Privacy Policy

1. About This Privacy Policy

kelivireo(hereinafter referred to as “I”) respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how I collect, use, disclose, retain, and protect personal information when you visit the website, browse products, place an order, make a payment, contact customer support, or otherwise use the online shopping services.

This policy describes the categories of personal information processed, the purposes of processing, the categories of recipients that may receive information, applicable retention practices, and the privacy rights available to you. It applies to information processed in connection with this website, subject to applicable privacy laws.

Certain rights and obligations depend on where you live and which privacy laws apply to the processing. Where applicable, this includes rights under United States state privacy laws and the General Data Protection Regulation (GDPR).

2. Personal Information I Collect

The information collected depends on how you interact with the website and the services you use.

Information you provide directly may include:

Contact and identity information, such as your name, email address, telephone number, billing address, and shipping address.

Order information, such as products purchased, order numbers, order history, delivery instructions, and information about cancellations, returns, exchanges, or refunds.

Customer service information, such as messages, questions, product concerns, delivery inquiries, and other communications you send to me.

Payment-related information, such as payment status, transaction references, billing details, and information needed to confirm or reconcile a payment. Payment card details may be collected and processed directly by the payment provider used at checkout, depending on the payment method and checkout configuration.

Information collected through website use may include:

Technical information, such as IP address, browser type, device type, operating system, language settings, and related technical identifiers.

Usage information, such as pages viewed, products browsed, links clicked, shopping cart activity, and interactions with website features.

Cookie and similar technology information, including consent preferences and identifiers used for essential website functions or optional analytics and advertising technologies, where enabled.

Approximate location information inferred from technical data, such as an IP address, where necessary for security, service operation, or relevant website functions.

I do not intentionally collect more personal information than is reasonably necessary for the purposes described in this policy. Please avoid including sensitive personal information in customer service messages unless it is necessary to resolve your request.

3. How I Use Personal Information

I may use personal information for the following purposes:

Order management and fulfillment: To receive and process orders, confirm transaction details, arrange shipping, provide order updates, and manage cancellations, returns, exchanges, and refunds.

Payment processing: To facilitate payment authorization, confirm payment status, reconcile transactions, and address payment-related issues.

Customer support: To respond to inquiries, investigate delivery problems, review product concerns, and communicate with you about your purchase.

Website operation: To maintain website functionality, support shopping cart and checkout features, troubleshoot technical issues, and improve the shopping experience.

Security and fraud prevention: To detect suspicious activity, reduce unauthorized transactions, protect order information, and investigate potential misuse.

Business administration: To maintain appropriate transaction records and meet applicable tax, accounting, bookkeeping, and recordkeeping obligations.

Analytics and performance measurement: Where the relevant tools are enabled and permitted, to understand website usage, measure performance, and identify opportunities to improve the website.

Marketing communications: To send newsletters or promotional communications where permitted by law and, when required, after obtaining your consent. You may opt out of marketing emails using the unsubscribe instructions provided or contact me directly.

Legal claims and compliance: To establish, exercise, or defend legal claims, respond to valid legal requests, and comply with applicable obligations.

I will not use personal information for materially different purposes without an appropriate legal basis and any notice or consent required by applicable law.

4. Cookies and Similar Technologies

The website may use cookies, pixels, tags, and similar technologies to support essential website functions, remember preferences, measure website performance, and, where enabled, support analytics or advertising.

Essential technologies may be used to maintain shopping cart contents, support checkout, protect website security, and remember necessary session information. Optional analytics, personalization, or advertising technologies may collect information about browsing activity and interactions with the website.

Where applicable law requires consent for non-essential cookies or similar technologies, I will seek consent before activating them. You can manage your choices through the website's cookie consent settings, where available, and can also use your browser settings to block or delete cookies. Blocking essential cookies may prevent some website features, including shopping cart or checkout functions, from working properly.

If analytics or advertising technologies are enabled, the relevant providers may receive information such as online identifiers, device or browser details, IP address, and browsing activity. Depending on the provider, the processing may constitute sharing or targeted advertising under certain United States state privacy laws. Where applicable, you may have the right to opt out of such processing through available privacy settings or by contacting me.

