Privacy Policy
Last updated: 2026-10-03
We collect only what we need to run the store, we never sell your data, and we don't use advertising cookies or share your browsing with any other company.
Who is responsible for your data
Kivella
Israel
Email: kivellastore@gmail.com
What we collect
- Orders: your name, email, phone number (optional), shipping address and what you bought.
- Payments: handled by Grow (Meshulam) or PayPal. We receive a payment confirmation, a reference number and, for card payments, the card brand and last four digits — never the full card number.
- Newsletter: your email address, only if you sign up.
- Messages: what you send us through the contact form or by email.
- Technical data: your IP address and basic request details, used for security (for example to block abuse) and kept for a short time.
- Anonymous visit statistics: which pages are viewed, how long and how far, which buttons are clicked, the cart and checkout steps reached, your device type, browser, country and the website that sent you. This is linked to a random code, not to your name, email or IP address, and nothing typed into a form is recorded.
Why we use it
- To process, ship and support your order (needed to perform our contract with you).
- To keep accounting and tax records (a legal obligation).
- To keep the store secure and prevent fraud (our legitimate interest).
- To understand how the store is used and make it easier to buy from (our legitimate interest), using the anonymous statistics above.
- To send you news and offers, only if you asked for them (your consent, which you can withdraw at any time).
Who we share it with
Only with the services we need to run the store: Grow (Meshulam) and PayPal (payments), delivery companies (to ship your order), our hosting provider (where this website runs) our email provider (to answer your messages) and an internal order-notification service (Discord, used only by our team to prepare and ship your order: it receives your name, shipping address, phone and what you bought). They may process data outside your country, under appropriate safeguards. We do not sell your personal information or share it for targeted advertising.
How long we keep it
Order records are kept for as long as accounting and tax laws require (usually up to 7 years). Newsletter emails are kept until you unsubscribe. Messages are kept for up to 2 years. Security logs are kept only briefly.
Your rights
You can ask to see, correct, delete or receive a copy of your data, object to how we use it, or withdraw your consent. Email kivellastore@gmail.com and we will reply within 30 days. You can also complain to your data protection authority (in Israel: the Privacy Protection Authority; in the EU: your national supervisory authority; in the UK: the ICO). Residents of California and other US states with privacy laws have the same rights, and we do not sell or share personal information. You are not legally required to give us your data, but we can't process an order without it.
Marketing emails
We only send news and offers if you opted in. Every email includes a one-click unsubscribe, in line with anti-spam laws such as Israel's Communications Law (section 30A), the EU ePrivacy rules and the US CAN-SPAM Act.
Cookies and local storage
We use no advertising or third-party tracking cookies. Your browser stores what the store needs to work: your cart and your age confirmation, plus two random codes for our own anonymous visit statistics (one for you as a visitor, one for the current visit). They are kept in your browser's local storage, never sent to another company, and expire with the retention period below. A login cookie is used for store staff only. Fonts are served from our own server. When you pay, the privacy and cookie policy of the payment provider you chose (Grow or PayPal) applies on its payment page.
You can switch the statistics off. They are never recorded if your browser sends “Do Not Track” or Global Privacy Control. You can also turn them off in this browser. Visit statistics are deleted automatically after 13 months.
Age
This store is for adults (18+). We do not knowingly collect data from anyone under 18.
Security
The site is encrypted (HTTPS), card payments are handled entirely by the payment provider (Grow or PayPal) on their PCI-certified systems, and access to order data is restricted and password protected.
Changes
If we change this policy we will update the date at the top of this page.