PRIVACY POLICY

Last updated: September 11, 2026

Zalyven, operated by Mio Schulz-Weber (“Zalyven,” “we,” “us,” or “our”), operates this website and online store, including all related information, content, features, tools, products, and services (collectively, the “Services”).

Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose, store, and otherwise process personal information when you visit or use our website, make a purchase, communicate with us, or otherwise interact with the Services.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood how we process personal information as described below.

1. Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you.

Depending on how you interact with the Services, we may collect the following categories of personal information.

Contact Information

This may include:

• name
• email address
• telephone number
• billing address
• shipping address

Order and Transaction Information

This may include:

• products viewed or purchased
• shopping cart activity
• order history
• returns and refund information
• order status
• transaction details
• shipping and delivery information

Payment Information

Payments are processed through Shopify and/or authorized third-party payment providers.

We may receive limited information relating to your payment, such as:

• payment status
• payment method
• billing information
• transaction identifiers

Full payment card information is generally processed directly by the applicable payment provider and is not stored by us unless specifically permitted or required in connection with the payment service.

Account Information

If customer accounts are available, we may process information associated with your account, including:

• login credentials
• account preferences
• order history
• account settings

Communications

We collect information you provide when you contact us, including customer service inquiries, return requests, emails, reviews, or other communications.

Device and Technical Information

We may automatically collect information such as:

• IP address
• browser type
• device type
• operating system
• device identifiers
• network information
• approximate location derived from IP address
• referring URLs
• website interaction data

Usage Information

We may collect information regarding how you interact with the Services, including:

• pages viewed
• products viewed
• links clicked
• cart activity
• checkout activity
• session information
• interactions with advertisements or marketing campaigns

2. How We Collect Personal Information

We may collect personal information directly from you, automatically through the Services, from service providers, and from advertising or marketing partners.

This includes information collected when you:

• place an order
• create an account
• contact customer support
• request a return or refund
• subscribe to marketing communications
• submit a review
• otherwise provide information to us

We may also collect information through cookies, pixels, tags, local storage, server logs, Shopify technologies, and similar tracking technologies.

3. How We Use Personal Information

We may use personal information to:

• process and fulfill orders
• process payments
• arrange shipping and tracking
• process returns and refunds
• provide customer support
• maintain customer accounts
• improve our store and customer experience
• detect and prevent fraud
• protect our systems
• communicate with customers
• comply with applicable legal obligations

Where permitted by law, we may also use personal information for marketing, advertising, campaign measurement, audience creation, and personalized advertising.

4. Legal Bases for Processing

Where the GDPR or similar data protection laws apply, we process personal information under one or more of the following legal bases.

Performance of a Contract

We process personal information where necessary to:

• process your order
• receive payment
• fulfill and deliver purchases
• handle returns and refunds
• provide customer support related to your purchase

Legitimate Interests

We may process personal information where necessary for legitimate business interests, including:

• fraud prevention
• website security
• improving our Services
• responding to customer inquiries
• maintaining business records
• protecting our legal rights

Consent

Where required by law, we rely on consent for activities such as:

• certain marketing communications
• non-essential cookies
• advertising technologies
• personalized or targeted advertising

You may withdraw consent at any time.

Legal Obligations

We may process personal information where required to comply with applicable laws, tax requirements, accounting obligations, regulatory requirements, or lawful governmental requests.

5. Cookies and Tracking Technologies

We and our service providers may use cookies, pixels, tags, and similar technologies for:

• essential website functionality
• shopping cart functionality
• checkout functionality
• remembering preferences
• analytics
• performance measurement
• fraud prevention
• marketing attribution
• advertising
• personalized advertising

Where legally required, non-essential technologies will only be used after appropriate consent has been obtained.

You may manage available privacy or cookie preferences through the controls provided on our website.

6. Advertising and Targeted Advertising

We may work with third-party advertising and analytics providers to advertise Zalyven products and measure advertising performance.

Depending on the services enabled, these providers may receive information such as:

• device identifiers
• IP address
• browsing activity
• products viewed
• cart activity
• purchases
• advertising interactions
• transaction events

Under certain U.S. privacy laws, some advertising-related disclosures may be considered a “sale,” “sharing,” or “targeted advertising,” even where no money is exchanged.

We do not sell personal information for monetary payment.

Where applicable, you may opt out through:

https://zalyven.com/pages/data-sharing-opt-out

Where supported and legally required, we may also recognize Global Privacy Control (GPC) signals.

7. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to operate our business and provide the Services.

Recipients may include:

• Shopify
• payment providers
• financial institutions
• fulfillment providers
• U.S.-based fulfillment locations
• shipping carriers
• analytics providers
• customer support providers
• IT and hosting providers
• fraud-prevention providers
• advertising and marketing partners

We may also disclose information when legally required, where you direct us to do so, or in connection with a merger, sale, restructuring, financing, or similar business transaction.

