Privacy policy

This policy explains what personal data Reoviva collects when you visit reoviva.com or place an order, why we collect it, who we share it with, and the choices and rights you have.

1. Who we are

Reoviva is a trading name of Daniel Dušek, a sole trader registered in the Czech Republic, business registration number (IČO) 24387932, registered place of business: Kajlovec 96, 747 41 Hradec nad Moravicí, Czech Republic. We are responsible (the "controller") for the personal data described in this policy.

Contact for anything related to your data: hello@reoviva.com

We sell to customers in the United States and the United Kingdom. Because we are established in the European Union, the EU General Data Protection Regulation (GDPR) applies to how we handle your data. For customers in the UK, the UK GDPR and the Data Protection Act 2018 also apply.

2. What data we collect

Data you give us: name, shipping and billing address, email address, phone number, order details, anything you write to us, and review content if you leave a review.

Data collected automatically: IP address, approximate location, device and browser type, pages and products viewed, items added to cart, the website that referred you, and cookie or pixel identifiers. We also use tools that record how visitors interact with our pages (clicks, scrolls and taps) to improve the site.

Payment data: card details are entered directly into our payment providers' systems. We never see or store your full card number. We receive the payment status, the card brand, the last four digits and the billing address.

3. Why we use your data

  • To process and deliver your order and send order and tracking emails (performance of a contract).
  • To handle payments and prevent fraud (contract and legitimate interests).
  • To answer your emails and handle support and refund requests (contract and legitimate interests).
  • To keep accounting and tax records (legal obligation).
  • To send marketing emails, only if you've signed up, and you can unsubscribe any time (consent).
  • To measure and improve our advertising and our website (consent where required, otherwise legitimate interests).
  • To defend or bring legal claims (legitimate interests and legal obligation).

4. Who we share your data with

We share data only with the following recipients, and only what they need to do their job:

  • Store platform: Shopify hosts our store and processes order, customer and browsing data on our behalf.
  • Payment providers: Shopify Payments (operated by Stripe) and PayPal.
  • Order fulfillment: our fulfillment partner CJdropshipping (Dongguan CJ E-Commerce Co., Ltd. and affiliated CJ entities, China) receives your name, shipping address, phone number, email address and order contents to pack and ship your parcel.
  • Carriers: international, US and UK carriers (such as YunExpress, USPS and UK parcel carriers) receive your name, shipping address and phone number to deliver your parcel and send tracking updates.
  • Advertising and analytics: Meta Platforms (Facebook and Instagram) receives event data through the Meta Pixel and Conversions API, for example that a page was viewed, a product was added to cart or a purchase was completed. Where identifiers such as an email address are sent, they are hashed first. Microsoft Clarity helps us understand how visitors use our pages (heatmaps and session recordings).
  • Email and reviews: the email and review tools we use, limited to what they need for that function.
  • Advisers and authorities: our accountants, and tax authorities, courts or regulators where the law requires it.

5. "Selling" and "sharing" under US state privacy laws

We do not sell your personal data for money. Like most online stores, we use advertising cookies and pixels (such as the Meta Pixel). Some US state privacy laws treat this as "selling" or "sharing" personal data for targeted advertising. You can opt out at any time on our Your Privacy Choices page.

6. International transfers

Some recipients are located outside the European Economic Area, including in the United States and China. Where required, these transfers are protected by Standard Contractual Clauses or other safeguards recognized under the GDPR, or are necessary to deliver the order you placed. You can ask us for details at hello@reoviva.com.

7. Cookies and similar technologies

We use cookies, pixels and local storage to make the store work, remember your cart, measure advertising and understand how the site is used. Strictly necessary cookies (cart, checkout, security) are always on. You can manage cookies in your browser settings and opt out of targeted advertising on our Your Privacy Choices page.

8. How long we keep your data

  • Order, invoice and accounting records: 10 years, as required by Czech accounting and tax law.
  • Customer account and order history: while your account is active, then 3 years.
  • Support emails: 3 years from the last message.
  • Marketing list membership: until you unsubscribe, then a minimal record so we don't contact you again.
  • Published reviews: until you ask us to remove them.

9. Your rights

Depending on where you live, you may have the right to:

  • know what personal data we hold about you and get a copy of it;
  • correct data that is wrong;
  • delete your data, where we don't have a legal reason to keep it;
  • opt out of the "sale" or "sharing" of your data for targeted advertising;
  • object to or restrict certain processing, and withdraw consent at any time;
  • receive your data in a portable format.

To use any of these rights, email hello@reoviva.com. We'll respond within the time the law requires (for example, 45 days under California law, or one month under the GDPR and the UK GDPR). We may need to verify your identity first. You can also use an authorized agent. We won't treat you differently for using your rights.

If we decline your request, you can appeal by replying to our decision. You can also contact your state attorney general, or the Czech data protection authority (Úřad pro ochranu osobních údajů, uoou.gov.cz). If you live in the UK, you can complain to the Information Commissioner's Office (ico.org.uk).

10. Automated decisions

Shopify and our payment providers use automated fraud screening to flag suspicious orders. A person reviews flagged orders before we cancel anything.

11. Security

We use HTTPS across the whole site, limit access to order data to the people who need it, and work with providers who maintain their own security standards. No system is completely secure, but if a breach is likely to put your rights at risk, we'll notify you as the law requires.

12. Children

Our store is not intended for children, and we don't knowingly collect data from anyone under 16. If you believe a child has given us their data, email us and we'll delete it.

13. Changes to this policy

We may update this policy. The current version is always the one published on this page. If a change materially affects how we use your data, we'll tell you by email or with a notice on the site.

Questions: hello@reoviva.com