Privacy policy

1. About This Privacy Policy

Ivyval (“we,” “us,” or “our”) operates www.ivyval.net, including its online store, related content, features, and customer services (the “Services”).

Ivyval is a UK-based online retailer serving customers in the United States. Our store is powered by Shopify.

This Privacy Policy explains how personal information is collected, used, disclosed, and retained when you browse our website, place an order, create an account, contact us, or otherwise interact with the Services. It also explains your privacy choices and the rights you may have.

For processing purposes we determine, Ivyval acts as the data controller or equivalent business under applicable privacy law. Shopify and certain other providers may separately determine how they process information for their own services.

If this Privacy Policy conflicts with our Terms of Service concerning the handling of personal information, this Privacy Policy governs that issue.

Using our website does not, by itself, constitute consent to processing that requires your separate consent.

2. Personal Information We Collect

The information collected depends on how you interact with our store and which features you use.

Contact and delivery information

Your name, email address, telephone number, billing address, and shipping address.

Order and transaction information

Products purchased, order numbers, payment status, transaction amounts, shipping details, and records of cancellations, returns, exchanges, and refunds.

Payment information

Payment information is processed through Shopify and the payment providers available at checkout. Depending on the payment method, we receive transaction details such as payment status, payment type, and limited card information needed to manage your order.

Full payment credentials may be collected directly by the relevant payment provider. Please do not send full card numbers, card security codes, passwords, or authentication codes by email.

Account information

If you create an account, information associated with your account, including contact details, preferences, and order history. Authentication information may be handled by Shopify or the relevant login provider.

Customer communications

Messages, inquiries, complaints, and other information you provide to us. This may include photos supplied to help resolve a damaged, defective, or incorrect product claim.

Device and browsing information

IP address, approximate location inferred from IP address, browser type, device information, cookie identifiers, pages viewed, interactions with our website, and referring links.

Preferences and submitted content

Marketing preferences, privacy choices, product reviews, and other content you choose to submit.

3. Sources of Personal Information

We collect information:

  • Directly from you when you shop, create an account, submit information, or contact us.
  • Automatically through cookies, pixels, server logs, and similar technologies when you use the Services.
  • From Shopify and providers supporting payments, fraud prevention, website operation, customer support, shipping, and returns.
  • From advertising and analytics partners where those services are used, subject to applicable privacy choices and consent requirements.

4. How We Use Personal Information

We use personal information for the following purposes:

Providing our store and fulfilling orders

To process payments, confirm purchases, arrange United States delivery, provide tracking, manage accounts, and handle cancellations, returns, exchanges, and refunds.

Customer service

To answer questions, investigate delivery or product issues, resolve complaints, and communicate about your purchases.

Website operation and improvement

To maintain website functionality, remember relevant preferences, understand how the store is used, troubleshoot problems, and improve the shopping experience.

Security and fraud prevention

To verify transactions, identify suspicious activity, prevent unauthorized access, and protect customers, our business, and service providers.

Marketing and advertising

To send promotional communications where permitted and to support advertising, campaign measurement, and relevant product recommendations where these features are used.

Advertising technologies may process information about browsing and shopping activity across websites or services. These uses are subject to applicable consent requirements and opt-out rights.

Legal and business administration

To maintain required accounting and transaction records, comply with legal obligations, respond to valid legal requests, resolve disputes, and establish or defend legal claims.

5. Legal Bases for Processing

Where UK or European data protection law applies, we rely on an appropriate legal basis for each processing purpose:

  • Contract: Processing necessary to take steps at your request before a purchase or to fulfill our contract with you, including payment, delivery, and return administration.
  • Legal obligation: Processing necessary to meet applicable tax, accounting, consumer protection, or other legal requirements.
  • Legitimate interests: Processing necessary to operate, secure, and improve our business, prevent fraud, and respond to inquiries, where those interests are not overridden by your rights.
  • Consent: Processing requiring your permission, including certain marketing communications and non-essential cookies or similar technologies.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Some information is necessary to process an order or respond to a request. If you do not provide it, we may be unable to complete that transaction or provide the requested service.

