Policy contents

1. 1. Information We Collect
2. 2. Information Sources
3. 3. How We Use Information
4. 4. How We Disclose Information
5. 5. Cookies and Technologies
6. 6. Sale, Sharing and Advertising
7. 7. Marketing Communications
8. 8. Data Retention
9. 9. Data Security
10. 10. Your Privacy Rights
11. 11. Children and Age Limits
12. 12. International Processing
13. 13. Third-Party Websites
14. 14. Policy Changes
15. 15. Contact Us

1. Personal Information We Collect

The personal information we collect depends on how you interact with Aqua Vera.

Information You Provide

We may collect information you provide directly, including:

• Your name;
• Billing and shipping addresses;
• Email address;
• Telephone number, if provided;
• Customer-account information;
• Products purchased or considered;
• Order, transaction, and subscription information;
• Marketing preferences;
• Communications submitted through our Contact Us form;
• Reviews, survey responses, or other content you submit; and
• Information necessary to process a return, refund, shipping claim, or customer-service request.

Payment Information

Payments are processed by Shopify and our authorized payment-processing providers. Full payment-card information is generally collected and processed directly by those providers rather than stored directly by Aqua Vera.

We may receive limited payment-related information, such as:

• Payment status;
• Payment method type;
• Billing address;
• Transaction identifiers; and
• The last digits of a payment card.

Information Collected Automatically

When you visit or use our website, we and our service providers may automatically collect:

• Internet Protocol address;
• Browser and device type;
• Operating system;
• Device identifiers;
• General or approximate location derived from an IP address;
• Pages viewed;
• Links clicked;
• Search activity;
• Referring website;
• Shopping-cart activity;
• Checkout activity;
• Date and time of visits; and
• Information collected through cookies, pixels, tags, and similar technologies.

Subscription Information

If you enroll in Subscribe & Save, we and our subscription provider may collect and process information necessary to manage your subscription, including:

• The subscribed product and quantity;
• Delivery frequency;
• Upcoming processing dates;
• Subscription status;
• Shipping information;
• Payment authorization or payment token;
• Changes, skips, pauses, and cancellations; and
• Subscription-related communications.

2. Sources of Personal Information

We may collect personal information from:

• You directly;
• Your browser or device;
• Shopify;
• Payment processors;
• Subscription-management providers;
• Shipping carriers and fulfillment providers;
• Customer-support providers;
• Email or SMS marketing providers, when enabled;
• Analytics and advertising providers, when enabled;
• Fraud-prevention and security providers; and
• Other parties when permitted or required by law.

3. How We Use Personal Information

We may use personal information to:

• Operate and maintain our website;
• Process payments and complete purchases;
• Fulfill, ship, and deliver orders;
• Create and manage customer accounts;
• Create and manage subscriptions;
• Send order, payment, shipping, and subscription notifications;
• Respond to questions and customer-service requests;
• Process authorized refunds, replacements, and claims;
• Maintain transaction and business records;
• Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;
• Verify compliance with our Terms of Service and product-use requirements;
• Improve our products, website, services, and customer experience;
• Measure website performance and understand customer activity;
• Personalize content or advertising where permitted;
• Send promotional communications when consented to or otherwise permitted by law;
• Comply with legal, tax, accounting, regulatory, and contractual obligations;
• Establish, exercise, or defend legal claims; and
• Protect the rights, property, safety, and security of Aqua Vera, our customers, and others.

4. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary.

Shopify

Our online store is hosted by Shopify. Shopify processes personal information to provide storefront, checkout, payment, customer-account, security, analytics, and related services.

Shopify may also process information through services such as Shop, Shop Pay, and Shopify Network Intelligence when those services are enabled. Shopify’s processing is described in its Consumer Privacy Policy .

Service Providers

We may disclose information to providers that perform services on our behalf, including:

• Payment processing;
• Website hosting and ecommerce services;
• Subscription management;
• Order fulfillment and shipping;
• Email or SMS communications;
• Customer support;
• Website analytics;
• Advertising and marketing;
• Fraud detection;
• Data storage;
• Information security; and
• Professional legal, accounting, insurance, or business services.

These providers may use personal information only as permitted by their agreements with us and applicable law.

Shipping Carriers

We provide necessary information, such as your name, shipping address, telephone number, email address, and shipment details, to carriers responsible for delivering your order.

Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with applicable law, regulation, court order, subpoena, or legal process;
• Respond to lawful government or regulatory requests;
• Investigate suspected fraud or illegal conduct;
• Enforce our agreements and policies;
• Protect the security of our website; or
• Protect the rights, property, or safety of Aqua Vera, our customers, or others.