Deleting cookies through your browser may not remove a consent record stored separately. You can update your choices through the website's consent controls, where available.

5. Categories of Recipients and Information Disclosures

I may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this policy. The specific recipients depend on the services and technologies enabled for your transaction and website visit.

1. E-commerce and website hosting providers. Providers that host, maintain, secure, or support the online store may process technical information, website activity, contact details, order details, and related records as necessary to operate the website and provide its functions.

2. Payment processors and payment service providers. Providers involved in checkout, payment authorization, transaction processing, fraud screening, and refunds may receive payment-related information, billing details, order totals, transaction references, and other information needed to process a payment. The payment provider used for a particular transaction may vary according to the checkout options available.

3. Shipping carriers and fulfillment providers. Carriers, delivery services, and fulfillment providers may receive your name, shipping address, telephone number where needed, order details, and delivery instructions to prepare, transport, and deliver your purchase or investigate delivery issues.

4. Customer service and communications providers. Providers that support email, customer inquiries, order notifications, or related communications may process your contact details, order information, and message contents to help deliver customer service.

5. Analytics and website performance providers. If analytics tools are enabled, providers may receive technical identifiers, device and browser information, IP address, and website interaction data to measure performance, diagnose problems, and understand visitor activity.

6. Advertising and marketing providers. If advertising or marketing tools are enabled, providers may receive contact details, online identifiers, cookie data, or browsing activity to deliver or measure marketing communications and advertising, subject to applicable consent and opt-out requirements. I do not represent that such providers are used unless the relevant tools are configured for the website.

7. Professional advisers and business service providers. Accountants, legal advisers, auditors, insurers, and other professional service providers may receive information when reasonably necessary to provide their services, maintain records, or address legal or business matters.

8. Government authorities, regulators, and legal recipients. Personal information may be disclosed to courts, law enforcement agencies, regulators, or other authorities where required by law, in response to valid legal process, or when reasonably necessary to protect rights, safety, and property.

9. Business transaction participants. If a merger, acquisition, restructuring, financing, or sale of business assets is considered or completed, information may be disclosed to relevant advisers or transaction participants subject to appropriate confidentiality and legal requirements.

I do not disclose personal information to unrelated third parties merely because I have collected it. Where a service provider processes information on my behalf, the information disclosed should be limited to what is reasonably necessary for the relevant service. Certain providers may process information under their own privacy policies when acting independently, including payment providers handling transactions.

The exact legal entities receiving personal information depend on the services enabled and used at the time of your interaction. This policy identifies recipient categories rather than claiming that every category is used for every order. I will update this disclosure if material changes to the website's data flows require a change to this policy.

6. Sale, Sharing, and Targeted Advertising

I do not sell personal information for money as a business practice.

Some United States state privacy laws define “sale,” “sharing,” or “targeted advertising” more broadly than an exchange for money. If analytics or advertising technologies are enabled and disclose personal information to third parties for cross-context behavioral advertising or similar purposes, those activities may be covered by these definitions even when no money is exchanged directly for the information.

Where applicable law provides an opt-out right, you may exercise it through the website's available privacy controls, where provided, or by contacting me using the details in this policy. If a recognized browser-based opt-out preference signal is supported and legally required, I will process it as required by applicable law.

I will not knowingly sell or share the personal information of consumers under 16 in a manner prohibited by applicable law. Where consent or authorization is required for certain data-sharing practices, I will obtain it before carrying out the relevant activity.

7. Data Retention

I retain personal information only for as long as reasonably necessary to fulfill the purposes described in this policy, unless a longer period is required or permitted by applicable law.

Retention periods depend on the type of information and why it is collected. For example:

Order and transaction records may be retained for customer service, returns, refunds, accounting, tax, fraud prevention, and recordkeeping purposes.

Customer service communications may be retained for as long as needed to resolve inquiries, document relevant decisions, and address potential disputes.

Technical logs and security records may be retained for a period appropriate to maintaining website security, investigating suspicious activity, and diagnosing technical issues.

Cookie and analytics data may be retained according to the settings and retention periods of the relevant technology and provider.

