Privacy Policy
Your privacy is personal to us.
COVIELA understands that shopping for intimate wellness products is a private matter. We are committed to handling personal information with discretion, transparency, and care. This Privacy Policy explains how COVIELA ("COVIELA," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit our website, create an account, place an order, subscribe to communications, contact us, or otherwise use our services.
This Policy applies to customers and visitors in the United States and Canada. Additional rights may apply depending on where you live.
1. Who We Are
The organization responsible for the personal information described in this Policy is:
Aura Velvet INC
A Wyoming corporation doing business as COVIELA
Privacy contact: support@coviela.com
Privacy Officer: Privacy Officer
2. Information We Collect
Information you provide
- Contact and identity information: name, email address, telephone number, billing address, and shipping address.
- Account information: username, encrypted password, saved addresses, preferences, wishlist items, and account activity.
- Order and commercial information: products viewed or purchased, cart contents, order value, discounts, shipping status, returns, refunds, and transaction history.
- Payment-related information: payment method, transaction identifier, payment status, billing details, and limited card details made available by payment processors. Sensitive payment credentials are handled by third-party payment processors, and COVIELA uses the limited payment-related information returned by those processors to complete transactions, prevent fraud, process refunds, and maintain required records.
- Communications: messages submitted through customer support, contact forms, product reviews, surveys, returns, warranty requests, or other correspondence.
- Marketing choices: newsletter registration, consent records, communication preferences, and interactions with emails or messages.
Information collected automatically
- IP address, browser, device type, operating system, language, and approximate location derived from IP address.
- Pages and products viewed, referring pages, session activity, cart events, clicks, and website interactions.
- Cookie identifiers, advertising identifiers, security logs, and similar technical information.
- Information used to detect fraud, bots, abuse, and unauthorized account activity.
Information we ask you not to provide
Unless we specifically request it for a legitimate support purpose, please do not send medical records, diagnoses, government identification numbers, Social Security numbers, Social Insurance Numbers, explicit photographs, or detailed information about your sex life or sexual orientation.
3. Sources of Information
We collect personal information from:
- You, when you browse, order, register, subscribe, contact us, or otherwise interact with COVIELA.
- Your browser or device through cookies, logs, and similar technologies.
- Payment processors, fraud prevention services, delivery carriers, and fulfillment providers.
- Marketing, analytics, and advertising providers, subject to applicable consent and opt-out requirements.
- Publicly available sources where permitted by law.
4. How We Use Personal Information
We use personal information for the following purposes:
- Processing payments and completing orders.
- Providing discreet packaging, fulfillment, shipment, delivery updates, returns, refunds, and warranties.
- Creating and maintaining customer accounts and wishlists.
- Providing customer service and responding to requests.
- Securing our website and detecting fraud, abuse, and unauthorized transactions.
- Maintaining, troubleshooting, analyzing, and improving our website and services.
- Complying with tax, accounting, consumer protection, product safety, and other legal obligations.
- Sending marketing communications where you have consented or where otherwise permitted by law.
- Measuring advertising performance and presenting relevant content, subject to applicable cookie consent and opt-out choices.
For Canadian customers, we collect, use, and disclose personal information with meaningful consent, except where permitted or required by law. We limit collection to information reasonably necessary for the purposes identified in this Policy.
5. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients when reasonably necessary:
- Payment and fraud-prevention providers: companies that process payments, verify transactions, manage chargebacks, and help detect fraudulent or unauthorized activity.
- Fulfillment and delivery providers: warehouses, fulfillment partners, postal services, and carriers that pack, route, track, and deliver orders or process returns.
- Website, hosting, security, and technical providers: companies that host, cache, secure, maintain, troubleshoot, or otherwise support our website, store, databases, and related systems.
- Customer support and communications providers: companies that provide contact forms, customer-service tools, transactional email or text delivery, and related communications infrastructure.
- Analytics and advertising providers: companies that help us understand website performance, measure campaigns, prevent advertising fraud, or deliver advertising, subject to your consent and opt-out choices where required.
- Professional advisers and authorities: accountants, lawyers, insurers, auditors, regulators, courts, law enforcement, or government authorities where permitted or required.
- Business transaction recipients: a potential or actual buyer, investor, lender, successor, or adviser in connection with a merger, financing, restructuring, bankruptcy, or sale of all or part of the business, subject to appropriate safeguards.
Sale and sharing
We do not sell personal information for money.
