Privacy policy

Rivia ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, create an account, subscribe to communications, or make a purchase.

By using our services, you agree to the practices described in this policy. If you do not agree, please discontinue use of our website and services.

We collect information you provide directly, information collected automatically when you use our site, and information from third parties where permitted.

• Contact details: name, email address, phone number, and shipping or billing address
• Account information: login credentials, order history, and saved preferences
• Transaction data: items purchased, payment method type, and order confirmations (payment card details are processed by our payment providers and are not stored by Rivia)
• Communications: messages you send to customer support, survey responses, and newsletter preferences
• Device and usage data: IP address, browser type, pages viewed, referring URLs, and general location derived from IP
• Cookies and similar technologies: see our Cookie Policy for details

• Process and fulfill orders, including payment, shipping, returns, and customer support
• Create and manage your account
• Send transactional emails such as order confirmations, shipping updates, and service notices
• Send marketing communications where you have opted in, and personalize your experience
• Improve our website, products, and services through analytics and research
• Detect, prevent, and address fraud, security issues, and legal compliance
• Comply with applicable laws, regulations, and lawful requests

Where required by applicable law, we process personal information on one or more of the following bases: performance of a contract (for example, fulfilling your order), your consent (for example, marketing emails), our legitimate interests (for example, site security and product improvement, balanced against your rights), and compliance with legal obligations.

We do not sell your personal information. We share information only as described below and with partners who are contractually required to protect it.

• Service providers: payment processors, shipping carriers, email platforms, analytics providers, and hosting services
• Business partners: only where necessary to deliver a service you have requested
• Legal and safety: when required by law, court order, or to protect the rights, property, or safety of Rivia, our customers, or others
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection of your information

We use trusted third-party service providers to operate our website, process payments, fulfill orders, and support customer communications. Under applicable law — including the GDPR — these providers act as data processors when they handle personal information on our behalf. We require them to process data only according to our instructions, implement appropriate security measures, and enter into data processing agreements where required.

Our core categories of processors and subprocessors include:

• Hosting and infrastructure: website hosting, content delivery, and security services (for example, our cloud hosting provider)
• Payments: payment processors and fraud-prevention services that handle transaction data
• Fulfillment and logistics: shipping carriers and warehouse partners that deliver your orders
• Communications: email and customer-support platforms used for transactional messages and, where you opt in, marketing
• Analytics and advertising: measurement and marketing partners that receive limited data when you consent to non-essential cookies

We may update the specific companies within these categories as our business evolves. When we add a new processor that materially affects how your information is handled, we will update this policy or provide notice where required by law.

We use cookies and similar technologies to operate our website, remember your preferences, measure performance, and support marketing where permitted. You can manage cookie preferences through your browser settings and, where available, our Your Privacy Choices page.

Disabling certain cookies may affect site functionality, including checkout and account features.

We retain personal information for as long as necessary to fulfill the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. Order and account records are typically retained for the period required by applicable tax and consumer protection laws.

When information is no longer needed, we delete or anonymize it in accordance with our retention practices.

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to restrict or object to certain processing, and to withdraw consent where processing is consent-based.

To exercise these rights, contact us using the details below. We may need to verify your identity before responding. You may also unsubscribe from marketing emails at any time using the link in our messages.

• California residents: rights under the CCPA/CPRA may include knowing what personal information is collected, requesting deletion, and opting out of certain sharing. We do not sell personal information as defined by California law.
• EEA and UK residents: rights under the GDPR and UK GDPR may include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent; you may also lodge a complaint with your local supervisory authority

Rivia is based in the United States. If you access our services from the European Economic Area, the United Kingdom, or elsewhere outside the U.S., your personal information may be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate. These locations may not provide the same level of data protection as your home country.

When we transfer personal information from the EEA, UK, or Switzerland to countries that have not received an adequacy decision, we rely on appropriate safeguards as required by applicable law. These may include the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement or Addendum, and supplementary measures where appropriate.

Our service providers are contractually required to protect personal information and to use it only for the purposes we specify. You may contact us for more information about the safeguards we use for international transfers.

Our website and services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The revised policy will be posted on this page with an updated effective date. Material changes may also be communicated by email or a notice on our website where appropriate.

For privacy-related questions or requests, please contact us through our Contact page. We will respond within a reasonable timeframe and in accordance with applicable law.