Marketing contact details may be retained while you remain subscribed or until they are no longer needed for the relevant purpose, subject to any required suppression records used to honor opt-out requests.

When information is no longer required and no applicable legal obligation or other valid basis requires retention, I will take reasonable steps to delete it, de-identify it, or otherwise remove it from active use.

If you request deletion, I will assess the request under applicable law. Some information may need to be retained to complete a transaction, comply with legal obligations, prevent fraud, or establish, exercise, or defend legal claims.

8. Legal Bases for Processing Under the GDPR

Where the GDPR applies, I process personal data on one or more of the following legal bases, depending on the purpose and circumstances:

Performance of a contract. Processing necessary to enter into or perform a purchase contract, including managing orders, confirming payment, arranging delivery, and handling cancellations, returns, exchanges, and refunds.

Legal obligations. Processing necessary to comply with applicable tax, accounting, recordkeeping, or other legal obligations.

Legitimate interests. Processing necessary for legitimate interests such as maintaining website security, preventing fraud, managing customer service, improving website functionality, and protecting legal rights, provided those interests are not overridden by your rights and freedoms.

Consent. Processing based on your consent where consent is required, such as certain non-essential cookies, optional marketing communications, or other consent-based activities. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Legal claims and vital interests, where applicable. Processing may be necessary to establish, exercise, or defend legal claims or to protect vital interests in circumstances recognized by applicable law.

Where required, I will provide information about the applicable legal basis for a particular processing activity when responding to a privacy request.

9. Your Privacy Rights

The rights available to you depend on your location, the applicable law, and the circumstances of the processing.

9.1 Rights Under the GDPR

Where the GDPR applies, you may have the right to:

Access personal data and obtain information about how it is processed.

Correct inaccurate personal data or complete incomplete data.

Request deletion of personal data where the applicable conditions are met.

Restrict processing in circumstances provided for by the GDPR.

Receive personal data you provided in a structured, commonly used, machine-readable format and, where legally applicable and technically feasible, transmit it to another controller.

Object to processing based on legitimate interests on grounds relating to your particular situation.

Object at any time to the processing of personal data for direct marketing.

Withdraw consent where processing is based on consent.

Lodge a complaint with a competent data protection supervisory authority, particularly in the EU or EEA country where you live, work, or believe an infringement occurred.

Not be subject to a decision based solely on automated processing, including profiling, where the GDPR's applicable conditions and protections apply.

These rights are subject to legal conditions and exceptions. For example, some information may need to be retained to comply with legal obligations or to establish, exercise, or defend legal claims.

9.2 Rights Under Applicable United States State Privacy Laws

Depending on your state of residence and the applicable law, you may have rights to:

Know or access the categories and specific pieces of personal information collected about you.

Receive information about the categories of sources from which personal information is collected, the purposes for collecting or using it, and the categories of third parties to whom it is disclosed.

Request correction of inaccurate personal information.

Request deletion of personal information, subject to applicable exceptions.

Obtain a portable copy of certain personal information in a usable format, where required by law.

Opt out of the sale of personal information, sharing for cross-context behavioral advertising, or targeted advertising, where these activities are covered by applicable law.

Limit certain uses or disclosures of sensitive personal information, where applicable.

Appeal a decision not to act on a privacy request, where an appeal right is provided by law.

Not be discriminated against for exercising privacy rights protected by applicable law.

The availability and scope of these rights vary by state and may depend on statutory thresholds, exemptions, and the type of information involved. I will assess requests under the laws applicable to the request rather than assume that every right applies in every state.

9.3 How to Submit a Privacy Request

To exercise a privacy right, contact me using the information in the final section of this policy. Please describe the request and provide enough information to help me identify the relevant records.

I may request additional information reasonably necessary to verify your identity or authority to act on another person's behalf. I will not require more information than is reasonably necessary for verification and will respond within the time limits required by applicable law.

Where permitted, an authorized agent may submit a request on your behalf. I may require proof of the agent's authorization and may need to verify your identity directly.

