Privacy policy

Last updated: October 2, 2025

Rivet-Lozano (“we,” “our,” or “us”) operates this online store and website, including all related information, content, features, tools, products, and services, in order to provide you, our customer, with a curated shopping experience (the “Services”).

Our Services are powered by Shopify, which enables us to process transactions, manage orders, and provide you with a seamless shopping journey.

This Privacy Policy explains how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services, or otherwise interact with us. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will prevail with respect to the collection, processing, and disclosure of personal information.

By accessing or using the Services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

Personal Information We Collect

When we refer to “personal information,” we mean information that identifies you or can reasonably be linked to you. Personal information does not include anonymized or de-identified information.

Depending on how you interact with our Services and applicable legal requirements, we may collect or process:

Contact details: name, billing/shipping address, phone number, and email address.
Payment and financial details: credit/debit card numbers, payment confirmations, transaction records.
Account information: username, password, preferences, settings, and security details.
Transaction history: items viewed, added to cart, added to wishlist, purchased, returned, exchanged, or cancelled.
Communications: information you provide when contacting us (e.g. customer support inquiries).
Device details: information about your browser, network, IP address, or other unique identifiers.
Usage data: information about your navigation and interaction with the Services.

Sources of Personal Information

We may collect personal information from:

Directly from you: when you create an account, place an order, contact us, or otherwise provide information.
Automatically: when you interact with the Services (via cookies, device details, or analytics tools).
Service providers: who enable payment processing, fulfillment, analytics, or customer support.
Business partners or third parties: in limited cases, to support marketing or customer experience.

How We Use Personal Information

Depending on your interaction with us, we may use personal information for:

Providing and improving the Services: including order processing, account management, payment handling, delivery, returns, and personalization.
Marketing and promotions: sending promotional emails, showing targeted ads, and offering personalized recommendations.
Security and fraud prevention: verifying accounts, detecting fraud, protecting public safety, and ensuring secure transactions.
Customer communications: responding to inquiries, providing support, and maintaining customer relationships.
Legal compliance: fulfilling regulatory requirements, responding to lawful requests, and enforcing our terms.

How We Share Personal Information

We may disclose personal information to third parties under the following circumstances:

With Shopify and service providers (e.g. payment processors, shipping providers, cloud storage, IT support).
With marketing and business partners, for advertising or promotional purposes (in compliance with applicable privacy laws).
With affiliates, within the Rivet-Lozano corporate group.
When legally required, such as to comply with law enforcement or regulatory requests.
During business transactions, such as mergers, acquisitions, or reorganizations.
With your consent, including when using integrations like social logins or widgets.

Shopify Relationship

Our store is hosted on Shopify, which processes personal information to help us operate, grow, and improve our Services. Shopify may use aggregated data across its network of merchants to provide enhanced features.

In certain circumstances, Shopify acts as the data controller for this processing. For details on how Shopify handles your personal information and your rights, please review the Shopify Privacy Policy and the Shopify Privacy Portal.

Third-Party Websites and Links

Our Services may link to third-party websites or platforms. We are not responsible for the privacy, accuracy, or security of information provided on such platforms. We encourage you to review the privacy policies of any third-party sites you visit.

Children’s Privacy

Our Services are not intended for children under the age of majority in your jurisdiction. We do not knowingly collect personal information from individuals under this age. If you believe your child has provided personal information, please contact us so we can delete it.

Security and Data Retention

We implement reasonable technical and organizational measures to protect your personal information. However, no system is completely secure.

We retain personal information for as long as necessary to fulfill the purposes described in this policy, including to provide Services, comply with legal obligations, resolve disputes, and enforce agreements.

Your Rights

Depending on your location, you may have rights over your personal information, including:

Right to access/know
Right to correct inaccuracies
Right to delete
Right to data portability
Right to restrict or object to processing
Right to withdraw consent (where processing is based on consent)
Right to manage communication preferences

If you are based in the UK or EEA, you may also have the right to lodge a complaint with your local data protection authority.

You may exercise these rights by contacting us (see “Contact” below). We may verify your identity before processing your request.

International Transfers

We may transfer and process your personal information outside your country of residence. Where required, we rely on lawful mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent safeguards.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or regulatory changes. Updates will be posted here with a revised “Last updated” date.