8. Relationship With Shopify

The Services are hosted by Shopify.

Shopify may collect and process personal information regarding your access to and use of Shopify-powered stores in order to provide and improve its services.

Information submitted through our store may therefore be processed by Shopify and its service providers.

Shopify may also independently process certain information for purposes such as fraud prevention, analytics, platform improvement, and advertising-related functionality.

9. Personal Information of Children

The Services are not intended for children.

We do not knowingly collect personal information from children in violation of applicable law.

If you are a parent or legal guardian and believe a child has improperly provided personal information to us, please contact:

support@zalyven.com

We do not knowingly sell or share personal information belonging to individuals under 16 for targeted advertising purposes.

10. Data Security

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

We therefore cannot guarantee absolute security.

11. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy or to comply with applicable legal requirements.

Retention periods may depend on:

• order fulfillment
• account maintenance
• customer support
• fraud prevention
• tax and accounting requirements
• legal obligations
• disputes
• applicable limitation periods

When information is no longer reasonably required, we may delete or anonymize it in accordance with applicable requirements.

12. Your Privacy Rights

Depending on where you live, you may have rights including:

• access to your personal information
• correction of inaccurate information
• deletion
• data portability
• restriction of processing
• objection to certain processing
• withdrawal of consent
• opting out of targeted advertising
• opting out of certain sales or sharing of personal information

You may exercise applicable privacy rights by contacting:

support@zalyven.com

Where applicable, you may also use:

https://zalyven.com/pages/data-sharing-opt-out

Marketing Communications

You may unsubscribe from promotional emails using the unsubscribe link contained in those emails.

We may still send transactional or non-promotional communications regarding orders, refunds, returns, payments, deliveries, security, or customer support.

13. U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights under applicable privacy laws.

Depending on your state, these may include rights to:

• access personal information
• know what information is collected
• correct inaccurate information
• delete information
• obtain a portable copy
• opt out of targeted advertising
• opt out of sale or sharing
• appeal certain privacy-request decisions

Categories of information we may process can include:

• identifiers and contact information
• commercial information
• transaction information
• internet or electronic network activity
• device information
• approximate location information
• customer communications
• related inferences where applicable

Certain disclosures to advertising partners may constitute “sharing,” “sale,” or “targeted advertising” under applicable U.S. law.

Again, we do not sell personal information for monetary payment.

14. Exercising Your Rights

Privacy requests may be sent to:

support@zalyven.com

We may need to verify your identity before fulfilling certain requests.

Where permitted by law, an authorized agent may submit a request on your behalf.

We will not discriminate against you for exercising applicable privacy rights.

Where a right to appeal exists, you may contact us at the same email address and identify your request as a Privacy Appeal.

15. Automated Processing

Our service providers may use automated systems for purposes including:

• fraud detection
• transaction security
• risk assessment
• analytics
• advertising optimization

We do not intentionally use solely automated decision-making that produces legal or similarly significant effects on individuals except where permitted by applicable law and subject to required safeguards.

16. Third-Party Websites

The Services may contain links to websites or services operated by third parties.

We do not control the privacy, security, or data-processing practices of those third parties.

You should review their privacy policies and terms before providing personal information to them.

17. International Data Transfers

Because we use international service providers, personal information may be transferred to, stored in, or processed in countries other than your country of residence.

This may include processing by Shopify and other:

• technology providers
• payment providers
• fulfillment providers
• shipping providers
• analytics providers
• advertising providers

Where GDPR-protected personal information is transferred outside the European Economic Area to jurisdictions without an adequate level of protection, appropriate safeguards will be used where required.

These may include:

• adequacy decisions
• European Commission Standard Contractual Clauses
• other recognized legal transfer mechanisms

18. Complaints

If you have concerns about our processing of personal information, please contact:

support@zalyven.com

Where applicable, you may also have the right to lodge a complaint with a competent data protection supervisory authority.

Nothing in this Privacy Policy limits any rights or remedies available under applicable law.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• our Services
• business practices
• technology
• service providers
• legal obligations
• regulatory requirements

The revised Privacy Policy will be posted on this page and the Last updated date will be updated accordingly.

Where legally required, we will provide additional notice of material changes.

20. Contact

For questions regarding this Privacy Policy, our privacy practices, or your privacy rights, please contact:

Zalyven
Owner / Data Controller: Mio Schulz-Weber
Email: support@zalyven.com
Address: Helene-Engelbrecht-Straße 131
38124 Braunschweig
Germany

For purposes of applicable data protection laws, Mio Schulz-Weber is the controller responsible for the processing of personal information by Zalyven.