PRIVACY POLICY

Last updated: October 5, 2026

Tolavia operates this store and website, including the information, content, features, tools, products, and services provided to offer you, the customer, a curated shopping experience (the “Services”). Tolavia is powered by Shopify, which enables us to provide the Services.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services, or when you otherwise communicate with us.

If there is any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will prevail with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information is collected, used, and disclosed.

PERSONAL INFORMATION WE COLLECT OR PROCESS

When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you or another person.

Personal information does not include information collected anonymously or information that has been de-identified so that it cannot reasonably identify or be linked to you.

Depending on how you interact with the Services, where you live, and what applicable law permits or requires, we may collect or process the following categories of personal information, including inferences derived from such information:

• Contact details, including your name, address, billing address, shipping address, phone number, and email address.
• Financial information, including credit card numbers, debit card numbers, financial account information, payment card details, transaction details, payment method, payment confirmation, and other payment-related information.
• Account information, including your username, password, security questions, preferences, and settings.
• Transaction information, including items you view, add to your cart, save to a wishlist, purchase, return, exchange, or cancel, as well as your previous transactions.
• Communications with us, including information you provide when contacting us, such as when submitting a customer service request.
• Device information, including information about your device, browser, network connection, IP address, and other unique identifiers.
• Usage information, including information about how and when you interact with, use, or browse the Services.

SOURCES OF PERSONAL INFORMATION

We may collect personal information from the following sources:

• Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with personal information.
• Automatically through the Services, including information from your device when you use our products or services or visit our websites, as well as through cookies and similar technologies.
• From our service providers, including when we engage them to provide certain technology or when they collect or process personal information on our behalf.
• From our business partners or other third parties.

HOW WE USE YOUR PERSONAL INFORMATION

Depending on how you interact with us or which Services you use, we may use your personal information for the following purposes:

Providing, Personalizing, and Improving the Services

We use your personal information to provide the Services, including performing our contract with you, processing payments, managing orders, remembering your preferences and products you are interested in, sending account-related notifications, processing purchases, returns, exchanges, or other transactions, creating and managing your account, arranging shipping, facilitating returns and exchanges, allowing you to post reviews, and providing a personalized shopping experience.

This may include using your personal information to personalize and improve the Services.

Marketing and Advertising

We may use your personal information for marketing and promotional purposes, including sending marketing, advertising, and promotional communications by email, text message, or postal mail, and displaying online advertisements for products or services on the Services or on other websites.

This advertising may be based on products you previously purchased, added to your cart, or other activities you performed through the Services.

Security and Fraud Prevention

We use your personal information to authenticate your account, provide a secure shopping and payment experience, detect, investigate, or respond to possible fraudulent, illegal, harmful, or malicious activity, protect public safety, and maintain the security of our Services.

If you create an account, you are responsible for keeping your login credentials confidential. We strongly recommend that you do not share your username, password, or other account information with anyone.

Communicating With You

We use your personal information to provide customer support, respond to your requests, provide Services effectively, and maintain our business relationship with you.

Legal Reasons

We may use your personal information to comply with applicable laws or respond to valid legal processes, including requests from law enforcement or government authorities.

We may also use information in connection with civil discovery, actual or potential litigation, or other legal proceedings, and to enforce or investigate possible violations of our terms or policies.

HOW WE DISCLOSE PERSONAL INFORMATION

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes consistent with this Privacy Policy, including:

• With Shopify, vendors, and other third parties that provide services on our behalf, such as IT management, payment processing, analytics, customer support, cloud storage, order management, and shipping.
• With business and marketing partners to provide marketing services and personalized advertising.
• When you direct, request, or otherwise consent to the disclosure of certain information to third parties, including for shipping products or through social media widgets or login integrations.
• With our affiliates or, where applicable, within our corporate group.
• In connection with a business transaction, such as a merger or insolvency proceeding.
• To comply with applicable legal obligations, including subpoenas, search warrants, or similar requests.
• To enforce our Terms of Service or other policies.
• To protect the Services, our rights, and the rights of our users or other persons.

Where applicable, you may have the right to opt out of certain uses of your personal information for targeted advertising or data sharing.

You may exercise these rights here:

https://tolavia.com/pages/data-sharing-opt-out

RELATIONSHIP WITH SHOPIFY

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services.

Information you submit to the Services may be transmitted to and shared with Shopify and third parties that may be located in countries other than the country where you reside.

We also use certain advanced Shopify features that may use information derived from your interactions with our store, other merchants, and Shopify's platform.

In these circumstances, Shopify may be responsible for processing certain personal information, including responding to requests to exercise rights relating to information used for those purposes.

