Global Privacy & Data Policy

In order to provide our bespoke global DTC shopping experience, we collect information strictly under the principle of data minimization:

• Identity & Contact Data: Full name, shipping address, email address, and phone number for customs clearance and white-glove courier delivery.
• Payment Tokenization: We never store raw credit card numbers or CVC codes. Payment credentials are tokenized directly via Stripe PCI-DSS Level 1 secure gateways.
• Peer Payment ('Pay for Me') Information: When using our shared peer payment feature, custom messages are transmitted only to the designated payer. The recipient's detailed address is strictly masked for privacy protection.
• Technical & Telemetry Data: IP address, browser user-agent, preferred currency/language, and session tokens utilized exclusively for transaction fraud prevention.

In accordance with GDPR Article 6 and CCPA standards, data is processed solely under valid legal bases:

All customers worldwide are entitled to full data subject sovereignty:

• Right to Access: Request an encrypted copy of all personal data held concerning you.
• Right to Erasure ('Right to be Forgotten'): Request the deletion of your account and personal traces subject to tax audit minimum retention.
• Do Not Sell My Personal Info: Bivura guarantees that customer data has never been and will never be sold to brokers or third parties.