1. Introduction

This policy explains how Rheakalo (“we”, “us”, “our”) collects, uses and protects your personal information when you visit or make a purchase from rheakalo.com. We are committed to respecting your privacy and following applicable data protection laws, including the EU GDPR.

2. Data we collect

Information you provide:

• Name
• Email address
• Shipping and billing address
• Phone number
• Payment details (processed securely by third-party providers; we do not store full card numbers)
• Account details (if you create an account)

Information collected automatically:

• IP address
• Device type and browser
• Pages visited
• Time spent on site
• Referring URLs

Cookies and similar technologies:

We use cookies, pixels and tracking tools to support website functionality, improve performance, personalise your browsing experience and deliver marketing (e.g. Meta Pixel, Google Analytics, Klaviyo).

3. How we use your data

• To process and fulfil your orders
• To communicate with you about your order or account
• To send marketing emails (only if you opt in)
• To personalise content, recommendations and advertising
• To understand site traffic and improve the user experience
• To detect fraud and ensure website security
• To comply with legal obligations

4. Legal basis for processing (GDPR)

We process your data on the basis of:

• Contract: to fulfil your order
• Consent: for marketing emails and certain cookies
• Legitimate Interests: analytics, personalisation, improving our services
• Legal Obligation: tax, accounting and regulatory requirements

5. Sharing your information

We do not sell your personal data.
We share it only with trusted service providers such as:

• Shopify (website host & ecommerce platform)
• Payment processors (e.g. Stripe, PayPal)
• Shipping and delivery partners
• Email marketing platform (Klaviyo)
• Analytics and advertising partners (Google, Meta)
• Professional advisors (legal, accounting)

These providers only use your data as necessary to perform their services.

6. International transfers

Some partners operate globally. When your data is transferred outside the EU, appropriate safeguards (such as Standard Contractual Clauses) are used to protect it.

7. Your rights

You may request to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your data
• Object to certain processing
• Withdraw consent (for marketing or cookies)
• Request data portability

To exercise any of these rights, contact us at [add email].

You may also lodge a complaint with your local Data Protection Authority.

8. Data retention

We retain your data only as long as needed to fulfil your order, comply with legal obligations, and support customer service.
Marketing data is retained until you unsubscribe.

9. Security

We use appropriate security measures, including encryption, secure servers, and limited-access controls. While no online system is completely secure, we take reasonable steps to protect your information.

10. Children’s Privacy

Our site is not intended for children under 16, and we do not knowingly collect data from them.

11. Cookies Policy

What cookies are:

Cookies are small files stored on your device to help websites function and improve your browsing experience.

Types of cookies we use:

• Essential cookies – required for the site to function
• Analytics cookies – measure usage and performance
• Marketing cookies – used for ads and retargeting
• Preference cookies – remember your settings

Managing cookies:

You can disable or adjust cookies through your browser settings or via our on-site cookie banner.
Some features may not work properly if certain cookies are disabled.

12. Changes to this Policy

We may update this Privacy & Cookies Policy as needed. Any changes will be posted here with a new “Last Updated” date.

13. Contact us

For any privacy-related questions, please contact:

Rheakalo
Email: info@rheakalo.com