Shipping providers — such as PostNL, DHL or DPD to deliver your orders
Marketing platforms — such as Klaviyo or Mailchimp for email marketing (only with consent)
Analytics providers — such as Google Analytics to understand website usage
Legal authorities — when required by law or to protect our rights

All third parties are contractually obligated to handle your data securely and only for the purposes we specify.

7. Data Retention

We retain your personal data for as long as necessary to:

Fulfill the purposes described in this policy
Comply with legal and tax obligations (typically 7 years for financial records)
Resolve disputes and enforce agreements

You may request deletion of your data at any time, subject to our legal obligations.

8. Cookies

We use cookies and similar tracking technologies to enhance your experience. These include:

Essential cookies — required for the website to function
Analytics cookies — to understand how visitors use our site
Marketing cookies — to show you relevant ads and track campaign performance

You can control cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may affect website functionality.

9. Your Rights (GDPR)

If you are located in the European Union or EEA, you have the following rights:

Right of access — request a copy of your personal data
Right to rectification — correct inaccurate or incomplete data
Right to erasure — request deletion of your data
Right to restriction — limit how we process your data
Right to portability — receive your data in a portable format
Right to object — object to processing based on legitimate interests
Right to withdraw consent — withdraw marketing consent at any time

To exercise any of these rights, contact us at: info@civarecollective.com

You also have the right to lodge a complaint with your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl).

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our website uses SSL encryption for all data transmissions.

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our website with an updated date. We encourage you to review this policy periodically.