6. How We Disclose Personal Information

We disclose relevant information to the following categories of recipients where needed for the purposes described above:

Shopify and technology providers

Providers supporting our online store, hosting, communications, security, and other operational functions.

Payment providers

Providers processing payments, refunds, authentication, and related fraud checks.

United States fulfillment and delivery providers

Warehouses, logistics providers, and carriers receive information needed to prepare and deliver orders.

For returns and exchanges, the assigned United States return warehouse may receive relevant order, contact, and return information. Different products may be handled by different warehouses.

Analytics and advertising partners

Where these services are used, partners may receive identifiers, browsing activity, purchase events, and related information for analytics, advertising, or campaign measurement, subject to applicable requirements and privacy choices.

Professional advisers and authorities

Accountants, legal advisers, regulators, courts, law enforcement, and other recipients where disclosure is reasonably necessary or legally required.

Business transaction participants

If our business undergoes a merger, acquisition, restructuring, or sale, information may be disclosed to relevant parties with appropriate safeguards and any legally required notice.

Recipients you authorize

Other parties where you request or authorize the disclosure.

7. Shopify’s Role

Our store is hosted by Shopify. Shopify processes information about your access to and use of the store to provide services such as checkout, payment-related functionality, security, and hosting.

Depending on the features enabled and your interactions, Shopify may also process information for purposes it determines independently, including improving its services, fraud prevention, and personalized shopping or advertising features.

Where Shopify Network Intelligence or other enhanced features are enabled, Shopify may process information from interactions with our store together with information from other merchants and Shopify services, subject to applicable settings and privacy choices.

For information about Shopify’s practices and rights relating to processing for which Shopify is responsible, see:

Requests concerning Ivyval’s handling of your information may be sent to hello@ivyval.com.

8. Cookies and Similar Technologies

Our website and its service providers use cookies and similar technologies for purposes that may include:

  • Maintaining shopping carts, checkout, and account sessions.
  • Security and fraud prevention.
  • Remembering preferences.
  • Understanding website performance and usage.
  • Supporting advertising and measuring campaigns where enabled.

Where consent is required, non-essential technologies are used only after the required consent has been obtained.

You can manage available choices through the website’s privacy or cookie controls. You can also manage cookies through your browser settings. Blocking certain cookies may affect website functionality.

Cookie controls and browser settings may apply only to the browser or device you use. You may need to update your preferences on other devices or after clearing cookies.

9. Advertising, Sale or Sharing, and Opt-Out Choices

Disclosures to advertising partners can qualify as a “sale,” “sharing,” or processing for “targeted advertising” under certain United States privacy laws, even where no money is exchanged.

Where applicable, you may opt out through our Data Sharing Opt-Out page or contact hello@ivyval.com for assistance.

We honor legally recognized opt-out preference signals, including Global Privacy Control (GPC), where required by applicable law. Such signals generally apply to the browser or device transmitting them. Where supported and associated with an identifiable account, the preference may also be applied to that account.

Other browser “Do Not Track” signals may not produce the same result as GPC or a request submitted through our privacy controls.

Opting out of targeted advertising does not necessarily stop all advertising. It restricts relevant uses of your information for personalized advertising.

10. Marketing Communications

You can unsubscribe from promotional emails using the unsubscribe link in those emails or by contacting hello@ivyval.com.

Unsubscribing from marketing does not stop necessary service communications, including order confirmations, delivery updates, refund notifications, and security messages.

If additional marketing channels are offered, applicable consent requirements and opt-out instructions will be provided for those channels.

11. International Data Transfers

Although orders are dispatched from United States locations, Ivyval is based in the United Kingdom and uses Shopify and other service providers operating internationally.

Your information may therefore be accessed, stored, or processed in the United Kingdom, the United States, and other countries where relevant providers operate. Privacy laws in those countries may differ from those in your place of residence.

