Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy explains how QERVALIN, LLC collects, uses, protects, stores, and shares personal information when customers visit or place an order through qervalin.com. It applies to information provided directly by customers as well as limited technical information generated through normal use of our website.

By using our website, customers acknowledge the data practices described in this policy, subject to any rights that cannot be limited under applicable privacy or consumer protection law.

2. Information We Collect

We may collect information such as a customer's name, billing and shipping address, email address, telephone number, order details, transaction references, account information, customer service communications, and information reasonably necessary to process or support an order.

We may also receive limited technical information such as IP address, browser type, device information, approximate location derived from network data, pages visited, access times, and website interaction information.

3. Information Customers Provide

Personal information is primarily collected when a customer places an order, submits a contact form, communicates with customer service, requests a return or refund, or otherwise provides information voluntarily through qervalin.com.

We request only information that is reasonably relevant to the purpose for which it is collected.

4. How We Use Personal Information

Personal information may be used to process orders, confirm payments, arrange fulfillment, provide order tracking, respond to inquiries, manage returns and refunds, prevent fraudulent activity, maintain transaction records, resolve payment disputes, and comply with applicable legal obligations.

We may also use limited website activity information to maintain website functionality, identify technical problems, improve security, and understand general website performance. Personal information is not used for unrelated purposes without an appropriate legal basis.

5. Legal Bases for Processing

Where the General Data Protection Regulation, commonly referred to as the GDPR, applies, personal information may be processed because it is necessary to perform a contract, comply with a legal obligation, protect legitimate business interests, prevent fraud, establish or defend legal claims, or because valid consent has been provided where consent is required.

When processing is based on legitimate interests, we consider whether those interests are proportionate and whether the rights and reasonable expectations of the individual require additional protection.

6. Payment Information

Payments available through our website may be processed by Stripe and PayPal. These payment providers receive and process payment information according to their own systems, security standards, and privacy practices.

QERVALIN, LLC does not intentionally store complete payment card numbers, card verification values such as CVV or CVC codes, or other sensitive authentication data on its own website database. We may receive limited transaction information such as payment status, transaction identifiers, payment method type, refund status, and information needed to verify or reconcile an order.

7. Payment Security

Payment pages and website communications are protected using secure connections designed to reduce unauthorized interception of data. Our website uses HTTPS and SSL/TLS encryption for information transmitted between a customer's browser and the website.

Payment information handled by Stripe or PayPal is transmitted through the payment provider's secure infrastructure. Access to transaction-related information available to us is limited to personnel or systems that require that information for legitimate order, support, fraud-prevention, refund, accounting, or dispute-handling purposes.

8. Website and Data Security Measures

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, disclosure, alteration, misuse, loss, or destruction.

These measures may include HTTPS connections, SSL/TLS encryption, restricted administrative access, account authentication controls, software maintenance, security updates, limited user permissions, controlled access to customer records, and monitoring for unusual or unauthorized activity.

No online system can guarantee absolute security, but security measures are reviewed and adjusted when reasonably necessary to address operational and technical risks.

9. Data Minimization and Access Control

We seek to collect only the personal information reasonably necessary to complete transactions, provide requested services, meet legal obligations, and protect our website and payment processes.

Access to customer and transaction information is restricted according to operational need. Individuals who do not require personal information for their responsibilities should not have routine access to that information.

10. Order, Shipping, and Fulfillment Information

Information necessary to fulfill an order may be shared with service providers involved in payment processing, order fulfillment, shipping, tracking, hosting, communications, or related operational functions.

We ship internationally to supported destinations. Detailed shipping terms, delivery estimates, tracking information, and related conditions are described separately in our Shipping Policy.

11. Service Providers and Third Parties

We may use trusted third-party providers to support payment processing, website hosting, security, communications, analytics, delivery, fraud prevention, and other functions required to operate qervalin.com.

These providers may receive only the information reasonably necessary to perform the relevant service. We do not authorize service providers to use customer personal information for unrelated independent purposes where such use would be inconsistent with applicable law or our contractual arrangements.

12. Fraud Prevention and Payment Disputes

Transaction and order information may be reviewed or disclosed when reasonably necessary to prevent fraud, investigate unauthorized activity, respond to payment inquiries, process chargebacks, or provide supporting evidence in connection with a payment dispute involving Stripe, PayPal, a financial institution, or another authorized payment participant.

Relevant evidence may include order records, payment references, delivery or tracking records, customer communications, refund records, website policy acknowledgments, and other information reasonably connected with the transaction. Only information relevant to the review or dispute should be used for that purpose.

13. Data Retention

Personal information collected through qervalin.com is generally retained for no longer than one year from the date on which it was collected or from the customer's most recent relevant transaction or communication, depending on the context.

During that period, information may be retained to support orders, refunds, payment disputes, fraud prevention, security review, customer service, and other legitimate operational purposes. After the applicable retention period ends, information is deleted, anonymized, or otherwise removed from active use in accordance with our data handling procedures, subject to any overriding obligation imposed by applicable law.

14. Cookies and Similar Technologies

Our website may use cookies or similar technologies that are necessary for website operation, shopping functions, session management, security, payment processing, and basic performance measurement.

Where applicable law requires consent for non-essential cookies, those technologies should be used only after the required choice or consent has been obtained.

15. GDPR and Privacy Rights

Where the GDPR or another applicable privacy law provides relevant rights, individuals may have the right to request access to their personal information, correction of inaccurate information, deletion, restriction of processing, data portability, or objection to certain processing.

Where processing is based on consent, consent may be withdrawn where applicable without affecting processing that was lawful before withdrawal. A request may be subject to reasonable identity verification and any limitations or exceptions permitted by law.

Privacy requests may be submitted to team@qervalin.com or through our Contact Us page.

16. Returns, Refunds, and Customer Communications

When a customer contacts us regarding a return, refund, damaged order, incorrect item, or other order issue, we may retain the information reasonably necessary to review the request, communicate with the customer, document the outcome, and process an approved refund.

Return and refund eligibility, applicable time limits, item condition requirements, return costs, and refund procedures are described in our Return & Refund Policy. Information provided during a return or refund request is handled in accordance with this Privacy Policy.

17. Policy Updates and Contact

We may update this Privacy Policy when necessary to reflect changes in our website, payment methods, service providers, security practices, legal requirements, or operational procedures. The current version published on qervalin.com will govern the processing described here from its effective date.

Questions about this Privacy Policy, personal information, security practices, or privacy rights may be directed to team@qervalin.com or submitted through our Contact Us page.