For more information about how Shopify uses your personal information and the rights you may have, you can review Shopify's Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

You may also be able to exercise certain privacy rights through Shopify's privacy portal:

https://privacy.shopify.com/en

THIRD-PARTY WEBSITES AND LINKS

The Services may include links to websites or other online platforms operated by third parties.

If you follow links to websites that are not affiliated with or controlled by us, we recommend that you review their privacy and security policies and other applicable terms.

We do not guarantee and are not responsible for the privacy or security of third-party websites, including the accuracy, completeness, or reliability of information contained on such websites.

Information that you provide in public or semi-public areas, including information shared on third-party social media platforms, may also be visible to other users.

The inclusion of third-party links does not by itself imply endorsement of the content, owners, or operators of those websites unless expressly stated.

CHILDREN'S DATA

The Services are not intended for use by children, and we do not knowingly collect personal information from children who are considered minors under applicable law in their jurisdiction.

If you are a parent or legal guardian of a child who has provided us with personal information, you may contact us using the information below to request deletion of that information.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell,” as those terms may be defined under applicable law, personal information of individuals under the age of 16.

SECURITY AND RETENTION OF YOUR INFORMATION

Please note that no security measures are perfect or impenetrable, and we cannot guarantee absolute security.

Information you send to us may also not be fully secure while in transit. We recommend that you do not use unsecured channels to send us sensitive or confidential information.

The length of time we retain your personal information depends on various factors, including whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce agreements and policies.

YOUR RIGHTS AND CHOICES

Depending on where you live, you may have some or all of the following rights regarding your personal information.

These rights are not absolute and may apply only in certain circumstances.

Right of Access

You may have the right to request access to personal information we hold about you.

Right to Delete

You may have the right to request deletion of personal information we hold about you.

Right to Correct

You may have the right to request correction of inaccurate personal information we hold about you.

Right to Data Portability

You may have the right to receive a copy of personal information we hold about you and, in certain circumstances, request that we transfer it to a third party.

Right to Opt Out of Sale, Sharing, or Targeted Advertising

Depending on where you live, you may have the right to opt out of the “sale” or “sharing” of personal information, or processing of personal information for purposes considered “targeted advertising” under applicable privacy laws.

You may exercise those rights here:

https://tolavia.com/pages/data-sharing-opt-out

If you visit our website with a Global Privacy Control signal enabled, depending on your location, we may automatically treat the signal as an opt-out request for the browser and device you are using.

If we can associate the device sending the signal with a Shopify account, the opt-out request may also be applied to that account.

For more information about Global Privacy Control, visit:

https://globalprivacycontrol.org/

Except for Global Privacy Control signals, we do not currently recognize other “Do Not Track” signals that may be sent by your browser or device.

Communication Preferences

We may send you promotional emails.

You may opt out of receiving promotional emails at any time by using the unsubscribe option included in those emails.

Even if you opt out of marketing communications, we may continue to send you non-promotional communications relating to your account, purchases, or orders.

EXERCISING YOUR RIGHTS

You may exercise applicable privacy rights through the locations provided within the Services or by contacting us using the contact information below.

For more information about how Shopify uses personal information and the rights you may have relating to information processed by Shopify, you may visit:

https://privacy.shopify.com/en

We will not discriminate against you for exercising your privacy rights.

We may need to verify your identity before processing certain requests where permitted or required by applicable law.

You may also be permitted to designate an authorized agent to submit requests on your behalf.

Before accepting a request submitted by an authorized agent, we may require proof that you authorized the agent to act on your behalf, and we may also require you to verify your identity directly with us.

We will respond to valid requests within the timeframe required by applicable law.

COMPLAINTS

If you have a complaint regarding how we process your personal information, please contact us using the contact details below.

Depending on where you live, you may have the right to appeal our decision regarding a privacy request or submit a complaint to your local data protection authority.

INTERNATIONAL TRANSFERS

We may transfer, store, and process your personal information outside the country in which you reside.

Where we transfer personal information outside the European Economic Area (EEA) or the United Kingdom, we may rely on recognized transfer mechanisms, including the European Commission's Standard Contractual Clauses (SCCs), equivalent contractual mechanisms approved by UK authorities, or transfers to countries recognized as providing an adequate level of protection.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for operational, legal, or regulatory reasons.

We will publish the updated Privacy Policy on this website, update the “Last updated” date, and provide notice of material changes where required by applicable law.

CONTACT

If you have questions about our privacy practices or this Privacy Policy, or if you wish to exercise any applicable privacy rights, you may contact us at:

Tolavia
Email: contacto@tolavia.com
Address: Calle las Vistas 15, 35559, Las Palmas, Spain