Business Transfers

If Aqua Vera or The Gray Area Lab LLC is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

5. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, software development kits, and similar technologies.

These technologies may be used to:

• Keep the website functioning;
• Remember preferences and shopping-cart contents;
• Maintain account and checkout sessions;
• Prevent fraud and improve security;
• Measure traffic and website performance;
• Understand customer interactions;
• Personalize content; and
• Provide or measure advertising when enabled.

Some cookies are necessary for the website to operate. Other analytics, personalization, or advertising cookies may be optional depending on your location.

Where available, you can manage privacy preferences through our cookie banner or browser settings. Blocking necessary cookies may prevent certain website or checkout features from functioning correctly.

6. Targeted Advertising, Sale, and Sharing

Aqua Vera does not sell personal information in exchange for money.

However, certain uses of advertising, analytics, pixels, or Shopify services may be considered a “sale,” “sharing,” or processing for targeted advertising under some state privacy laws, even when no money is exchanged.

Where applicable, you may opt out through the Your Privacy Choices or Do Not Sell or Share My Personal Information link displayed on our website.

Where required by applicable law and supported by our website settings, we also recognize browser-based opt-out preference signals, such as Global Privacy Control, for the browser or device sending the signal.

We do not knowingly sell or share the personal information of individuals under 16 years of age.

7. Marketing Communications

We may send promotional emails or text messages only when you have consented or when otherwise permitted by applicable law.

You can unsubscribe from marketing emails by selecting the unsubscribe link included in the message. If SMS marketing is offered, you may opt out by following the instructions included in the message, such as replying STOP.

Opting out of marketing does not prevent us from sending necessary transactional communications, including:

• Order confirmations;
• Payment notices;
• Shipping updates;
• Subscription notices;
• Account-security messages; and
• Responses to customer-service requests.

8. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide products and services;
• Complete and document transactions;
• Maintain customer accounts and subscriptions;
• Comply with tax, accounting, legal, and regulatory requirements;
• Resolve disputes;
• Prevent fraud and abuse; and
• Enforce our agreements.

Retention periods depend on the type of information, why it was collected, applicable legal requirements, and whether it is needed to establish or defend legal claims.

When information is no longer reasonably necessary, we may delete, de-identify, or securely dispose of it.

9. Data Security

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information.

Nevertheless, no website, transmission method, or storage system can be guaranteed completely secure. You are responsible for maintaining the confidentiality of your account credentials and notifying us if you believe your account or information has been compromised.

10. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Confirm whether we process your personal information;
• Access personal information we maintain about you;
• Correct inaccurate personal information;
• Request deletion of personal information;
• Obtain a portable copy of certain information;
• Opt out of the sale or sharing of personal information;
• Opt out of targeted advertising;
• Withdraw consent when processing is based on consent;
• Limit certain uses of sensitive personal information;
• Appeal a decision concerning a privacy request; and
• Receive equal service without unlawful discrimination for exercising a privacy right.

To submit a privacy request, contact us using the information in the Contact Us section below and clearly identify the right you wish to exercise.

We may need to verify your identity before completing a request. Verification may require confirming information associated with your account or order. We will use verification information only to process and document the request.

You may use an authorized agent where permitted by law. We may request evidence that the agent is authorized to act for you or ask you to verify your identity directly.

If we deny a request, you may appeal by contacting us again and stating that you are submitting a privacy appeal.

Some information may be retained or excluded from a request when permitted or required by law, including information necessary to complete transactions, maintain legally required records, prevent fraud, protect security, or establish legal claims.

11. Children and Age Restrictions

The Aqua Vera website and products are intended only for adults who are at least 21 years old.

We do not knowingly collect personal information from children. If you believe that a child has provided personal information to us, contact us so we can investigate and take appropriate action.

12. International Processing

Aqua Vera is based in the United States. Shopify and other service providers may process information in the United States, Canada, and other countries where they operate.

The privacy and data-protection laws of those countries may differ from the laws where you live. Where required, appropriate safeguards will be used for international transfers.

13. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We do not control and are not responsible for the privacy, security, content, or practices of those third parties. Review the privacy policy of any third-party website before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, services, technology, legal requirements, or service providers.

The revised policy will be posted on this page with an updated “Last updated” date. When required by law, we will provide additional notice or obtain consent before a material change takes effect.

15. Contact Us

For privacy questions or to exercise a privacy right, contact Aqua Vera through our Contact Us form or at:

Email: {{ shop.email }}
Website: {{ shop.url }}

Please include Privacy Request in your message and provide enough information for us to identify your account or order. Do not submit unnecessary sensitive information.