Privacy policy

Last updated: September 11, 2026

Pevnori operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Pevnori is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, disclose and otherwise process your personal information when you visit or use the Services, make a purchase or other transaction, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, use or disclosure of personal information, this Privacy Policy will control.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood how we process personal information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we mean information that identifies you or can reasonably be linked to you. It does not include information that has been anonymised or de-identified so that it can no longer reasonably identify you.

Depending on how you interact with the Services and as permitted or required by applicable law, we may collect or process the following categories of personal information.

Contact information: Your name, email address, telephone number, billing address and shipping address.

Order and transaction information: Products you view, add to your cart or purchase, order history, returns, exchanges, cancellations and transaction details.

Payment-related information: Billing information, payment method and payment confirmation. Full payment-card details are generally processed by Shopify and/or our payment providers rather than stored directly by Pevnori.

Communications: Information you provide when contacting us for customer support or otherwise communicating with us.

Device and technical information: Your IP address, browser type, device identifiers, network information and similar technical information.

Usage information: Information about how and when you access, browse or interact with the Services.

Marketing and preference information: Your marketing preferences and interactions with marketing communications or advertisements.

Certain information, such as your name, contact details, shipping address and payment-related information, is necessary for us to accept and fulfil an order. If you do not provide information required to enter into or perform a contract with you, we may be unable to process or deliver your order.

Personal Information Sources

We may collect personal information directly from you, including when you place an order, contact us, subscribe to marketing communications or otherwise provide information to us.

We may collect personal information automatically through the Services, including through your device and through cookies and similar technologies.

We may receive personal information from Shopify and service providers that help us operate our business, including payment processors, fulfilment providers, delivery companies, analytics providers and technology providers.

Where applicable, we may also receive information from advertising or marketing services in connection with your interactions with our advertisements or Services.

How We Use Your Personal Information and Our Lawful Bases

Depending on how you interact with the Services, we may use your personal information for the following purposes.

Providing and Fulfilling the Services

We use personal information to process and fulfil orders, process payments, arrange shipping and delivery, provide order confirmations and updates, process returns, refunds or exchanges, respond to customer-service requests and otherwise provide the products and Services you request.

Where UK data protection law applies, we generally process this information because it is necessary to enter into or perform our contract with you.

Marketing and Advertising

We may use personal information to send marketing communications, measure the effectiveness of our marketing, understand interest in our products and, where enabled, provide or measure advertising.

Where consent is required by applicable law, we rely on your consent.

Where permitted by applicable law, we may also rely on our legitimate interests in promoting and improving our business, understanding our customers and marketing our products, provided those interests are not overridden by your rights and interests.

You can opt out of promotional emails at any time using the unsubscribe link included in those communications.

Security and Fraud Prevention

We use personal information to detect and prevent fraud, verify transactions, protect customers, secure our Services, investigate suspicious or unlawful activity and protect our rights and property.

Where UK data protection law applies, we generally rely on our legitimate interests in protecting our customers, business and Services and, where applicable, compliance with our legal obligations.

Communicating With You

We use personal information to respond to enquiries, provide customer support and communicate with you about orders or our business relationship.

Depending on the circumstances, we rely on performance of our contract with you and/or our legitimate interests in operating our business and providing customer support.

Legal and Regulatory Purposes

We may process personal information where necessary to comply with applicable laws, tax and accounting requirements, respond to valid legal requests, establish, exercise or defend legal claims, investigate violations of our policies or protect our legal rights.

Where UK data protection law applies, we generally rely on compliance with a legal obligation and, where appropriate, our legitimate interests in protecting and enforcing our legal rights.

How We Disclose Personal Information

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.

Shopify: We provide relevant information to Shopify in connection with hosting, operating and supporting our ecommerce Services.

Payment providers: Relevant information may be provided to payment providers to process payments and help prevent fraudulent transactions.

Fulfilment, logistics and delivery providers: Relevant order and contact information may be provided to third parties where necessary to prepare, fulfil, transport and deliver your order.

Technology and service providers: We may use third parties that provide services such as website functionality, cloud services, customer support, analytics and other business functions.

Advertising and marketing services: Where we use such services and where permitted by applicable law, relevant information may be processed to deliver, measure or improve advertising and marketing.

At your direction or with your consent: We may disclose information where you ask us to do so or otherwise consent to the disclosure.

For legal reasons: We may disclose information where required by applicable law or legal process or where reasonably necessary to protect our rights or the rights of others.

Business transactions: Personal information may be transferred in connection with a sale, transfer, restructuring or other transaction involving all or part of our business.

Our service providers process personal information in connection with the services they provide and subject to applicable legal and contractual requirements.

Certain privacy laws use defined terms such as "sale", "sharing" or "targeted advertising" to describe some advertising-related data disclosures, even where personal information is not sold for money.

Where applicable, you may exercise relevant opt-out rights at:

https://pevnori.com/pages/data-sharing-opt-out

Relationship With Shopify

The Services are hosted by Shopify.

