Effective Date: July 21, 2022 Last Updated: July 21, 2026

AlVivo ("AlVivo," "we," "us," or "our") operates the website alvivo.co (the "Site") and sells nutrition, wellness, and personal care products to customers in the United States, Canada, Mexico, the United Kingdom, and Germany. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it.

By using the Site or placing an order, you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Site.

AlVivo is operated by AlVivo LTD, a company registered in England & Wales, with its registered office at 5 Brayford Square, London, E1 0SG, United Kingdom.

1. Information We Collect

We collect information in three ways: information you give us directly, information collected automatically when you use the Site, and information we receive from third parties (such as payment processors and shipping carriers).

1.1 Personal Data You Provide

• Name, email address, phone number
• Billing and shipping address
• Order history and product preferences
• Account login credentials, if you create an account
• Correspondence you send us (support requests, reviews, newsletter sign-ups)

1.2 Payment Information We do not store your full payment card number on our servers. Payment is processed directly by Stripe and PayPal, and card payments (Visa, Mastercard, American Express) plus digital wallets (Apple Pay, Google Pay) are handled by those providers under their own privacy and security terms. We receive limited transaction data from them (e.g., payment status, last four digits of a card, billing name) necessary to process, fulfill, and support your order.

1.3 Order Information Products purchased, order value, order date, shipping method selected, delivery status, and any notes you provide at checkout (e.g., delivery instructions).

1.4 Device Information IP address, browser type and version, device type, operating system, referring URL, pages viewed, and time spent on pages, collected automatically through cookies and similar technologies described in Section 3.

2. How We Use Your Information

We use personal data to:

• Process and fulfill orders, including sharing necessary details with FedEx for delivery
• Communicate with you about your order (confirmations, shipping updates, support)
• Operate, maintain, and improve the Site
• Send marketing communications where you have opted in (see Section 6)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal, tax, and accounting obligations
• Run and measure advertising campaigns, where you have not opted out (see Section 3)

3. Cookies & Similar Technologies

The Site uses cookies and similar technologies (pixels, local storage, tags) for the purposes below. As our tracking configuration may be updated over time, this section describes the categories of tools we use or may use — please check our cookie banner/consent tool on the Site for the current, specific list active at any given time.

3.1 Essential / Shopify Cookies Shopify, our e-commerce platform, sets cookies required for core site functionality — maintaining your cart, remembering your session, enabling checkout, and preventing fraud. These cannot be disabled without breaking core site functionality.

3.2 Analytics Where enabled, we may use Google Analytics to understand how visitors use the Site (pages viewed, time on site, traffic sources) to generate anonymized session recordings and heatmaps that help us improve site usability. These tools may set their own cookies and process data under their respective privacy policies.

3.3 Advertising Where enabled, we may use Google Ads (including remarketing/retargeting) and the Meta Pixel (Facebook/Instagram) to measure the effectiveness of our advertising and to show you relevant ads on other sites, based on your activity on alvivo.co. These tools may use cookies to build advertising audiences; you can manage ad personalization through your Google Ads Settings and Meta Ad Preferences, and through the Site's cookie consent tool.

3.4 Managing Cookies You can control cookies through your browser settings and, where applicable, through the consent banner presented on your first visit. Disabling non-essential cookies will not prevent you from placing an order but may affect personalization and site analytics.

4. Marketing Consent

We only send marketing emails or SMS to customers who have opted in (e.g., via a newsletter sign-up or an explicit checkbox at checkout). Every marketing email includes an unsubscribe link, and you can withdraw consent at any time without affecting your ability to place orders or receive transactional communications (order confirmations, shipping updates).

5. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Order and transaction data: retained for the period required by applicable tax and accounting law (typically 6–7 years, depending on jurisdiction)
• Account data: retained while your account is active, and for a reasonable period after, in case you wish to reactivate it
• Marketing data: retained until you unsubscribe or withdraw consent
• Support correspondence: retained for a reasonable period to resolve disputes and improve support quality

6. Your Rights

6.1 GDPR (European Economic Area) and UK GDPR If you are located in the EEA or UK, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion ("right to be forgotten"), subject to legal exceptions (e.g., tax records)
• Restrict or object to certain processing, including direct marketing
• Data portability — receive your data in a structured, commonly used format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office; in Germany, your regional Landesdatenschutzbehörde)

Our legal bases for processing include: performance of a contract (processing your order), legitimate interests (fraud prevention, site improvement), consent (marketing, non-essential cookies), and legal obligation (tax records).

6.2 CCPA / CPRA (California) If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information, subject to legal exceptions
• Correct inaccurate personal information
• Opt out of the "sale" or "sharing" of personal information (as those terms are defined under the CCPA/CPRA) — we do not sell personal data for money, but advertising cookies described in Section 3.3 may constitute "sharing" under CPRA's broader definition; you can opt out via the Site's cookie tool or by contacting us
• Limit the use of sensitive personal information
• Non-discrimination for exercising your privacy rights

6.3 Exercising Your Rights To exercise any of the above rights, contact us using the details in Section 12. We will respond within the timeframe required by applicable law (generally 30 days under GDPR/UK GDPR, 45 days under CCPA/CPRA) and may need to verify your identity before fulfilling a request.

7. International Data Transfers

Because we operate across the US, Canada, Mexico, the UK, and Germany, personal data may be transferred to, stored, and processed in countries other than the one in which you reside, including the United States, where our service providers (including Shopify, Stripe, PayPal, and hosting/analytics providers) may process data. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards recognized under GDPR/UK GDPR, such as Standard Contractual Clauses, as implemented by our service providers.

8. Third-Party Services

We share personal data only as necessary with:

• Shopify — our e-commerce platform and hosting provider
• Stripe and PayPal — payment processing
• FedEx — shipping and delivery
• Google (Analytics, Ads) and Meta — analytics and advertising, where enabled
• Professional advisors (accountants, lawyers) and regulators, where required by law

We do not sell your personal data to third parties for their own independent marketing purposes.

9. Children's Privacy

The Site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us using the details in Section 12 and we will delete it.

10. Security

We use commercially reasonable technical and organizational measures — including SSL/TLS encryption in transit, restricted access to personal data, and reliance on PCI-DSS-compliant payment processors (Stripe, PayPal) — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page will reflect the most recent revision. Material changes will be communicated via a notice on the Site or by email where appropriate.

12. Contact Information

For any privacy-related question or to exercise your rights under GDPR, UK GDPR, CCPA/CPRA, or other applicable law, contact us at:

• Legal business name: AlVivo LTD
• Registered office: 5 Brayford Square, London, E1 0SG, United Kingdom
• Email: support@alvivo.co or alvivo.offical@gmail.com
• Phone: +44 7438011559 (UK) | +1 646 766 1197 (US)