Privacy policy

Privacy Policy – roVAro

Last updated: October 5, 2026

This Privacy Policy describes how roVAro ("roVAro", "we", "us", or "our") collects, uses, discloses and otherwise processes personal information when you visit rovaro-store.com, use our online store, purchase products, contact us, or otherwise interact with our services (collectively, the "Services"). Our store is hosted on Shopify.

For purposes of the EU General Data Protection Regulation (GDPR) and other applicable data protection laws, the controller responsible for the processing described in this Privacy Policy is:

Controller / legal business name: Manh Quang Dong

Trading name: roVAro

Address: Am Gartetalbahnhof 6, 37073 Göttingen, Germany

Email: support@rovaro-store.com

The legal business name above should match the business identity used in the store's Legal Notice / Impressum.

1. Personal Information We Collect

Depending on how you interact with the Services, we may collect or process the following categories of personal information:

Contact information, such as name, email address, telephone number, billing address and shipping address.

Order and transaction information, such as products ordered, order history, returns, refunds, exchanges, shipping information and transaction details.

Payment-related information. Payments are generally processed by the payment providers made available through our checkout. We do not necessarily receive or store complete payment-card details.

Account information, if customer-account functionality is used, including account identifiers, preferences and settings.

Customer communications, including emails, support requests, return requests, complaints and other messages sent to us.

Device and technical information, such as IP address, browser type, device identifiers, network information and cookie or similar technology data.

Usage information, such as how you access, navigate and interact with our website, products, pages and checkout.

Review information that you choose to submit through review functionality provided on the store.

2. Sources of Personal Information

We may obtain personal information:

directly from you, including when you place an order, contact us, request a return or submit a review;

automatically when you use the website, including through cookies and similar technologies where permitted;

from Shopify and other service providers that support our storefront, checkout, communications, reviews, fulfillment and related operations;

from advertising and analytics partners when those services are activated and used in accordance with applicable consent requirements.

3. How and Why We Use Personal Information

We process personal information only where we have an appropriate legal basis under applicable law. Depending on the processing activity, the legal basis may include performance of a contract, compliance with a legal obligation, our legitimate interests, or your consent.

Orders and contract performance (GDPR Art. 6(1)(b)): processing orders and payments, arranging fulfillment and shipping, handling returns, refunds and customer requests, and providing the products and services you request.

Legal obligations (GDPR Art. 6(1)(c)): complying with tax, accounting, consumer-protection, record-keeping and other applicable legal requirements.

Customer service and business operations (GDPR Art. 6(1)(f)): responding to inquiries, translating or drafting communications, improving support workflows, maintaining and improving the store, preventing misuse, and protecting our legal and commercial interests, where those interests are not overridden by your rights.

Security and fraud prevention (GDPR Art. 6(1)(f), and where applicable Art. 6(1)(c)): detecting, preventing and investigating fraud, abuse, security incidents and unlawful activity.

Marketing and non-essential tracking (GDPR Art. 6(1)(a), where consent is required): sending optional marketing communications and using non-essential advertising or tracking technologies. You may withdraw consent at any time without affecting processing carried out before withdrawal.

4. Cookies, Analytics and Advertising Technologies

Our store may use cookies and similar technologies that are necessary for the operation of the website and checkout. Non-essential analytics, advertising or tracking technologies are used only in accordance with applicable consent requirements.

If and when enabled, these technologies may include Meta advertising technologies (including the Meta Pixel) and TikTok advertising technologies. These services may process information such as device identifiers, IP address, browser information, website interactions, purchases or other events for measurement, attribution and advertising purposes. Where consent is legally required, these technologies should not be activated for a visitor until the required consent has been obtained.

You can manage available privacy choices through the cookie/privacy controls provided on our store. Where available, customers may also use rovaro-store.com/pages/data-sharing-opt-out.

5. Service Providers and Other Recipients

We may disclose personal information to service providers and other recipients where necessary for the purposes described in this Privacy Policy. These may include:

Shopify, which provides the ecommerce platform, hosting, storefront, checkout and related services.

GemPages, where used to build and operate storefront pages and related functionality.

