Privacy policy

1. Introduction

This Privacy Policy explains what personal data Vumra Commerce Ltd, a company registered in England and Wales (company no. 16707665), trading as RUVLI ("RUVLI", "we", "us" or "our"), collects about you and how we use it. We operate the website ruvli.com and sell to customers in the United Kingdom, Europe, North America, Australia, New Zealand, Asia and the Middle East.

This Policy applies when you visit our website or social media pages, create an account, subscribe to our emails, contact us, or buy our products, wherever you live.

Vumra Commerce Ltd is the data controller responsible for your personal data. We process your data in line with this Policy and the data protection laws that apply to you, including the UK GDPR and Data Protection Act 2018, the EU General Data Protection Regulation (EU GDPR), and the other national laws listed in section 17.

We review this Policy regularly and post updates on this page with a new date. If we make significant changes, we will tell you by email or with a notice on our website.

Our website is not intended for children under 18, and we do not knowingly collect data about children. If you believe a child has given us personal data, please contact us at contact@ruvli.com and we will delete it.

2. How to contact us

If you have questions about this Policy or wish to exercise your privacy rights, contact us:

Email: contact@ruvli.com
Post: Vumra Commerce Ltd (RUVLI), 164 Hamilton Rd, Norwood, London, SE27 9SF, United Kingdom
Phone: +44 7459 920019

3. What data do we collect?

"Personal data" means any information about a person from which that person can be identified. We may collect:

- Identity data: name, title, username, date of birth, gender.
- Contact data: billing and delivery address, email, phone number.
- Purchase data: orders, order frequency, offers used, spend.
- Security data: encrypted password.
- Customer service data: emails, chat, phone and social media messages.
- Financial data: the payment details needed to process your order. Payments are handled by our payment providers; we never store full card details.
- Review data: product reviews and feedback.
- Marketing data: newsletter preferences, voucher use, and how you interact with our emails and SMS.
- Technical data: IP address, device, browser, operating system, time zone and similar signals.
- Usage data: pages viewed, search terms, wish list, basket contents and how you found our site.
- Social media data: your handle and any content you share with our social accounts.
- Customs data: for orders outside the UK, the name, address, phone number and order details that carriers and customs authorities need to deliver your parcel.

We may also use aggregated statistics that do not identify you. If aggregated data is ever combined with personal data so that you can be identified, we treat it as personal data.

We do not collect special category data (such as health or religion) or criminal offence data.

4. When do we collect your data?

- Directly from you: when you visit our site, create an account, place an order, contact us, subscribe, enter a promotion or post a review.
- Automatically: through cookies, pixels and server logs when you browse our site or open our emails (see section 14).
- From third parties: e-commerce, payment, delivery, analytics, advertising and review providers may give us data that helps us run and improve our services.

5. How and why we use your data (lawful bases)

We only process your data where the law allows:

- Contract: to process and deliver your orders, take payments, handle returns, provide support and run your account.
- Consent: to send marketing by email or SMS (you can withdraw at any time) and to use non-essential cookies.
- Legal obligation: for tax, accounting, customs, fraud prevention and consumer law.
- Legitimate interests: to run and improve our business, personalise your experience, secure our systems, analyse performance, and send marketing about similar products to existing customers where the law allows. We always balance these interests against your rights.

6. Change of purpose

We only use your data for the purposes we collected it for, unless another use is compatible with those purposes. If we need to use it for an unrelated purpose, we will tell you and explain the legal basis.

7. If you do not provide personal data

If you do not give us the data we need, we may not be able to complete your order (for example, take payment or deliver your goods), and we may need to cancel it.

8. Data security

We use appropriate technical and organisational measures to protect your data, and only authorised people with a duty of confidentiality can access it. No internet transmission is completely secure, but we work hard to protect your information. If a data breach is likely to put your rights at risk, we will notify you and the relevant authorities as the law requires.

9. How long we keep your data

- Order, payment and tax records: 6 years after the end of the financial year, as required by UK law.
- Account data: until you close your account, then up to 2 years for support and fraud prevention.
- Marketing data: until you unsubscribe or withdraw consent.
- Customer service messages: up to 3 years.

We may anonymise data so it no longer identifies you and use it for statistics without time limit.

