Privacy Policy
Effective date: September 29, 2026
This Privacy Policy explains how [LEGAL BUSINESS NAME] doing business as Vivacious ("Vivacious," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit [WEBSITE URL], place an order, join the Vivacious List, contact us, or otherwise interact with our services. Please replace the bracketed fields and confirm that this policy matches the store's actual data practices before publishing.
1. Information We Collect
We collect information you provide, information generated when you use the website, and information we receive from service providers or other sources. The categories below describe the information most relevant to a direct-to-consumer retail website.
Information We May Collect
Identity and contact details:
Create and manage accounts, process orders, provide support, and communicate about transactions.
Source:
You, when you place an order, create an account, or contact us.
Order and payment details:
Complete payment, shipping, returns, fraud prevention, tax, and accounting obligations.
Source:
You, payment providers, Shopify, and delivery partners.
Device and usage data.
Operate, secure, measure, and improve the website and troubleshoot errors.
Source:
Your browser, device, cookies, pixels, and similar technologies.
Marketing preferences.
Send release notifications or marketing communications where permitted and honor opt-outs.
Source:
You, when you subscribe or interact with our communications.
Support messages.
Respond to questions, investigate orders, and maintain service records.
Source:
You, through contact forms, email, or other support channels.
We do not ask you to provide sensitive personal information unless it is necessary for a specific service and permitted by applicable law. Please do not submit health, biometric, government identification, or other sensitive information through a general contact form.
2. How We Use Personal Information
- Provide, operate, maintain, and improve the website, products, and customer experience.
- Process purchases, payments, shipping, returns, refunds, exchanges, and customer support requests.
- Send service communications, including order confirmations, delivery updates, account messages, and policy updates.
- Send marketing or release notifications were permitted by law and subject to your choices.
- Prevent fraud, abuse, unauthorized access, and other security incidents.
- Comply with legal obligations, enforce our agreements, resolve disputes, and protect our rights and the safety of others.
3. Cookies and Similar Technologies
We and our service providers may use cookies, pixels, tags, local storage, and similar technologies to remember preferences, keep the website functioning, understand usage, measure communications, and support advertising or analytics. You can control cookies through your browser settings and, where available, our cookie preference tool. Disabling some cookies may affect website functionality. If we use non-essential cookies that require consent in your location, we will request that consent through the applicable notice or preference mechanism.
4. How We Share Personal Information
We may disclose personal information to the following categories of recipients, as reasonably necessary for the purposes described above:
- Platform and technology providers that host the store, support checkout, operate accounts, or provide analytics and security.
- Payment processors, fraud-prevention providers, fulfillment providers, and shipping carriers.
- Professional advisers, insurers, auditors, and vendors that process information on our instructions and under appropriate confidentiality obligations.
- Government authorities, courts, regulators, or other parties when required by law or needed to protect rights, safety, or property.
- A successor or transaction party if our business, assets, or ownership are reorganized, sold, or transferred.
We do not sell personal information for money. If our practices change, this policy will be updated, and any legally required choices will be provided.
5. Legal Bases and Regional Rights
Where laws such as the UK GDPR or EU GDPR apply, our legal bases may include performance of a contract, compliance with a legal obligation, our legitimate interests, and consent. The applicable basis depends on the purpose and context. Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing that occurred before withdrawal.
Depending on your location, you may have rights to request access to, correction of, deletion of, portability of, or restriction of processing of your personal information; to object to certain processing; to opt out of marketing; and to lodge a complaint with a supervisory authority. California residents may also have rights under the California Consumer Privacy Act, as amended, including rights to know, correct, delete, opt out of sale or sharing where applicable, and limit certain uses of sensitive personal information. We will not discriminate against you for exercising applicable rights.
To make a request, contact [PRIVACY EMAIL]. We may need to verify your identity before completing a request. If you use an authorized agent, we may request proof of authorization. If we deny a request, we will explain the reason and any appeal process required by applicable law.
6. Marketing Communications
You can unsubscribe from promotional emails by using the unsubscribe link in the message or by contacting [PRIVACY EMAIL]. You may still receive non-promotional service messages, such as order or account communications. We do not use a marketing preference to cancel or impair an order you have requested.
7. Retention
We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain business and transaction records, comply with legal and tax requirements, resolve disputes, enforce agreements, and prevent fraud. Actual retention periods depend on the type of information and the reason it is held. We securely delete, anonymize, or otherwise dispose of information when it is no longer needed, subject to lawful exceptions.
8. Security
We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. No transmission or storage system is completely secure, and we cannot guarantee absolute security. If we determine that a security incident requires notice, we will provide notice as required by applicable law.
9. Children
The website is not directed to children under [AGE OR 13] and we do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information, contact us at [PRIVACY EMAIL].
10. International Transfers
Our service providers may process personal information in countries other than the country where you live. Where required, we use appropriate safeguards for cross-border transfers and provide additional information on request at [PRIVACY EMAIL].
11. Changes to This Privacy Policy
We may update this policy from time to time to reflect changes in our services, technology, legal requirements, or data practices. We will post the revised policy on this page and update the effective date. Where required, we will provide additional notice or obtain consent.
12. Contact Us
Vivacious Health & Beauty
Customer-care email: care@vivacioushealthandbeauty.com