Privacy policy

Last updated: October 18, 2026

1. Who we are

Rove Bottle is a trading name of RVA Consulting Ltd, a private limited company registered in England and Wales, Company No. 15082610. RVA Consulting Ltd is the data controller for the personal information described in this policy.

Our website and store are hosted by Shopify.

2. Information we collect

  • Contact and shipping details: your name, email address, phone number and delivery address.
  • Order history: the products you buy, order dates and amounts.
  • Payment information: handled by our payment processor. We never store full card numbers.
  • Device and browsing data: for example, your IP address, browser type, device type and the pages you visit.
  • Cookies and similar technologies: see section 6.
  • Messages you send us: by email, through our contact form or through our chat.

3. How we collect it

  • Forms: when you use our contact form, or sign up for our emails through a form or the sign-up pop-up.
  • Checkout: when you place an order.
  • Chat and email: when you message us.
  • Cookies: small files stored on your device when you visit our website.
  • Pixels and tags: code from advertising partners that records actions on our website, such as page views and purchases.
  • Session recordings and heatmaps: tools that record how visitors scroll, click and move through our pages.

4. Why we use it, and our legal bases under the UK GDPR

  • To process, ship and deliver your order, take payment and handle returns. Legal basis: performance of a contract.
  • To answer your messages and provide customer support. Legal basis: performance of a contract, or our legitimate interests in responding to you.
  • To keep accounting and tax records. Legal basis: legal obligation.
  • To keep our website secure and prevent fraud. Legal basis: legitimate interests.
  • To measure how our website is used, including session recordings and heatmaps. Legal basis: consent.
  • To show and measure advertising through pixels and tags. Legal basis: consent.
  • To send marketing emails and abandoned-checkout reminders. Legal basis: consent.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that took place before.

5. Who we share it with

We share personal information only with the service providers below, for the purposes described.

  • Shopify: our platform. It hosts our website and store, runs our checkout and Shop Pay, and provides our Shopify Inbox chat.
  • Shopify Payments: processes payments by credit and debit card, Shop Pay, Apple Pay and Google Pay. We never store full card numbers.
  • Google: Google Analytics (website measurement), the Google & YouTube sales channel, Google Merchant Center (product listings) and advertising measurement.
  • Meta: the Facebook and Instagram sales channel and the Meta pixel (advertising and measurement).
  • Pinterest: the Pinterest sales channel and the Pinterest tag (advertising and measurement).
  • Hotjar: session recordings and heatmaps.
  • Klaviyo: marketing emails, our newsletter and abandoned-checkout reminders.
  • Parcel Panel: our order tracking page and shipping notifications.
  • Fulfillment partners and carriers: receive your name, address, phone number and order contents, only to deliver your order.

We don't sell personal information for money. Advertising pixels may count as "sharing" under California law. See section 12.

6. Cookies and similar technologies

We use cookies, pixels, tags and similar technologies.

  • Essential cookies make the website and checkout work. They are always on.
  • Non-essential cookies include analytics, Hotjar session recordings and heatmaps, and advertising pixels from Google, Meta and Pinterest.

Visitors in the United Kingdom see a cookie banner. Non-essential cookies, including Hotjar and advertising pixels, load only after you give consent. You can change your choice at any time through the cookie banner settings.

7. Marketing emails and abandoned-checkout reminders

We send marketing emails only where the law allows. In the United Kingdom, we send them only with your consent. Abandoned-checkout reminders follow the same rules.

When you sign up for our emails, we send you a 10% discount code by email.

Every marketing email includes an unsubscribe link. You can also unsubscribe by contacting us. After you unsubscribe, we keep a suppression record so that we don't email you again.

8. International transfers and safeguards

Your personal information is processed outside the United Kingdom, including:

  • In the United States and Canada, by our platform and service providers.
  • In China, by our fulfillment partners. They receive your name, address, phone number and order contents.

Where required, we protect these transfers with the UK International Data Transfer Agreement, or with the EU standard contractual clauses together with the UK Addendum.

9. How long we keep data

  • Order and transaction records: up to 6 years, to meet UK legal requirements.
  • Support messages: up to 24 months after your last contact with us.
  • Marketing data: until you withdraw your consent. We then keep a suppression record so we don't contact you again.
  • Security logs and device data: typically up to 12 months.

10. How we protect data

Our website and store are hosted by Shopify. Payments are processed by Shopify Payments, and we never store full card numbers. We share personal information with service providers only for the purposes described in section 5.

No method of sending or storing data online is completely secure, so we can't guarantee absolute security.

11. Your rights in the United Kingdom

Under the UK GDPR, you have the right to:

  • Access your personal information.
  • Have inaccurate information corrected (rectification).
  • Have your information erased.
  • Restrict how we use your information.
  • Receive your information in a portable format.
  • Object to how we use your information.
  • Withdraw your consent at any time.

To exercise these rights, email info@rovebottle.com or use our contact form. We answer within one month.

If you are not satisfied, you can complain to the UK Information Commissioner's Office (ICO).

12. Your rights in the United States, including California

Depending on the state where you live, you have the right to:

  • Know what personal information we collect, use and share.
  • Delete your personal information.
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of your personal information for targeted advertising.

We don't sell personal information for money. Advertising pixels from Google, Meta and Pinterest may count as "sharing" under California law. To opt out, use the "Your Privacy Choices" link on our website.

We honor Global Privacy Control signals. If your browser sends one, we treat it as a request to opt out of sharing for that browser.

To make a request to know, delete or correct, email info@rovebottle.com or use our contact form. We may ask for information to verify your identity before we act on your request.

You can make a request through an authorized agent. We won't discriminate against you for exercising any of these rights.

13. Do Not Track

We don't treat browser "Do Not Track" signals as an opt-out. We do honor Global Privacy Control signals, as described in section 12.

14. Children

Our store is not directed at children under 13, or under 16 in the United Kingdom. If you believe a child has given us personal information, please contact us.

15. Changes to this policy

We may update this policy. The date at the top of this page shows when it was last changed.

16. Contact

  • Email: info@rovebottle.com
  • Contact form: rovebottle.com/pages/contact
  • Post: RVA Consulting Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9BH, United Kingdom. This address receives written correspondence only. Never send parcels here.
  • Support hours: Monday to Friday, 9:00 AM–5:00 PM ET (New York time). We reply within one business day.

See also our Terms of Service, Refund Policy and Shipping Policy.