Privacy policy

Last updated: July 24, 2026

Revital Capilar ("we," "us") operates this store and website, including all related information, content, features, tools, products and services, in order to provide you with a curated shopping experience ("the Services"). We use Shopify as the technology platform that powers the Services. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read this Privacy Policy and understand how we handle your information.

1. Personal information we collect

Depending on how you interact with us, where you live, and as required by applicable law, we may collect or process:

  • Contact details: name, address, billing address, shipping address, phone number, and email address.
  • Financial information: credit/debit card data, payment account information, transaction details, and payment confirmations.
  • Account information: username, password, security questions, preferences and settings.
  • Transaction information: items viewed, added to cart or wishlist, purchases, returns, exchanges, cancellations, and past transaction history.
  • Communications: information you include when contacting us, e.g. customer support inquiries.
  • Device information: browser, network connection, IP address, and other identifiers.
  • Usage information: how you interact with and navigate the Services.

2. Sources of personal information

  • Directly from you: when you create an account, use the Services, or communicate with us.
  • Automatically: through your device as you use the Services, and via cookies and similar technologies.
  • From our service providers: when they collect or process personal information on our behalf.
  • From business partners or other third parties.

3. How we use your information and legal basis for processing

We use your personal information to:

  • Provide, tailor, and improve the Services: process payments, fulfill orders, manage returns and exchanges, maintain your account, arrange shipping, and personalize your shopping experience. Legal basis: performance of our contract with you.
  • Marketing and advertising: send promotional communications and show you relevant ads based on your activity. Legal basis: your consent, which you can withdraw at any time (see Section 9).
  • Security and fraud prevention: authenticate your account and protect the platform. Legal basis: our legitimate interest in a secure shopping environment.
  • Customer support: respond to your inquiries and maintain our business relationship. Legal basis: contract performance / legitimate interest.
  • Legal compliance: respond to authorities, valid legal process, or investigate violations of our policies. Legal basis: legal obligation.

4. How we disclose personal information

We may disclose your information to:

  • Shopify and other vendors performing services on our behalf (payment processing, analytics, customer support, cloud storage, fulfillment and shipping).
  • Business and marketing partners for advertising purposes. You may have the right to opt out of your information being used for targeted advertising based on your activity across different merchants and websites, [here].
  • Third parties when you direct, request, or consent to it (e.g. shipping products, using social media widgets).
  • Our affiliates or other companies within our corporate group.
  • In connection with a merger, sale, or bankruptcy, to comply with legal obligations (subpoenas, court orders), or to protect the Services and our rights.

5. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than your own. For enhanced features, Shopify may use data from your interactions with our store together with other merchants; in those cases Shopify acts as the responsible party for that processing. Learn more in Shopify's Consumer Privacy Policy, and exercise your rights via the Shopify Privacy Portal.

6. Third-party links

The Services may link to websites operated by third parties. We do not guarantee and are not responsible for their privacy or security practices; we recommend reviewing their own policies before sharing information with them.

7. Children's data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with personal information, contact us to request its deletion. We do not have actual knowledge that we "share" or "sell" (as defined by applicable law) personal information belonging to individuals under 16 years of age.

8. Security and retention of information

No security measures are perfect; we cannot guarantee absolute security, and information sent over the internet may not be fully secure in transit. We recommend avoiding unsecured channels when sharing sensitive or confidential information with us.

We retain your information for as long as needed to fulfill its purpose (maintaining your account, providing the Services), comply with legal obligations, resolve disputes, or enforce our contracts and policies.

9. Your rights depending on where you live

Nothing in this policy limits the rights granted to you under the law of your country of residence.

General rights (apply in most countries)

  • Access: request what personal information we hold about you.
  • Deletion: request that we delete your information.
  • Correction: request that we correct inaccurate information.
  • Portability: receive a copy of your information, or request that we transfer it to a third party, in certain circumstances.
  • Communication preferences: unsubscribe from promotional emails at any time via the unsubscribe link. We may still send you non-promotional emails related to your account or orders.

You can exercise these rights by emailing revitalcapilar7@gmail.com. We may need to verify your identity before processing your request, and you may designate an authorized agent where permitted by law. We will not discriminate against you for exercising these rights.

Colombia — Law 1581 of 2012 and Decree 1377 of 2013 (Habeas Data)

Revital Capilar is the Data Controller ("Responsable del Tratamiento") of your personal information. Under Colombian data protection law:

  • We collect and process your personal data only with your prior, express, and informed authorization, except as otherwise permitted by law.
  • As the data subject, you have the right to know, update, rectify, and request deletion of your information, and to revoke your authorization at any time, unless a legal or contractual duty prevents deletion.
  • You may submit inquiries, which we will answer within a maximum of 10 business days (extendable by 5 additional business days with notice), and complaints, which we will answer within a maximum of 15 business days.
  • If your request is not resolved to your satisfaction, you may contact Colombia's Superintendencia de Industria y Comercio (SIC), the national data protection authority.

You can exercise these rights by writing to revitalcapilar7@gmail.com.

European Union and United Kingdom — GDPR / UK GDPR

If you reside in the EEA or UK, in addition to the general rights above you have:

  • Objection and restriction of processing: the right to have us stop, or limit, processing your information for certain purposes.
  • Withdrawal of consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

If we transfer your information outside the EEA or UK, we rely on recognized mechanisms such as the European Commission's Standard Contractual Clauses, or equivalents issued by the relevant UK authority, unless the destination country has an adequacy decision.

You may lodge a complaint with your local EEA data protection authority, or contact us first at revitalcapilar7@gmail.com.

United States — state privacy laws (CCPA/CPRA-style)

Depending on your state of residence, you may have the right to opt out of the "sale" or "sharing" of your personal information, or its use for targeted advertising. If you visit our site with the Global Privacy Control (GPC) signal enabled, we will treat it as an opt-out request for that device and browser, and apply it to your account where we can associate the two. We do not recognize other "Do Not Track" signals besides GPC.

Brazil — LGPD (Lei Geral de Proteção de Dados)

If you reside in Brazil, you have the rights set out in Article 18 of the LGPD (confirmation of processing, access, correction, anonymization, portability, deletion, information about who we share your data with, and withdrawal of consent). We will respond to your request within a maximum of 15 days. If you are not satisfied with our response, you may contact Brazil's Autoridade Nacional de Proteção de Dados (ANPD).

Other countries

If you reside in a country not listed above, we still respect any data protection rights granted by your local law that cannot be waived by contract.

10. Complaints

If you have concerns about how we handle your information, contact us at revitalcapilar7@gmail.com. Depending on where you live, you may also appeal our decision or file a complaint with your local data protection authority (for example, the SIC in Colombia, the ANPD in Brazil, or the relevant authority in the EEA).

11. International transfers

We may transfer, store, and process your personal information outside the country where you reside, including through Shopify's infrastructure and its providers, applying the legal safeguards described in Section 9.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the revised policy on this site, update the "Last updated" date, and provide notice as required by applicable law.

13. Contact

If you have questions about our privacy practices or this policy, or want to exercise any of your rights, email us at revitalcapilar7@gmail.com.

For purposes of applicable data protection laws, Revital Capilar is the controller of your personal information.