Privacy policy

Last updated: September 29, 2025

1) Introduction

This Privacy Policy explains how RVA Consulting Ltd (“RVA Consulting Ltd”, “we”, “us”, “our”) collects, uses, shares, and protects your personal information when you visit www.rovebottle.com (the “Site”) and when you purchase or interact with our products and services.

RVA Consulting Ltd is the data controller for personal information processed via the Site.

  • Legal entity: RVA Consulting Ltd (Company Number 15082610)

  • Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9BH, United Kingdom

  • Privacy contact email: info@rovebottle.com

  • No phone support: We do not provide telephone support; please contact us by email.

The Site is built on Shopify, which provides our online storefront and related services. Shopify processes certain personal data on our behalf to operate the Site (hosting, checkout, security, analytics necessary for running the store). For details of Shopify’s privacy practices and security, please refer to Shopify’s own privacy documentation.

2) Personal Data We Collect

We collect personal information in the following categories. The examples below are illustrative and may vary depending on how you interact with us.

A. Device Information (collected automatically)

  • Examples: browser type/version, IP address, time zone, cookie identifiers, device identifiers, pages or products viewed, search terms, clicks, and how you interact with the Site.

  • Purposes: operate the Site, load pages correctly, prevent fraud, maintain security, measure performance, and improve user experience (analytics).

B. Order Information (provided by you)

  • Examples: name, billing and shipping address, email address, phone number, order contents, delivery preferences, and payment information (processed by our payment providers; we do not store full card numbers).

  • Purposes: process and fulfil orders, arrange delivery, provide invoices and order confirmations, communicate with you, screen for potential risk or fraud, provide customer support, comply with tax and accounting obligations, and maintain our transaction records.

C. Customer Support Information

  • Examples: the content of your emails to us, your name and contact details, and any documents or photos you provide.

  • Purposes: respond to your requests, manage returns or warranty matters, and improve our services.

D. Marketing, Analytics, and Advertising Data (subject to consent where required)

  • Examples: cookie and similar technology data used for analytics (e.g., Google Analytics) and advertising (e.g., Meta/Facebook technologies), your marketing preferences, and interactions with our marketing emails or ads.

  • Purposes: understand Site performance, improve products and content, and (with your consent, where required) deliver and measure personalised advertising and send marketing communications.

3) How We Use Your Personal Data

We use personal data to:

  • Provide, operate, and improve the Site and our services.

  • Process your purchases and deliver your orders; handle payments, returns, and refunds.

  • Communicate with you about orders, support, and updates.

  • Maintain the security of the Site, prevent abuse and fraud, and diagnose issues.

  • Perform analytics to understand performance and enhance user experience.

  • Send marketing communications with your consent (where required) and honour your choices at any time.

  • Comply with legal, regulatory, and tax obligations and to establish, exercise, or defend legal claims.

4) Sharing Your Personal Data

We share personal data with trusted service providers and other recipients, strictly for the purposes described above:

  • Shopify (store platform/hosting): to operate our storefront, checkout, and related services.

  • Payment processors (e.g., Stripe, PayPal): to securely process payments; we do not store full card details.

  • Shipping and fulfilment partners: to prepare, ship, and deliver your orders. Some partners are located outside the UK/EEA.

  • Analytics and advertising partners (e.g., Google, Meta): to measure performance and, where you consent, to deliver personalised advertising.

  • Customer communications providers (email/SMS tools): to send transactional and marketing messages, subject to your preferences.

  • Professional advisers and auditors: for legal, tax, and compliance purposes.

  • Authorities and third parties when required by law: to comply with legal process or to protect our rights, users, or others.

  • Successors: in connection with corporate transactions (merger, acquisition, asset sale), subject to this Policy’s protections.

We require our processors to implement appropriate security measures and to process personal data only on our instructions.

5) Lawful Basis for Processing (UK & EU GDPR)

For individuals in the United Kingdom or European Economic Area, we rely on the following legal bases:

  • Performance of a contract: to process and fulfil your orders; provide customer service.

  • Legitimate interests: to secure our services; prevent fraud/abuse; perform essential analytics and service improvement; respond to enquiries; and manage business operations. We balance these interests against your rights and expectations.

  • Consent: for non-essential cookies/trackers (analytics/advertising where required) and for sending marketing emails/SMS. You may withdraw consent at any time.

  • Legal obligation: to comply with tax, accounting, and other legal requirements.

6) Your Rights (UK & EU GDPR)

If you reside in the UK or EEA, you have the right to:

  • Access your personal data and obtain a copy.

  • Rectify inaccurate or incomplete data.

  • Erase your data (“right to be forgotten”), in applicable cases.

  • Restrict processing in certain circumstances.

  • Port your data in a structured, commonly used, machine-readable format.

  • Object to processing based on legitimate interests (including profiling for security or analytics) and to processing for direct marketing at any time.

To exercise your rights, contact info@rovebottle.com. We may need to verify your identity. We aim to respond within one month (extendable by two months where requests are complex or numerous).

Complaints. You may lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). We would appreciate the chance to address your concerns before you contact an authority.

7) Cookies and Similar Technologies

We use cookies and similar technologies to operate the Site and, with your consent where required, for analytics and advertising.

  • Strictly necessary cookies: essential for the Site (e.g., checkout, security).

  • Performance/analytics cookies: help us understand usage to improve the Site.

  • Advertising/marketing cookies: personalise ads and measure their effectiveness.

You can manage your preferences through our cookie banner (where available) or your browser settings. Disabling certain cookies may affect Site functionality. For more detail, please refer to our cookie notices or settings available on the Site.

8) International Data Transfers

We may store and process your personal data in countries outside the UK/EEA, including where our service and fulfilment partners operate. Some of these countries may not provide the same level of data protection.

When transferring personal data internationally, we implement appropriate safeguards, such as:

  • European Commission Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum/Agreement; and

  • Additional measures (e.g., encryption in transit, access controls, data minimisation) where appropriate.

You may contact us to request more information about our transfer safeguards.

9) Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to meet legal, accounting, or reporting requirements. Typical retention periods include:

  • Order and transaction records: retained to meet tax/accounting and warranty obligations (generally up to 6 years under UK requirements, or longer where legally required).

  • Customer support correspondence: kept for up to 24 months after the last interaction, unless needed longer for dispute resolution.

  • Marketing preferences and contact details: retained until you withdraw consent or opt out, and for a reasonable period thereafter to record your choice (e.g., suppression lists).

  • Security/log data and device information (non-essential analytics where consented): typically up to 12 months, unless needed longer for security or legal reasons.

When retention is no longer necessary, we delete or irreversibly anonymise the data.

10) Minors

Our services are intended for individuals who have reached the age of majority in their place of residence. We do not knowingly collect personal information from children under 13 or, in the EEA, from children under 16 without appropriate consent. If you believe a child has provided personal data to us, please contact info@rovebottle.com so we can delete it.

11) Security

We implement technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

12) Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, or legal requirements. The “Last updated” date at the top indicates when this Policy was most recently revised. If changes are material, we will take appropriate steps to inform you consistent with applicable law.

13) Contact Us

If you have questions about this Policy or how we handle your personal information, please contact:

RVA Consulting Ltd
Company Number: 15082610
71–75 Shelton Street, Covent Garden, London, WC2H 9BH, United Kingdom
Email: info@rovebottle.com
We do not provide telephone support; please reach us by email.