Privacy Policy
Template — have a lawyer review before launch.
Privacy Policy
Effective date: [EFFECTIVE DATE]
TEVI is a small clothing studio run by one person, Tevi, in Las Vegas, Nevada, USA. This policy explains what information we collect at tevi.studio, why, who helps us process it, and the choices you have. We try to collect only what we need.
In this policy, “TEVI,” “we,” “us,” and “our” mean TEVI, [LEGAL BUSINESS NAME], [BUSINESS ADDRESS]. “You” means anyone who visits the site, signs up, or buys from us.
1. Information we collect
When you place an order:
- Name, email, phone number (if given), shipping and billing address.
- Order details: items, size, color, price, discounts used, order history.
- Payment information. Card and PayPal details are entered with and handled by our payment processors (Stripe through WooPayments, and PayPal). We do not see or store your full card number.
When you sign up for emails or texts:
- Email address (required to join the list).
- Phone number (optional). We only send marketing texts if you check the separate box that says “Text me when early access opens.”
- Which list you joined (for example: waitlist, launch list, next drop), the date and source of your signup, and your consent record.
- Whether you open emails or click links in them.
When you browse the site (automatically):
- Device and browser type, IP address, approximate location (city or region), pages viewed, referring site, and time on site.
- Cart contents and session data.
- Information collected by cookies and pixels. See our Cookie Policy.
When you contact us: your name, email, and whatever you choose to write to us.
We do not knowingly collect sensitive information such as government ID numbers, health data, or precise geolocation.
2. How we use your information
- To process, ship, and support your orders, including returns and exchanges.
- To send order and shipping updates (these are transactional and not marketing).
- To send drop news, early-access links, and offers by email, and by text if you opted in.
- To give you early access to a drop. Early-access links may use a tevi_access cookie to remember that you have access.
- To deliver a welcome offer or coupon and make sure it is used once per customer.
- To understand how the site is used so we can improve it.
- To measure and show ads on platforms like Meta (Facebook, Instagram) and TikTok, only if you allow marketing cookies.
- To prevent fraud, keep the site secure, and meet legal, tax, and accounting duties.
3. Who we share it with
We do not sell your information for money. We share it only with service providers who help us run the shop, and only as needed:
- WordPress and WooCommerce, hosted by [HOSTING PROVIDER]: runs the site and stores order records.
- Omnisend: sends our emails and text messages and stores your signup and consent records.
- Stripe (through WooPayments): processes card payments and helps prevent fraud.
- PayPal: processes PayPal payments.
- Google (Site Kit / Google Analytics): site analytics.
- Meta (Facebook and Instagram pixel): ad measurement and ad targeting.
- TikTok (TikTok pixel): ad measurement and ad targeting.
- Shipping carriers ([CARRIERS, e.g. USPS / UPS / DHL]): to deliver your order.
Each of these companies has its own privacy policy. Some of them, such as Google, Meta, and TikTok, may also use the data for their own purposes as described in their policies.
We may also share information if the law requires it, to protect our rights or someone’s safety, or if the business is sold or transferred (in which case this policy would still apply to your information).
4. Cookies, pixels, and your choices
Necessary cookies keep the cart and checkout working. Analytics and marketing cookies and pixels only load after you allow them in our cookie banner. You can change your choice at any time with the Cookie settings link in the site footer. Details are in our Cookie Policy.
5. Emails and texts
- Every marketing email has an unsubscribe link.
- For texts, reply STOP to cancel or HELP for help. See our SMS Terms.
- Agreeing to texts is never a condition of buying anything.
- We do not share your phone number or text opt-in consent with third parties for their own marketing.
6. Your rights if you live in California (CCPA / CPRA)
If you live in California, you have the right to:
- Know what personal information we collect, use, and share, and get a copy of it.
- Delete personal information we hold about you, with some legal exceptions (for example, order records we must keep for tax purposes).
- Correct inaccurate information.
- Opt out of the “sale” or “sharing” of your personal information.
- Limit the use of sensitive personal information. (We do not collect sensitive personal information for this purpose.)
- Not be treated differently for using these rights.
Do Not Sell or Share My Personal Information. We do not sell your information for money. However, the Meta and TikTok pixels share browsing activity with those platforms for targeted advertising. California law may treat this as “selling” or “sharing.” You can opt out by:
- Clicking Do Not Sell or Share My Personal Information or Cookie settings in the footer and turning off marketing cookies, or
- Using a browser setting that sends a Global Privacy Control (GPC) signal, which we treat as an opt-out for that browser, or
- Emailing us at [CONTACT EMAIL].
In the past 12 months, the categories we collected were: identifiers (name, email, phone, IP address), customer records (address), commercial information (orders), internet activity (pages viewed, clicks), and approximate location. Sources: you, your device, and our service providers. Purposes are listed in section 2.
To make a request, email [CONTACT EMAIL] with the subject “Privacy request.” We will verify your identity by matching information we already have (such as your email and order number). You can use an authorized agent; we may ask for proof of their authority. We will respond within 45 days.
7. Your rights if you are in the EU, EEA, or UK (GDPR)
If you are in the European Union, EEA, or United Kingdom, TEVI is the controller of your personal data. Our legal bases are:
- Contract: to process and deliver your order.
- Consent: for marketing emails, texts, and analytics and marketing cookies. You can withdraw consent at any time.
- Legitimate interests: to keep the site secure, prevent fraud, and improve our shop.
- Legal obligation: to keep tax and accounting records.
You have the right to access, correct, delete, restrict, or object to the processing of your data, and the right to data portability. You can also complain to your local data protection authority.
TEVI is based in the United States, and our service providers may process data in the US and other countries. Where required, these transfers rely on safeguards such as Standard Contractual Clauses or the EU-US Data Privacy Framework, as offered by each provider.
To use your rights, email [CONTACT EMAIL]. We will reply within one month.
8. How long we keep information
- Order records: as long as needed for tax, accounting, and legal reasons, generally [7 YEARS — CONFIRM].
- Email and SMS list data: until you unsubscribe or ask us to delete it. Consent records may be kept longer as proof of consent.
- Analytics data: according to each tool’s retention settings, set to [RETENTION PERIOD, e.g. 14 months] where we can choose.
- Cookies: see the Cookie Policy for how long each one lasts.
9. Security
We use reputable providers, HTTPS, and access controls to protect your information. No system is perfectly secure, so we cannot promise absolute security.
10. Children
This site is not for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has given us information, email [CONTACT EMAIL] and we will delete it.
11. Changes to this policy
We may update this policy. The new version will be posted here with a new effective date. If the changes are significant, we will tell you by email or a notice on the site.
12. Contact
- TEVI ([LEGAL BUSINESS NAME])
- [BUSINESS ADDRESS]
- Email: [CONTACT EMAIL]