10. Who we share your data with

We may share your data with:

- E-commerce, hosting and IT providers: the platform and apps that run our store (such as Shopify).
- Payment processors and fraud-prevention services.
- Warehouse and delivery partners, and customs authorities: to pick, pack, ship and clear your order through customs.
- Returns partners: to create labels and route returns.
- Marketing, email, SMS and analytics providers: to send communications you agreed to and measure performance.
- Advertising partners (such as Google and Meta): only with your consent where the law requires it.
- Professional advisers, regulators and authorities: lawyers, accountants, insurers, and authorities where the law requires.
- Potential buyers and their advisers: if our business is sold, merged or reorganised.

We require our processors to protect your data and act only on our instructions. Some recipients are independent controllers; please read their privacy notices.

We do not sell your personal data for money.

11. International transfers

RUVLI is based in the UK and works with partners in other countries, including the European Union, the United States and Canada. Your data may be transferred and processed outside your country. When this happens, we use legal safeguards such as adequacy decisions, the UK International Data Transfer Addendum, or the European Commission's Standard Contractual Clauses, so your data receives essentially the same protection. Contact us for a copy of these safeguards.

12. Your rights

Depending on where you live, you may have the right to:

- Access your personal data and get a copy.
- Correct inaccurate or incomplete data.
- Delete your data.
- Receive your data in a portable format or have it sent to another company.
- Object to processing, including direct marketing.
- Restrict processing while we look into a request.
- Withdraw consent at any time (this does not affect processing before you withdrew).
- Not be subject to decisions made only by automated means that have legal or similar effects on you. We do not make such decisions.

To use any of these rights, email contact@ruvli.com. We may need to confirm your identity. We respond within one month (or the shorter time your local law requires). Using your rights is free, and we will never treat you differently for using them.

13. Marketing preferences

You can stop emails or SMS at any time: use the unsubscribe link in any email, reply STOP to any SMS, or email contact@ruvli.com. Changes may take a few days to apply.

14. Cookies

We use cookies and similar technologies to run our site, improve performance and personalise content and ads. Visitors in the UK and Europe are asked for consent before we use non-essential cookies, through the cookie banner on our site. You can change your choices at any time through that banner or in your browser settings, though some features may not work if cookies are turned off.

15. Third-party links

Our site may contain links to other websites or plugins. We are not responsible for their privacy practices; please read their policies when you leave our site.

16. How to complain

If you are unhappy with how we use your data, please contact us first at contact@ruvli.com and we will try to resolve it. You also have the right to complain to the data protection authority where you live, for example:

- United Kingdom: Information Commissioner's Office (ico.org.uk)
- EU and EEA countries: your national data protection authority
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
- Canada: Office of the Privacy Commissioner of Canada
- Australia: Office of the Australian Information Commissioner (OAIC)
- New Zealand: Office of the Privacy Commissioner

17. Additional information for your region

European Union, EEA and Switzerland: You have all the rights in section 12 under the EU GDPR or the Swiss Federal Act on Data Protection.

United States: Depending on your state (for example California, Colorado, Connecticut, Virginia or Texas), you may have the right to know what personal data we collect, to access, correct and delete it, and to opt out of the "sale" or "sharing" of personal data and its use for targeted advertising. To opt out, use the "Do not sell or share my personal information" link at the bottom of our website or email contact@ruvli.com. We honour Global Privacy Control (GPC) browser signals. We do not use or disclose sensitive personal information, and we do not knowingly sell or share data of anyone under 16.

Canada: We handle your data in line with the Personal Information Protection and Electronic Documents Act (PIPEDA). Your data may be stored and processed outside Canada.

Australia and New Zealand: We handle your data in line with the Australian Privacy Principles and the New Zealand Privacy Act 2020. Your data may be disclosed to recipients in the UK, the EU, the United States and Canada.

Japan, South Korea and Singapore: When you place an order, your data is transferred outside your country to the providers described in section 10, in the UK, the EU, the United States and Canada, to complete your order. You can withdraw consent to marketing at any time.

Hong Kong, Israel, United Arab Emirates, Saudi Arabia, Qatar, Kuwait and Oman: We process your data in line with your local data protection law, and you can use the rights in section 12 by emailing contact@ruvli.com.

18. Keeping your data up to date

Please keep your details current. You can update your account at any time or ask us to correct inaccurate information by emailing contact@ruvli.com.