Privacy policy
Last Updated: August 27, 2026
Curavia respects your privacy and is committed to protecting your personal data in compliance with applicable global data protection laws, including the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and credit card network security standards (PCI-DSS).
This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit trycuravia.com (the "Site") or make a purchase from us.
1. Legal Basis for Data Processing (GDPR Compliance):
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:
Contract Performance: To process, fulfill, ship, and deliver your orders and manage customer support inquiries.
Legitimate Interests: To improve our services, detect and mitigate fraudulent transactions, and optimize store performance.
Consent: To send direct marketing communications (Email/SMS) and deploy non-essential tracking cookies.
Legal Obligation: To comply with tax, statutory accounting, and financial reporting mandates.
2. Information We Collect:
a) Information You Provide Directly to Us
Identity Data: Full name, billing name, and account login details.
Contact Data: Email address, telephone number, billing address, and physical shipping address.
Financial Data: Payment card tokens and transaction verification data (all credit card transactions are processed securely by PCI-DSS compliant third-party payment gateways; we never store or process raw credit card numbers on our servers).
Transaction Data: Order history, purchased products, support tickets, and communication logs.
b) Information Collected Automatically
Technical Data: IP address, browser type, operating system, network host, and device hardware specifications.
Usage Data: Clickstream patterns, time spent on pages, cart activity, referring URLs, and approximate geolocation derived from IP addresses.
c) Tracking Technologies & Cookies
We use essential, analytical, and marketing cookies/pixels (including Meta Pixel and TikTok Pixel) to enable core cart functionality, analyze visitor traffic, measure conversion metrics, and deliver targeted advertising. You can manage or disable non-essential cookies via your web browser settings.
3. How We Share Your Information
We do not sell your personal information for monetary value. We share data strictly with trusted third-party service providers acting as data processors under contractual obligations:
Payment Gateways: Shopify Payments, Stripe, and PayPal process payment credentials securely. View the Shopify Privacy Policy and Stripe Privacy Policy directly.
Order Fulfillment & Logistics Partners: Third-party sourcing networks, order fulfillment centers, specialized cross-border air freight lines (including YunExpress shipping lines), international postal carriers, and regional delivery services receive necessary recipient names, telephone numbers, and shipping addresses strictly to process, dispatch, and complete delivery of your orders.
Marketing & Analytics: Marketing automation software (e.g., Klaviyo) and social media ad platforms (e.g., Meta, Google, TikTok) process user activity to send opted-in notifications and display targeted campaigns.
Legal & Regulatory Authorities: Data may be disclosed to law enforcement or court authorities if required by law, subpoena, or to defend our legal rights and property.
4. Data Retention & International Transfers:
Data Retention: We retain personal information only for as long as necessary to fulfill order processing, provide customer support, resolve billing disputes, and satisfy legal, accounting, or tax record-keeping requirements.
International Data Transfers: Your information may be transferred to, stored, and processed in countries outside your residence (including the United States). Transfers of European data are protected using approved legal transfer mechanisms, such as Standard Contractual Clauses (SCCs).
5. Your Rights & Consumer Disclosures:
a) European Economic Area (EEA) & UK Rights (GDPR)
You hold the right to access, correct, port, or request total erasure of your personal data, as well as the right to restrict processing or withdraw consent at any time.
b) California Consumer Disclosures (CCPA/CPRA)
Under California law, residents hold specific privacy rights:
Right to Know & Access: Request details on categories and specific pieces of data collected.
Right to Delete: Request deletion of personal information held by us.
Right to Correct: Request