We may disclose identifiers and internet or electronic activity to analytics and advertising providers when those technologies are enabled. Depending on applicable law, this activity may be considered “sharing” for targeted or cross-context behavioral advertising. You may request to opt out by contacting our Privacy Officer using the email listed in Section 1.
6. Intimate Purchase Privacy
We recognize that product browsing, wishlist, cart, and order information involving intimate wellness products may be especially private and may be treated as sensitive information under certain laws.
Unless required to complete a transaction, provide requested support, prevent fraud, or comply with law, COVIELA does not:
- Use intimate product information to infer a customer's sexual orientation, medical condition, diagnosis, or identity.
- Publish or publicly disclose identifiable purchase information.
- Sell identifiable intimate purchase information for money.
- Use customer communications or intimate purchase history for unrelated purposes without appropriate notice and consent.
Orders are shipped using discreet outer packaging. Additional packaging, delivery, return, and billing-descriptor information may be provided at checkout, in order communications, or through customer support.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including fulfillment, support, security, accounting, tax, dispute resolution, and legal compliance. Our intended retention periods are:
| Record | Retention period |
|---|---|
| Orders, payments, refunds, and tax records | For the period required by applicable tax, accounting, payment, consumer-protection, and recordkeeping laws. |
| Customer account | While the account remains active and for a reasonable period afterward, except where longer retention is required for transaction or legal records. |
| Customer service and warranty records | For a reasonable period after the request is resolved or the applicable warranty expires. |
| Marketing records and consent | Until consent is withdrawn or you unsubscribe, plus a limited suppression record to honor your preference and demonstrate compliance. |
| Security and technical logs | For a limited period reasonably necessary for security, troubleshooting, fraud prevention, and legal compliance. |
When information is no longer required, we delete, anonymize, or securely isolate it.
9. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption in transit, restricted administrative access, monitoring, backups, service-provider reviews, and staff confidentiality practices.
No internet transmission or storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and using a unique password.
10. U.S. State Privacy Rights
Depending on your state of residence and subject to legal exceptions, you may have the right to:
- Confirm whether we process your personal information and access that information.
- Correct inaccurate personal information.
- Delete personal information.
- Obtain a portable copy of certain personal information.
- Opt out of the sale of personal information, targeted advertising, or certain profiling.
- Limit certain uses or disclosures of sensitive personal information where applicable.
- Withdraw consent for certain processing.
- Appeal our decision regarding a privacy request where applicable.
- Exercise your rights without unlawful discrimination.
Submit a request by contacting our Privacy Officer using the email listed in Section 1. We may request information reasonably necessary to verify your identity and request. An authorized agent may submit a request where permitted by law, subject to verification of authorization.
To appeal a denied request, email us with the subject line “Privacy Request Appeal.”
11. California Privacy Notice
This section supplements the remainder of this Policy for California residents. In the preceding 12 months, we may have collected the following categories of personal information, depending on how you interacted with us:
| Category | Examples | Business purposes and recipient categories |
|---|---|---|
| Identifiers | Name, email, telephone number, postal address, IP address, account ID, cookie ID. | Orders, accounts, support, security, marketing, analytics; disclosed to payment, fulfillment, delivery, hosting, support, analytics, and advertising providers as applicable. |
| Customer records | Contact, billing, and limited payment-related information. | Payment, fulfillment, returns, fraud prevention, accounting, and legal compliance. |
| Commercial information | Products viewed, cart contents, purchases, returns, wishlist, and order history. | Transactions, support, product improvement, analytics, and marketing subject to applicable choices. |
| Internet or electronic activity | Browsing, clicks, device information, interactions with our website and emails. | Website operation, security, analytics, and advertising subject to applicable choices. |
| Approximate geolocation | Region or city inferred from IP address. | Currency, localization, fraud prevention, analytics, and delivery estimates. |
| Inferences | Likely shopping interests or preferences based on website activity. | Website operation, product recommendations, analytics, or advertising where permitted. We do not intentionally infer sexual orientation or medical conditions from intimate shopping activity. |
| Sensitive personal information | Account credentials, payment information processed by payment providers, and information that may reveal or permit inferences about intimate interests. | Account access, payment, security, fulfillment, and requested services. We do not use sensitive personal information to infer sexual orientation or medical conditions. |
Sale or sharing: We have not sold personal information for money. When analytics or advertising technologies are enabled, we may share identifiers and internet or electronic activity with analytics and advertising providers in a manner that may be considered “sharing” under California law. California residents may request to opt out by contacting our Privacy Officer using the email listed in Section 1.