If I decline to act on a request, I will provide an explanation where required by applicable law and information about any available appeal process. You may also contact the relevant privacy regulator or supervisory authority where the law provides that option.

10. International Data Transfers

I operate this online store from the United States. Depending on the website services and providers used, personal information may be accessed or processed in the United States and in other countries where relevant service providers, their affiliates, or their infrastructure operate.

The categories of recipients described in Section 5 may include website hosting and e-commerce providers, payment processors, shipping and fulfillment providers, customer communications providers, analytics or advertising providers where enabled, and professional service providers. The countries in which these recipients process information depend on the specific provider, service configuration, and transaction. I do not have a verified, complete list of every recipient's processing location based solely on the information currently available for this policy, so I do not claim that transfers to any particular country or that a specific transfer mechanism applies to every recipient.

Where personal data subject to the GDPR is transferred from the European Economic Area to a country outside the EEA, I will assess the applicable transfer requirements and use a legally recognized transfer mechanism where required. Depending on the circumstances, this may include:

An adequacy decision adopted by the European Commission for the destination country or recipient, where the transfer falls within its scope.

Standard Contractual Clauses approved by the European Commission, where appropriate, together with any supplementary measures required following an assessment of the transfer.

Another permitted GDPR transfer mechanism or derogation, where its specific legal conditions are met.

A transfer mechanism will be identified according to the actual recipient, destination, and processing arrangement. I will not treat an adequacy decision, Standard Contractual Clauses, or a derogation as applicable to a transfer unless the relevant conditions are satisfied.

Where required, I will provide additional information about the applicable transfer mechanism and safeguards, including how to obtain a copy of relevant safeguards, subject to lawful restrictions. You may submit such a request using the contact details in this policy.

For United States privacy purposes, international processing does not remove any rights you may have under applicable state privacy laws. Personal information remains subject to the protections and requirements that apply to the relevant processing activity.

11. Data Security

I use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Depending on the service and processing activity, measures may include restricting access according to business needs, using service providers with relevant security controls, maintaining appropriate records, and reviewing procedures when security concerns arise.

No method of electronic transmission or storage can be guaranteed to be completely secure. If a personal data breach occurs and notification is required, I will take the actions required by applicable law, including notifying affected individuals or the relevant regulator where necessary.

You can help protect your information by providing accurate contact details, keeping any account credentials confidential, and contacting me if you suspect that information associated with your order has been misused.

12. Children's Privacy

The website is intended for general shopping use and is not directed to children under 13. I do not knowingly collect personal information online from children under 13 without the verifiable parental consent required by applicable law.

If you believe a child has provided personal information in circumstances that require parental consent or other safeguards, please contact me. I will review the matter and take appropriate steps in accordance with applicable requirements.

Where other laws impose additional protections for minors, I will follow those requirements when they apply.

13. Third-Party Websites and Services

The website may contain links to third-party websites or may use third-party services to support checkout, payment, delivery, analytics, or communications. When you interact directly with a third-party website or service, that provider may process information under its own privacy policy and terms.

I am not responsible for the independent privacy practices of third parties outside my control. I encourage you to review the relevant provider's privacy information before submitting information directly to that provider.

Where a provider processes personal information on my behalf, its processing should be governed by the applicable service arrangement and privacy requirements.

14. Changes to This Privacy Policy

I may update this Privacy Policy to reflect changes in website functionality, service providers, data-processing practices, or applicable privacy requirements.

The revised policy will be published on this page, with an updated effective date where appropriate. If a material change requires additional notice or consent under applicable law, I will take the required steps before implementing the relevant processing.

I encourage you to review this page periodically to remain informed about how personal information is handled.

15. Contact and Privacy Requests

For questions about this Privacy Policy, requests concerning your personal information, or concerns about data handling, you may contact me using the following details.

Address: 3437 City Terrace Dr #D, Los Angeles, CA 90063, United States

Phone: +1 (323) 684-7291

Email: assist@kelivireo.com

Opening hours: Monday to Friday, from 9:00 AM to 6:00 PM (EST)

When submitting a privacy request, please describe the information or processing activity concerned and include relevant order details where appropriate. I will review your request and respond in accordance with the applicable requirements.