Privacy Policy

Effective date: September 9, 2026

This Privacy Policy explains how Kateryna Kryvolap, operating through kryvolap.ca (the “Site”), collects, uses, discloses, and protects personal information when you visit the Site, contact us, subscribe to communications, submit content, or purchase our products.

By using the Site, you acknowledge the practices described in this Privacy Policy. This policy does not limit any rights you may have under applicable privacy or consumer-protection laws.

Personal information we collect

Depending on how you interact with the Site, we may collect the following information:

• Contact and account information: name, email address, telephone number, account credentials, and information you provide through contact forms, Shopify Forms, or customer support.
• Order and transaction information: billing and shipping address, products purchased, order value, payment status, refund or return information, and information needed to fulfill or support an order. Payment card details are processed by payment providers and are not stored by us in full.
• Marketing preferences: email subscription status, consent records, preferences, and interactions with marketing communications. We currently use email marketing and customer-event tools, including Klaviyo and Shopify Messaging. We do not currently use Klaviyo to send marketing SMS.
• Device and usage information: IP address, browser type, operating system, device identifiers, approximate location, referring pages, pages or products viewed, links clicked, search activity, cart activity, and dates and times of access.
• Customer support and chat information: messages and other information you provide through Shopify Inbox or other customer-service channels.
• Reviews and user content: ratings, review text, photographs, videos, display name, and other content you submit through Judge.me or on the Site.
• Promotion information: cart, product, order, and discount information used to determine eligibility for promotions, free gifts, bundles, or other offers.

How we collect information

We collect information directly from you, automatically through the Site and its technologies, and from service providers that help us operate the store. We may also receive information when you interact with our emails, advertisements, reviews, chat, or other communications.

Cookies and similar technologies

We use cookies, pixels, tags, local storage, and similar technologies for essential store functions, security, preferences, analytics, marketing, advertising, and fraud prevention.

These technologies may help us remember items in your cart, process checkout, understand how visitors use the Site, measure marketing performance, display more relevant advertising, and detect suspicious activity. Where required by law, non-essential technologies are used only after you provide the applicable consent.

You can manage available cookie choices through the privacy or cookie controls provided on the Site. You can also change browser settings to block or delete cookies, although some store functions may not work correctly. Where supported by applicable law and our tools, we will process recognized privacy signals, such as Global Privacy Control, as an opt-out request.

How we use personal information

We may use personal information to:

• provide, operate, maintain, and improve the Site;
• process payments, fulfill orders, arrange shipping, provide downloads or other products, and manage returns or refunds;
• communicate with you about orders, products, customer service, and account activity;
• send email marketing where you have consented or where otherwise permitted by law;
• understand browsing, cart, purchase, and campaign activity and measure the effectiveness of our marketing;
• provide customer support through chat and other communication channels;
• display, moderate, and manage reviews and other content you submit;
• administer promotions, discounts, free gifts, and bundles;
• detect, investigate, and prevent fraud, abuse, security incidents, and other harmful activity;
• comply with legal obligations, resolve disputes, and enforce our agreements; and
• protect our rights, customers, business, and the security of the Site.

Legal bases for processing

Where laws such as the GDPR apply, we process personal information on the basis of one or more of the following: performing a contract with you, complying with a legal obligation, obtaining your consent, and pursuing legitimate interests such as operating and improving the Site, preventing fraud, and communicating with customers. Where we rely on consent, you may withdraw it at any time, without affecting processing that occurred before withdrawal.

How we share personal information

We may disclose personal information to service providers and partners that help us operate the Site and provide our services. These providers may process information on our behalf and may be located outside Canada, including in the United States.

• Shopify: store hosting, checkout, payments, order management, customer privacy tools, and related services. Shopify’s privacy policy is available at shopify.com/legal/privacy.
• Klaviyo: email marketing, customer profiles, segmentation, purchase and browsing events, campaign measurement, and marketing automation. We currently use Klaviyo for email and customer-event processing, not Klaviyo SMS marketing.
• Lucky Orange: behavioral analytics, heatmaps, session recordings, clicks, scrolling, and website interaction analysis. Information may be masked or restricted according to the service settings.
• Pinterest and TikTok: advertising, conversion measurement, audience building, and campaign attribution through their tags, pixels, or related technologies.
• Judge.me: review requests, review submissions, review moderation, review display, and related customer or order information.
• Shopify Messaging and Shopify Inbox: email campaign delivery and engagement measurement, customer communications, and support conversations.
• Promotion and store-function providers: tools used to administer discounts, free gifts, bundles, shipping, fraud prevention, digital delivery, courses, point-of-sale transactions, or other store functions may receive the information needed to provide those services.

We may also disclose information to professional advisers, law enforcement, regulators, courts, or other parties when required by law or when reasonably necessary to protect rights, safety, property, or the integrity of the Site. We may disclose information as part of a merger, sale, financing, restructuring, or other business transaction.

Advertising and analytics

We may use analytics and advertising services to understand Site activity, measure conversions, build audiences, and show advertisements on or off the Site. These services may collect information about your device, browsing activity, purchases, and interactions with advertisements. You can manage available cookie choices on the Site and use the privacy controls offered by the relevant advertising platforms.

Google Analytics or other Google measurement tools may be used where enabled. Their processing is subject to Google’s privacy policies and settings.

Email communications

If you subscribe to marketing emails, we may use your email address, preferences, purchase history, and interactions with our communications to send and measure relevant messages. You can unsubscribe from marketing emails at any time by using the unsubscribe link in the message or by contacting us. We may retain a limited record of your unsubscribe request so that we can respect it.

Reviews and publicly displayed content

If you submit a review, rating, photograph, video, or other content, some of that content may be displayed publicly on the Site with the name or display name you provide. Do not include payment information, full addresses, telephone numbers, or other sensitive personal information in publicly submitted content. We may moderate, publish, hide, or remove content in accordance with our review practices and applicable law.

International transfers

Our service providers may process personal information in Canada, the United States, or other countries. Those countries may have privacy laws that differ from the laws where you live. We use contractual, technical, organizational, or other safeguards appropriate to the circumstances and require service providers to handle information in accordance with their obligations.

Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide products and services, maintain business and tax records, resolve disputes, prevent fraud, enforce agreements, and comply with legal obligations. Retention periods vary by the type of information and the reason it was collected. When information is no longer required, we delete it, anonymize it, or securely isolate it where deletion is not immediately possible.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your privacy rights

Depending on where you live and subject to legal exceptions, you may have the right to request access to personal information we hold about you, request correction, request deletion, withdraw consent, object to or restrict certain processing, receive information about how your data is used or shared, and opt out of marketing or targeted advertising. We may need to verify your identity before completing a request.

You can make a privacy request by contacting us at kateryna@kryvolap.ca. You may also have the right to complain to the privacy regulator in your jurisdiction. We will respond within the time required by applicable law.

Children’s privacy

The Site is not directed to children who are below the minimum age required by applicable law. We do not knowingly collect personal information from children without appropriate authorization.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices, services, apps, or legal obligations. We will post the updated version on this page and update the effective date.

Contact us

If you have questions about this Privacy Policy or our privacy practices, or if you want to make a privacy request or complaint, contact us at:

Kateryna Kryvolap
Email: info@kryvolap.ca
Website: kryvolap.ca