Privacy policy
Privacy Policy
Last updated: 23.08.2026
This Privacy Policy explains how rouvie ("we," "us," "our") collects, uses, and protects your personal data when you visit or shop at rouvie.com (the "Site"), in accordance with the EU General Data Protection Regulation (GDPR) and, where applicable, the UK GDPR.
1. Who we are
rouvie Dzesika Paulina Malter Walther-von-Cronberg-Platz 11 60594 Frankfurt am Main, Germany Email: rouviewhyte@icloud.com
We are the controller responsible for the personal data described in this policy.
2. What data we collect
Depending on how you interact with the Site, we may collect:
- Order data: name, billing and shipping address, email address, phone number (if provided), order history
- Payment data: processed directly by our payment providers at checkout — we do not store full card numbers
- Technical data: IP address, browser type, device information, pages visited, referring URLs, collected via cookies and similar technologies
- Communications: information you provide when you contact us by email
3. Why we process your data
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing and fulfilling your order, customer service | Art. 6(1)(b) — performance of a contract |
| Complying with tax and accounting obligations | Art. 6(1)(c) — legal obligation |
| Fraud prevention and site security | Art. 6(1)(f) — legitimate interest |
| Advertising and retargeting via Meta and TikTok (see Section 6) | Art. 6(1)(a) — your consent |
4. Hosting & platform
Our store is hosted and operated on Shopify, provided by Shopify Inc. / Shopify International Limited. Shopify processes personal data on our behalf as a data processor and may store data on servers outside the EU/EEA (including the US and Canada), safeguarded by Standard Contractual Clauses and Shopify's own data processing terms. See Shopify's privacy policy: https://www.shopify.com/legal/privacy
5. Payment processing
Payments are handled by the payment providers shown at checkout (e.g. Shopify Payments, PayPal, and/or others). These providers process your payment data under their own privacy policies and may be located outside the EU/EEA. We never see or store your full card details.
6. Cookies, advertising & tracking pixels
We use cookies and similar technologies to run the Site and, with your consent, for advertising and analytics. Where required by law, non-essential cookies are only set after you give consent via our cookie banner, which you can withdraw at any time.
Meta (Facebook/Instagram) Pixel We use the Meta Pixel, provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). It helps us measure ad performance and show you relevant ads on Facebook and Instagram based on your visit to our Site. This may involve transferring data to Meta Platforms, Inc. in the United States. You can manage your ad preferences at facebook.com/adpreferences or object via our cookie settings.
TikTok Pixel We use the TikTok Pixel, provided by TikTok Information Technologies UK Limited / TikTok Pte. Ltd. It helps us measure ad performance and show you relevant ads on TikTok based on your visit to our Site. This may involve transferring data outside the EU/EEA. You can manage your ad preferences in your TikTok account settings or object via our cookie settings.
7. Who we share your data with
We share personal data only with:
- Service providers processing data on our behalf (hosting, payments, shipping/fulfillment, the marketing platforms above)
- Tax and legal advisors, where necessary
- Authorities, where legally required
We do not sell your personal data.
8. International data transfers
Where data is transferred outside the EU/EEA (e.g. to service providers in the US or UK), we rely on appropriate safeguards such as the EU Standard Contractual Clauses or the provider's own compliance framework (e.g. the EU-U.S. Data Privacy Framework, where applicable).
9. How long we keep your data
We retain personal data only as long as necessary for the purposes above, including statutory retention periods under German commercial and tax law (typically 6–10 years for invoices and accounting records).
10. Your rights
Under the GDPR, you have the right to:
- Access the data we hold about you (Art. 15)
- Request correction of inaccurate data (Art. 16)
- Request erasure ("right to be forgotten") (Art. 17)
- Request restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest or direct marketing (Art. 21)
- Withdraw consent at any time, without affecting processing carried out before withdrawal (Art. 7(3))
To exercise any of these rights, contact us at rouviewhyte@icloud.com.
You also have the right to lodge a complaint with a supervisory authority, in particular:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI) Gustav-Stresemann-Ring 1 65189 Wiesbaden, Germany
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version is always available on this page.