Salvya
Privacy policy
Effective date: 12 May 2026 · Version: 1.0
This Privacy Policy explains how Salvya (“Salvya,” “we,” “us”) collects, uses, shares, and protects personal data when you use our websites, mobile experiences, and related services (the “services”). It should be read with our Terms of Service, Cookie policy, and programme-specific terms where they apply.
1. Who is responsible for your data
Salvya is the data controller for personal data processed through the services, except where we act as a processor on behalf of artists, creators, or partners as described in separate agreements. Salvya is operated as a registered sole trader (auto-entrepreneur) in France. Contact details for privacy requests are listed in section 11 below.
2. Personal data we collect
Depending on how you use Salvya, we may process:
- Account data — name, email, phone, password hash, profile details, and role (customer, creator, admin).
- Order & checkout data — delivery address, order history, payment method choice, and transaction references (we do not store full card numbers).
- Communications — support messages, marketing preferences, and transactional emails (order updates, account notices).
- Usage & device data — pages viewed, approximate region, language, referral source, and technical logs needed for security and performance.
- Creator programme data — application details, payout information, and performance metrics where you join as a creator or influencer.
3. Why we use your data
We process personal data to:
- provide accounts, storefront browsing, bag, and checkout;
- authenticate sign-in (including Google OAuth where you choose it);
- process and fulfil orders, payments, refunds, and delivery;
- prevent fraud, abuse, and security incidents;
- send service messages and, where permitted, marketing you opted into;
- improve the services, analytics, and creator tools;
- comply with legal, tax, and accounting obligations.
Where required by law (for example in the EEA or UK), we rely on contract performance, legitimate interests, legal obligation, or your consent — especially for optional cookies and marketing. You can withdraw consent where applicable without affecting lawfulness of prior processing.
4. Who we share data with
We use trusted service providers that process data on our instructions, including hosting (for example Vercel), database and authentication (for example Supabase), payments (for example PayPal), email delivery (for example Resend), and analytics or advertising tools where enabled and consented. We may also share data with carriers for shipping, professional advisers, or authorities when required by law.
We do not sell your personal data. Third parties may set their own cookies when you interact with their widgets — see our Cookie policy and Cookie settings.
5. How long we keep data
We retain personal data only as long as needed for the purposes above — for example account data while your account is active, order records for statutory periods, and security logs for a limited window. When data is no longer required, we delete or anonymise it unless law requires longer retention.
6. Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict, or object to processing, data portability, and to withdraw consent. You may also lodge a complaint with your local supervisory authority. To exercise rights, contact us using the channels in section 12. We may need to verify your identity before responding.
7. International transfers
Our providers may process data outside your country (including the United States). Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by our vendors.
8. Children
Salvya is not directed at children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided data, contact us so we can delete it.
9. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure; please use a strong password and keep credentials private.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the effective date. Where changes are material, we will provide additional notice where the law requires it.
11. Contact
For privacy questions or requests, email rapport@salvyastore.com or visit our contact page. For order-specific issues, use support@salvyastore.com or the details in your order confirmation when available.