Privacy Policy
Data controller
The data controller for personal information processed on krevalo.co is:
Pedroso Digital Ventures LLC
d/b/a Krevalo
Registered in Florida, USA
EIN: 98-1892153
Email: legal@krevalo.co
Data we collect
Information you provide
- Account & order data: name, email, phone, shipping address, billing address
- Payment data: processed by our PCI-DSS-compliant payment providers (Stripe, PayPal, Klarna). We do not store full card numbers.
- Communications: content of emails or messages you send us
- Newsletter subscription: email address, if you opt in
Information collected automatically
- Device & browser data: IP address, browser type, operating system, screen size
- Usage data: pages visited, time on site, referring URL, clickstream
- Cookies: see our Cookie Policy
How we use your data
- Processing and shipping your orders (including customs clearance for DDP)
- Customer support and responding to your questions
- Sending order confirmations, shipping notifications, and return information
- Fraud prevention and security
- Improving our website and products through aggregated analytics
- Marketing communications, only with your consent (you can withdraw at any time)
- Legal compliance (tax, customs, accounting)
Legal basis for processing
| Processing | Legal basis (GDPR Art. 6) |
|---|---|
| Order fulfilment & shipping | Contract (6.1.b) |
| Customer support | Contract / Legitimate interest (6.1.b / 6.1.f) |
| Marketing emails | Consent (6.1.a) |
| Analytics & tracking cookies | Consent (6.1.a) |
| Fraud prevention | Legitimate interest (6.1.f) |
| Tax & accounting records | Legal obligation (6.1.c) |
Sharing & processors
We share personal data only with vetted processors under strict Data Processing Agreements. Current processors include:
- Shopify Inc. — e-commerce platform, order data (Canada; SCCs in place)
- Stripe / PayPal / Klarna — payment processing
- DHL / DPD / GLS — parcel delivery
- Klaviyo — email marketing (USA; SCCs in place)
- Google LLC — analytics (consent-based only; anonymised IP)
- Meta Platforms — advertising (consent-based only)
- Our fulfilment partner — EU warehouse and duty-paid logistics
We never sell your personal data.
Retention
- Order data: 10 years (EU tax/accounting obligations)
- Account data: for the life of your account, plus 2 years
- Marketing consent: until you unsubscribe, plus 3 years for compliance audit
- Support emails: 3 years
- Analytics data: 14 months maximum
Your rights
Under GDPR, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data, subject to our legal retention obligations (Art. 17)
- Restrict processing (Art. 18)
- Portability — receive your data in a machine-readable format (Art. 20)
- Object to processing based on legitimate interest or direct marketing (Art. 21)
- Withdraw consent at any time, without affecting prior lawful processing
- Lodge a complaint with your local data protection authority
To exercise any of these rights, email legal@krevalo.co. We respond within 30 days (usually within 1 week).
Cookies
For a detailed breakdown of what cookies we use and how to control them, see our Cookie Policy.
Contact & Data Protection
Privacy contact: legal@krevalo.co
EU representative (Art. 27): appointed — details available on request
Supervisory authority: you may lodge a complaint with your national DPA. For Germany: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI).