01. Information We Collect

The categories of personal information collected depend on your activities and the services used.

• Identity and contact information: Name, email address, phone number, billing address, and delivery address.
• Transaction information: Products purchased, amounts paid, payment status, order history, shipment details, and transaction identifiers.
• Account information: Login-related identifiers, account preferences, and saved details if customer accounts are available.
• Device and browsing information: IP address, browser type, device information, pages visited, referral information, and interaction data.
• Customer service information: Messages, complaints, return requests, product photographs, and communications submitted to our team.
• Marketing and preference information: Subscription choices, communications preferences, and relevant consent records.

Payment processors may collect complete card details directly through secure payment services. We generally receive limited transaction-related information rather than complete payment card credentials.

02. How Information Is Collected

We receive information directly from you when you submit orders, complete forms, communicate with customer support, create an account, or register for communications.

Additional information may be collected automatically through website functionality, cookies, analytics technologies, or other permitted tools.

We may also receive information from service providers involved in payment processing, fulfillment, fraud prevention, technical support, or other legitimate store operations.

03. Purposes for Using Personal Information

We may use personal information to:

• Accept, process, and fulfill purchases.
• Arrange payment authorization, shipping, delivery, returns, and refunds.
• Provide order confirmations and customer support.
• Respond to questions about product specifications and order concerns.
• Maintain and improve the website, browsing experience, and product information.
• Detect security incidents, attempted fraud, or unauthorized activity.
• Meet tax, accounting, legal, and regulatory obligations.
• Deliver marketing messages or personalized services where allowed by law and enabled by the customer's choices.

Where the law requires consent for specific activities, we will seek that consent through the applicable mechanisms.

04. Legal Grounds for Processing

Where applicable law requires a legal basis, personal information may be processed to fulfill a purchase contract, comply with legal obligations, pursue legitimate business interests, or carry out processing based on consent.

For example, order details may be necessary to deliver purchased products, while transaction records may be retained to meet accounting or legal requirements.

Consent may be withdrawn where applicable, although withdrawal does not affect processing conducted lawfully beforehand or processing supported by another lawful basis.

05. Cookies and Tracking Technologies

Our Shopify-powered website may use cookies, pixels, and similar technologies for essential store functions, including shopping carts, checkout operations, customer accounts, and website preferences.

Optional technologies may support analytics, advertising measurement, personalization, or performance improvements where configured and legally permitted.

You may be able to manage these technologies through website privacy controls or your browser settings. Where applicable law requires consent or an opt-out mechanism, relevant choices should be made available.

Disabling some technologies may affect website functionality, saved preferences, or the checkout experience.

06. Information Shared with Service Providers

To operate our store, we may share relevant information with third parties that provide necessary services, including:

• Shopify and ecommerce technology providers.
• Payment processors and financial institutions.
• Shipping, fulfillment, and logistics partners.
• Customer support and technical service providers.
• Fraud prevention and transaction verification services.
• Analytics or advertising service providers where enabled.
• Regulatory bodies and professional advisers where required or permitted by law.

Service providers may operate under contractual obligations or their own applicable privacy policies. Information is disclosed where reasonably necessary for a legitimate operational purpose or another lawful basis.

07. International Processing and Transfers

Cavertonly™ serves customers through an internationally accessible ecommerce storefront.

Information may be processed in countries different from the customer's place of residence, including jurisdictions where our operating company, Shopify, payment processors, logistics services, or other providers conduct business.

Where privacy law requires additional protections for international transfers, appropriate contractual, technical, or legal safeguards will be applied as necessary.

08. Retention of Information

We retain information for periods reasonably necessary to fulfill transactions, provide customer service, maintain records, comply with legal requirements, prevent fraud, and resolve disputes.

Retention periods depend on the category of data, relevant legal obligations, and the purpose for which the information was collected.

When information is no longer required, it may be deleted, anonymized, or otherwise handled in accordance with applicable retention and legal requirements.

09. Information Security

We seek to maintain reasonable technical, organizational, and administrative safeguards appropriate to the sensitivity of information processed through our business.

Payment services and other external providers may apply their own encryption, authentication, access restrictions, monitoring, or industry security practices.

Despite reasonable efforts, no electronic system can guarantee complete protection against every possible security risk.

Customers are encouraged to use secure devices, protect their account credentials, and notify us of any suspected unauthorized account activity.

10. Your Privacy Rights

Depending on applicable laws, you may have the right to request access to personal information, correction of inaccurate information, deletion, portability, or restrictions on certain processing activities.

You may also have the right to object to specified uses of data, withdraw consent for certain activities, or request information about categories of personal information disclosed to others.

To submit a request, email service@cavertonly.com with the subject "Privacy Request" and describe the assistance you require.

We may request appropriate identity verification before fulfilling a sensitive request. Some requests may be limited by legal exceptions or mandatory recordkeeping requirements.

11. U.S. State Privacy Rights

Residents of California and certain other U.S. states may have additional rights under their applicable privacy laws, subject to statutory conditions and the scope of each law.

Depending on the relevant law and data practices, these rights may include access, correction, deletion, or opting out of certain targeted advertising, personal information sales, or sharing activities.

Some forms of advertising or analytics data sharing may qualify as regulated sharing or targeted advertising even without a direct monetary exchange.

When required, we will provide mechanisms for exercising applicable rights and will not unlawfully discriminate against customers for submitting protected privacy requests.

12. Marketing Communications

If you subscribe to marketing communications, we may send information about products, promotions, or store updates in accordance with applicable consent and communication requirements.

You may unsubscribe from marketing emails using the instructions provided in those messages or by contacting customer support.

Unsubscribing from promotional messages does not necessarily prevent transactional communications needed for orders, payment issues, deliveries, returns, or legally required notices.

13. Children's Privacy

Our website is intended for a general consumer audience and is not directed toward children under the age of 13.

We do not knowingly solicit personal information directly from children under 13 in violation of applicable law.

If a parent or guardian believes a child has supplied information inappropriately, they may contact our support team for review.

14. Third-Party Links and Policy Changes

Our website may link to external services or websites whose privacy practices are governed by separate policies.

We encourage users to review relevant third-party privacy information before submitting personal data.

We may update this Privacy Policy as our technology, business practices, service providers, or legal obligations change.

Updated terms will be published with a revised date, and additional notice or consent will be provided where legally required.