Shopify processes personal information relating to your access to and use of the Services in order to provide ecommerce, payment, security and other functionality.

Information submitted through the Services may therefore be processed by Shopify and relevant service providers, including in countries other than the country in which you live.

Shopify may also process certain information for its own purposes as described in the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

Where Shopify acts as an independent controller of personal information, Shopify is responsible for that processing.

Additional information about Shopify's privacy practices and applicable rights is available through the Shopify Privacy Portal:

https://privacy.shopify.com/en

Third-Party Websites and Links

The Services may contain links to websites or online platforms operated by third parties.

If you follow a link to a website that we do not control, you should review that third party's privacy practices and terms.

We are not responsible for the privacy or security practices of independent third-party websites or platforms.

Information that you choose to make publicly available through third-party websites or social-media platforms may be accessible to others and governed by the applicable third party's policies.

Children's Data

The Services are not directed toward children under 13.

We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe that a child has provided personal information to us, please contact us so that we can take appropriate action.

Security and Retention of Your Information

We use reasonable administrative, technical and organisational measures designed to protect personal information.

However, no security system or method of transmission over the internet can be guaranteed to be completely secure.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including fulfilling and managing orders, maintaining appropriate business records, complying with legal obligations, preventing fraud, resolving disputes and establishing, exercising or defending legal claims.

The appropriate retention period depends on factors including the type of information, why it was collected and applicable legal requirements.

When personal information is no longer reasonably required, we may delete, anonymise or otherwise dispose of it as appropriate.

Your Rights and Choices

Depending on where you live and subject to applicable legal conditions and exceptions, you may have rights concerning your personal information.

Right to Access or Know: You may have the right to request access to personal information we hold about you and obtain a copy of that information.

Right to Correct: You may have the right to request correction of inaccurate personal information.

Right to Delete: You may have the right to request deletion of personal information we maintain about you.

Right to Data Portability: Where applicable, you may have the right to receive certain personal information in a portable format.

Right to Restrict Processing: Where applicable, you may have the right to request restriction of certain processing.

Right to Object: Where applicable, you may object to certain processing based on legitimate interests. You may also object to the use of your personal information for direct marketing.

Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect processing that lawfully occurred before your consent was withdrawn.

US Privacy Choices

Depending on the US state in which you reside and whether applicable privacy law applies, you may have additional rights concerning certain advertising-related uses or disclosures of personal information.

Where applicable, you may exercise relevant opt-out rights at:

https://pevnori.com/pages/data-sharing-opt-out

Where required by applicable law, we recognise applicable Global Privacy Control signals as an opt-out request for the browser or device sending the signal.

Marketing Communications

You may opt out of promotional emails at any time using the unsubscribe link included in those communications.

Even after opting out of marketing, we may continue to send non-promotional communications concerning matters such as your orders, customer service, security or our ongoing business relationship with you.

Exercising Your Rights

You may exercise applicable privacy rights by contacting us using the contact details below or through privacy controls provided through the Services.

We may need to verify your identity before completing certain requests.

Where permitted by applicable law, you may designate an authorised agent to make a request on your behalf. We may require appropriate evidence of that authority.

We will not unlawfully discriminate against you for exercising applicable privacy rights.

We will respond to valid requests within the period required by applicable law.

Where applicable law provides a right to appeal a decision concerning a privacy request, you may submit an appeal by contacting us.

UK and European Privacy Rights

Where UK or European data protection law applies, you may have rights including access, correction, deletion in applicable circumstances, restriction of processing, objection to processing, data portability in applicable circumstances and withdrawal of consent where processing is based on consent.

These rights are subject to applicable legal conditions and exceptions.

Complaints

If you have a complaint about how we handle your personal information, please contact us at hello@pevnori.com.

If UK data protection law applies, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO). Further information is available at ico.org.uk.

International Transfers

Some of the companies and service providers that help us operate the Services are located outside the United Kingdom.

Personal information may therefore be transferred to, stored in or processed in countries outside the country in which you live.

Where UK international data-transfer rules apply, we take steps designed to ensure that the transfer is permitted under applicable data-protection law.

Depending on the circumstances, we may rely on UK adequacy regulations or appropriate safeguards recognised under UK data-protection law, including approved contractual safeguards where applicable.

Where required, we take appropriate steps to assess and protect personal information in connection with such transfers.

You may contact us for further information about safeguards applicable to international transfers of your personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, applicable legal requirements or other operational reasons.

When we update this Privacy Policy, we will post the revised version on our website and update the "Last updated" date.

Where required by applicable law, we will provide additional notice of material changes.

Contact

If you have questions about our privacy practices or this Privacy Policy, or wish to exercise an applicable privacy right, you may contact us at:

Pevnori
74 Greenwood Avenue
London
EN3 5DU
United Kingdom

Email: hello@pevnori.com

For purposes of applicable data-protection laws, Pevnori is responsible for the personal information described in this Privacy Policy.