We do not knowingly sell or share the personal information of consumers under 16 years of age.
12. Washington Consumer Health Data Notice
This section applies to personal information that qualifies as “consumer health data” under the Washington My Health My Data Act. Because COVIELA offers products related to sexual well-being, identifiable product searches, browsing, wishlist activity, purchases, or communications may be treated as consumer health data under Washington law.
Categories of consumer health data we may collect
- Interest in, research concerning, or purchase of intimate or sexual wellness products.
- Product searches, viewed pages, wishlist activity, cart contents, and order history relating to sexual wellness.
- Information voluntarily provided in customer support, reviews, surveys, or product-matching tools that relates to sexual well-being.
- Inferences concerning sexual wellness interests, but only if such inferences are actually created by our systems or service providers.
Sources
We may receive this information directly from you, from your interactions with our website or emails, from cookies and similar technologies, and from processors involved in payments, fulfillment, support, analytics, or advertising.
Purposes
We collect and use this information to provide products or services you request, maintain carts and accounts, process and deliver orders, provide support, handle returns and warranties, prevent fraud, secure our services, comply with law, and perform analytics or marketing where permitted and appropriately consented to.
Sharing
We may share consumer health data with processors needed to provide requested services, including payment processors, hosting and security providers, fulfillment partners, delivery carriers, and customer support providers. We may also share online activity with analytics or advertising providers only as disclosed and where the required consent has been obtained.
Third-party categories: payment processing; website hosting and security; order fulfillment and delivery; customer support; analytics; and advertising.
Specific affiliates receiving consumer health data: None.
COVIELA does not sell consumer health data.
Washington rights
Subject to applicable law, Washington consumers may request confirmation and access, obtain a list of third parties and affiliates with whom their consumer health data has been shared or sold, withdraw consent, request deletion, and appeal a refusal to act on a request.
Submit a request or appeal by contacting our Privacy Officer using the email listed in Section 1.
13. Canadian Privacy Rights
If you are located in Canada, we handle personal information in accordance with applicable Canadian federal and provincial private-sector privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable.
Subject to applicable law, you may:
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Ask how we have used or disclosed your information.
- Withdraw consent, subject to legal or contractual restrictions and reasonable notice.
- Challenge our compliance with applicable privacy requirements.
Our Privacy Officer is responsible for our Canadian privacy program. Contact the Privacy Officer using the email listed in Section 1.
If we cannot resolve your concern, you may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.
14. Marketing Communications
Marketing emails and text messages are separate from transactional communications such as order confirmations, delivery updates, security notices, and customer service messages.
Where required, including for recipients in Canada, we obtain consent before sending commercial electronic messages. Marketing messages identify the sender and include a functioning unsubscribe method. You may unsubscribe at any time using the link in an email, replying “STOP” to an eligible text message, or contacting us. We will process unsubscribe requests within the period required by applicable law.
We may use third-party communications providers to deliver messages and maintain consent, unsubscribe, and suppression records. Those providers may process contact information and message-interaction data only for the purposes described in this Policy and subject to applicable law.
15. Cross-Border Processing
COVIELA is based in the United States. Personal information from Canadian customers may therefore be processed or stored in the United States and in other countries where our service providers operate. Information processed outside Canada may be accessible to courts, law enforcement, and government authorities under the laws of those jurisdictions.
We remain responsible for personal information transferred to service providers for processing and use contractual, organizational, and technical measures designed to provide an appropriate level of protection.
16. Children and Minors
Our website and products are intended only for persons who are at least 18 years old and have reached the age of majority required to purchase our products in their jurisdiction. We do not knowingly collect personal information from children or minors. If you believe a minor has provided personal information to us, contact our Privacy Officer using the email listed in Section 1 so that we can investigate and delete the information where appropriate.
17. Changes to This Policy
We may update this Policy to reflect changes in our practices, services, technologies, or legal obligations. The updated version will be posted on this page with a revised “Last updated” date. Where required, we will provide additional notice or obtain consent before materially changing how personal information is used.
18. Contact Us
For privacy questions, complaints, or requests, contact:
Please contact the Privacy Officer using the email listed in Section 1. Include “Privacy Request” in the subject line and describe the request clearly. We may ask for information reasonably necessary to verify your identity before completing the request.