Privacy Policy

Privacy Policy – Elevate

This Privacy Policy governs how Elevate collects, uses, shares, stores, and protects your personal data in accordance with GDPR, CCPA (where applicable), the ePrivacy Directive, and standard best practices for international e-commerce businesses.

A. Data Controller and Scope Elevate is the data controller responsible for the lawful handling of all personal data collected from users and customers on this Site. This policy applies to all visitors, customers, and third-party users engaging with the Site or our services.

B. What Personal Information We Collect We collect the following categories of data:

Identity data: full name, shipping/billing address, email, phone

Transactional data: order history, payment methods, delivery status

Device data: IP address, cookies, time zone, browser type, OS

User behavior: page views, interactions, abandoned carts, session heatmaps

Communications: customer service emails, chat logs, reviews

C. How We Collect Your Information

Directly from you (via checkout, account registration, reviews)

Automatically via cookies, pixels, tracking scripts

From third-party platforms (e.g., Shopify, Google Ads, Facebook)

D. Lawful Basis for Processing (GDPR) Our data processing relies on:

Consent (for email marketing, SMS alerts)

Contractual necessity (order fulfillment)

Legal obligations (invoicing, fraud checks)

Legitimate interest (analytics, retargeting, user experience)

E. Purpose of Data Use Your personal data is used for:

Order processing and customer service

Shipping coordination and delivery updates

Payment verification and fraud protection

Email and SMS updates (if opted in)

Product recommendation and behavioral advertising

Legal compliance

F. Sharing of Personal Data We share your data with:

Payment gateways (Shopify Payments, PayPal, Klarna)

Fulfillment centers and shipping companies

Email/SMS marketing platforms (Klaviyo, SMSBump)

Advertising networks (Meta, Google, Bing)

Analytics services (Google Analytics, Hotjar)

We do not sell personal information under any circumstance.

G. Retention Period Your data will be stored only for as long as needed to fulfill legal, contractual, and operational purposes. Data tied to legal obligations (invoicing, disputes) may be retained longer.

H. Cookies and Tracking Technologies We use:

Essential cookies (login, cart storage)

Performance cookies (analytics, speed)

Marketing cookies (Facebook Pixel, Google Ads)

Session-based and persistent cookies (duration: 30 minutes–2 years)

Visit www.allaboutcookies.org to manage or disable cookies.

I. SMS and Cart Reminders If you consent to receive SMS notifications:

You agree to receive automated texts about your order

Cart abandonment messages may be sent based on cookie tracking

You may opt out anytime by replying STOP

J. International Transfers Your data may be stored or processed in countries outside the EU (e.g., Canada, USA). Shopify ensures GDPR compliance via Standard Contractual Clauses.

K. Your Rights (GDPR) You have the right to:

Access your data

Request correction or erasure 

Object to processing 

Withdraw consent 

Lodge a complaint with a Data Protection Authority

Requests may be sent to: INSERT EMAIL

L. Changes to This Policy We may update this Privacy Policy without prior notice. All revisions will be posted on this page. We encourage you to review it regularly.

M. Final Notes We take your privacy seriously. No third-party advertising network or analytics service will receive data unless contractually and legally permitted.

If you have any questions or concerns about this Privacy Policy, please email us directly at INSERT EMAIL.