Where applicable law requires safeguards for international transfers, we use or require an appropriate transfer mechanism, such as an adequacy decision, approved standard contractual clauses, a UK International Data Transfer Agreement or Addendum, or another legally permitted mechanism.

You may contact us for further information about safeguards relevant to your personal information.

12. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including applicable legal requirements.

Retention periods depend on factors such as:

  • Whether an account or customer relationship remains active.
  • Whether information is needed to fulfill an order or resolve a return, complaint, or dispute.
  • Applicable tax, accounting, and recordkeeping obligations.
  • Security and fraud prevention needs.
  • Applicable limitation periods and legal claims.

When information is no longer required, we delete it, anonymize it, or otherwise handle it according to applicable law.

A deletion request may not require us to remove information that we must lawfully retain. Where relevant, we will explain applicable exceptions.

13. Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or disclosure.

No website, transmission method, or storage system can be guaranteed completely secure.

Please protect your account credentials and avoid sending sensitive financial or identity information through ordinary email. If verification is necessary, we will explain what information is needed and how to provide it.

14. Children’s Privacy

Our store and online purchasing services are intended for adults. Although some products may be purchased for children, the Services are not directed to children under 13, and we do not knowingly collect their personal information.

If you believe a child has provided personal information without appropriate authorization, contact hello@ivyval.com so we can investigate and take appropriate action.

We do not knowingly sell or share personal information of children under 16 for targeted advertising.

15. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

  • Access or obtain information about personal information we process.
  • Request correction of inaccurate information.
  • Request deletion of personal information.
  • Obtain a portable copy of certain information.
  • Object to or restrict certain processing.
  • Withdraw consent where processing relies on consent.
  • Opt out of applicable sale, sharing, or targeted advertising.
  • Request applicable protections concerning solely automated decisions that produce legal or similarly significant effects.
  • Appeal a decision concerning a privacy request where that right applies.
  • Complain to a relevant privacy regulator.

These rights are subject to applicable conditions and exceptions. We will not unlawfully discriminate against you for exercising them.

16. How to Submit a Privacy Request

Email hello@ivyval.com and describe the right you wish to exercise.

We may request information reasonably necessary to verify your identity and locate relevant records. Please do not send passwords, full card numbers, or unnecessary identity documents with your initial request.

Where permitted by law, an authorized agent may submit a request on your behalf. We may need evidence of authorization and appropriate identity verification.

We will respond within the period required by applicable law. If an extension or exception applies, we will explain it where required.

To appeal a decision where applicable, reply to our response or email us with the subject “Privacy Request Appeal.”

17. Complaints

Please contact hello@ivyval.com if you have concerns about how your information is handled.

You may also complain to the relevant supervisory or regulatory authority without first contacting us.

For UK data protection concerns, the relevant authority is the Information Commissioner’s Office (ICO). Depending on your residence, you may also have rights to contact a local data protection authority, state attorney general, or other privacy regulator.

18. Third-Party Websites and Public Content

Our website may link to third-party websites or services. Their privacy practices are governed by their own notices.

If you submit a review or other content for public display, information included in that submission may become visible to others. Please avoid including private contact, payment, or other sensitive information in public submissions.

19. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices, services, or legal requirements.

We will publish the updated version on this page and revise the “Last Updated” date. Where required by law, we will provide additional notice or obtain consent before implementing relevant changes.

20. Contact Information

For privacy questions, requests, or complaints, please contact:

Store Name: Ivyval
Email: hello@ivyval.com
Phone: +44 1264 310780
Website: www.ivyval.net

Business Contact Address:
Pennings Road
Tidworth
SP9 7LB
United Kingdom

Customer Service Hours:
Monday–Friday, 9:00 AM–6:00 PM
United Kingdom local time — Europe/London
GMT (UTC+0) in winter and BST (UTC+1) in summer.

Messages received outside these hours will be reviewed during customer service hours.