Privacy & Cookies Policy

Last updated: February 20, 2026.

CAVARELL operates this website and online store, including all related information, content, features, tools, products and services (the “Services”), in order to provide customers with a curated online shopping experience. The Services are hosted and powered by Shopify, which enables us to operate and provide our e-commerce platform.

CAVARELL (“CAVARELL”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR, and applicable European data protection laws.

This Privacy Policy explains how we collect, use, process, disclose and safeguard your personal data when you visit, use, or make a purchase through www.cavarell.com or otherwise interact with our Services.

If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the processing of personal data.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read and understood how your personal data is collected, used and disclosed as described herein.

Data Controller

For the purposes of the GDPR and the UK GDPR, CAVARELL acts as the data controller in relation to personal data collected through the Services.

Our full contact details are available in the Legal Notice (Imprint) on our website.

You may contact us regarding privacy matters at: contact@cavarell.com

Personal Data We Collect or Process

When we refer to “personal data” or “personal information”, we mean any information that identifies or can reasonably be linked to an identified or identifiable individual. Personal data does not include information that has been anonymized or irreversibly de-identified so that it can no longer be associated with a specific person.

Depending on how you interact with our Services, we may collect or process the following categories of personal data, as permitted or required under applicable data protection laws:

  • Contact Information, including your full name, billing address, shipping address, email address and telephone number.
  • Account Information, including login credentials, account preferences and purchase history associated with your customer account.
  • Transaction Information, including products viewed or purchased, shopping cart activity, orders placed, returns, refunds and payment confirmations.
  • Payment Information, including transaction and payment confirmation data processed securely through third-party payment providers. CAVARELL does not store full payment card details.
  • Communications, including information you provide when contacting customer support or communicating with us through email, forms or other channels.
  • Device and Technical Information, including IP address, browser type, device identifiers, operating system, network information and interaction data relating to your use of the Services.
  • Usage Information, including information about how you browse, access and interact with our website, products and Services, including through cookies and similar tracking technologies.

Sources of Personal Data

We may collect personal data (information) from the following sources:

  • Directly from you when you create an account, place an order, contact us or otherwise interact with the Services;
  • Automatically through your device and browser when you access or use our website, including through cookies and similar technologies;
  • From service providers acting on our behalf, including Shopify, payment processors, logistics providers and analytics partners;
  • From marketing or advertising partners, where permitted by applicable law and subject to your consent where required.

Legal Basis for Processing (GDPR and UK GDPR)

We process your personal data based on one or more of the following legal grounds:

  • Performance of a contract, including order processing, payment handling and delivery of products;
  • Compliance with legal obligations, including tax, accounting and regulatory requirements;
  • Legitimate interests, such as fraud prevention, platform security and service improvement, provided such interests do not override your fundamental rights;
  • Consent, particularly for marketing communications, personalized advertising and non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

Providing Personal Data

Where we require personal data to perform a contract with you, such as to process and deliver an order, the provision of such data is necessary.

If you do not provide the required personal data, we may be unable to process your purchase or provide certain Services.

How We Use Your Personal Data

Depending on how you interact with us or which of the Services you use, we may use personal data for the following purposes:

  • Provide, Tailor, and Improve the Services. We use your personal data to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customized shopping experience for you, such as recommending products related to your purchases. This may include using your personal data to better tailor and improve the Services.
  • Marketing and Advertising. Where required by applicable law, we will send marketing communications only with your consent, which you may withdraw at any time. We may also conduct limited marketing activities based on our legitimate interests, such as measuring campaign performance and improving customer experience, always subject to your rights and applicable data protection laws.
  • Security and Fraud Prevention. We use your personal data to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
  • Communicating with You. We use your personal data to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.
  • Legal Reasons. We use your personal data to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Data

In certain circumstances, we may disclose your personal data to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
  • With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites. You may object to marketing-related processing at any time by contacting us at contact@cavarell.com and/or by adjusting your preferences through our cookie consent banner.
  • When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
  • With our affiliates or otherwise within our corporate group.
  • In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

However, automated tools may be used for fraud prevention, payment security and risk monitoring purposes, subject to appropriate safeguards.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify.

In certain circumstances, Shopify may act as an independent data controller for specific processing activities carried out through its platform, including responding to requests relating to personal data processed directly by Shopify. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy . Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal.

International Data Transfers

Due to the global nature of our service providers, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) or the United Kingdom.

If we transfer your personal data out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including the provision of our Services, compliance with legal, tax, accounting and regulatory obligations, dispute resolution, and enforcement of contractual agreements.

Retention periods may vary depending on the nature of the data, the purposes of processing, and applicable legal requirements. When personal data is no longer required, it will be securely deleted or anonymized in accordance with applicable data protection laws.

Data Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure. You should therefore avoid transmitting sensitive information through unsecured communication channels.

Your Data Protection Rights

Depending on your place of residence and applicable data protection laws, you may have certain rights in relation to your personal data. These rights are not absolute and may apply only in specific circumstances as permitted by law.

Subject to applicable law, you may have the right to:

  • request access to the personal data we hold about you;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data (“right to erasure”);
  • request restriction of processing under certain conditions;
  • object to the processing of your personal data where processing is based on legitimate interests;
  • request portability of your personal data in a structured, commonly used and machine-readable format;
  • withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal;
  • lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, you may contact us at: contact@cavarell.com

We may request verification of your identity before responding to your request, as required under applicable data protection laws.

Complaints

If you believe your personal data has been processed in breach of applicable data protection laws, you have the right to lodge a complaint with a competent supervisory authority.

If you are located in the European Economic Area (EEA), you may contact the supervisory authority in your country of habitual residence, place of work, or where the alleged infringement occurred.

If you are located in the United Kingdom, you may lodge a complaint with the Information Commissioner’s Office (ICO).

We encourage you to contact us first so that we may address your concerns directly at: contact@cavarell.com

Cookies and Tracking Technologies

Where required by applicable law, non-essential cookies are placed on your device only with your prior consent.

We use cookies and similar technologies to ensure website functionality, remember user preferences, analyze website performance and deliver personalized content and advertising.

You may manage cookie preferences through your browser settings or through our website cookie consent banner.

Children's Data

Our Services are not directed to individuals under the age of 16, and we do not knowingly collect or process personal data from children.

If we become aware that personal data has been collected from a child without valid parental or legal guardian consent, we will take reasonable steps to delete such information without undue delay.

If you are a parent or legal guardian and believe that a child has provided us with personal data, please contact us at: contact@cavarell.com

Third-Party Websites

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us by  email at contact@cavarell.com.