Judge.me, where used to provide product-review functionality.

CJdropshipping and relevant logistics or shipping providers, where necessary to fulfill and deliver orders, process fulfillment issues, or handle related requests.

Microsoft services, including Outlook, where used for business email and customer communications.

Payment providers selected or made available through our checkout, to process payments and related transactions.

Professional advisers, authorities or other recipients where disclosure is necessary to comply with law, establish or defend legal claims, or protect our rights.

We disclose only information that is reasonably necessary for the relevant service or purpose. Service providers may process personal information under their own terms and privacy documentation, depending on their role under applicable law.

6. AI-Assisted Customer Support and OpenAI

We may use artificial-intelligence tools, including services provided by OpenAI, to assist with business and customer-support tasks. For example, we may use such tools to translate customer communications, draft or improve replies, summarize support requests, analyze return or order-related issues, and generate possible solutions.

Where necessary for these purposes, information contained in customer emails, screenshots, support messages or order-related materials may be submitted to an AI service provider. This information may include personal information visible in those materials. We aim to limit the information shared to what is reasonably necessary for the relevant task and, where practicable, redact or omit information that is not needed.

For EEA/UK processing, we rely on an appropriate legal basis for the underlying support activity, typically performance of a contract where the processing is necessary to handle an order or customer request, or our legitimate interests in efficiently providing customer support and operating our business, subject to applicable balancing requirements. If use of an AI service requires another legal basis in a particular situation, we will rely on that basis as required by law.

7. Relationship with Shopify

Our Services are hosted by Shopify. Shopify processes information about access to and use of the store in order to provide the ecommerce platform and related services. Information submitted through the store may therefore be transmitted to Shopify and to service providers involved in providing the Services. In some circumstances, including certain enhanced Shopify services, Shopify may process personal information for its own purposes as described in Shopify's applicable privacy documentation.

More information about Shopify's processing and available privacy rights can be found in Shopify's Consumer Privacy Policy and privacy portal.

8. International Data Transfers

Some of our service providers may process or store personal information outside Germany or the European Economic Area. Where personal information is transferred to a country that has not been recognized as providing an adequate level of data protection, we rely, where required, on appropriate safeguards such as the European Commission's Standard Contractual Clauses or another legally recognized transfer mechanism.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to perform contracts, provide customer support, comply with legal, tax and accounting obligations, resolve disputes, prevent fraud and establish or defend legal claims. Retention periods may therefore differ depending on the type of information and the applicable legal requirements.

10. Security

We use reasonable organizational and technical measures intended to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Privacy Rights

Depending on applicable law and your location, you may have rights concerning your personal information. For individuals in the EEA, these may include the right to request access, rectification, erasure, restriction of processing, data portability, and, where processing is based on legitimate interests, the right to object. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

You may exercise applicable rights by contacting us at support@rovaro-store.com. We may need to verify your identity before fulfilling a request where permitted or required by law.

You also have the right to lodge a complaint with a competent data protection supervisory authority. If you are in the EEA, you may contact the supervisory authority in the country or German federal state relevant to you.

12. Marketing Communications

If you receive promotional email from us, you may unsubscribe using the unsubscribe mechanism provided in the message or by contacting us. Even if you opt out of marketing, we may still send non-promotional communications that are necessary for orders, customer service, security or legal purposes.

13. Children's Privacy

The Services are not directed to children. We do not knowingly collect personal information from children in circumstances prohibited by applicable law. If you believe a child has provided personal information to us unlawfully, please contact us so that we can review the matter and take appropriate action.

14. Third-Party Websites and Services

Our website may contain links to websites or services operated by third parties. Their privacy practices are governed by their own policies. We are not responsible for the privacy or security practices of third-party websites that we do not control.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, service providers, legal requirements or other operational reasons. When we update it, we will revise the 'Last updated' date and provide additional notice where required by law.

16. Contact

For questions about this Privacy Policy, our privacy practices, or requests concerning your personal information, contact:

roVAro

Manh Quang Dong

Am Gartetalbahnhof 6, 37073 Göttingen, Germany

support@rovaro-store.com