1. Who we are

This Privacy Policy covers the website luvitol.com, operated by Luvitol. We sell Spice & Ice Natural Pain Relief Roll-On directly to consumers through our website.

For privacy questions, contact us at: sales@luvitol.com or through the contact form on our website.

2. What information we collect

When you place an order

WooCommerce, our e-commerce platform, collects the information needed to process your purchase and deliver your order:

• Name
• Billing and shipping address
• Email address
• Phone number
• Payment information (processed securely by our payment processor — we do not store full card numbers)
• Order history

When you contact us

Our contact form (Contact Form 7) collects:

• Name
• Email address
• The reason for your inquiry
• Your message

This information is used only to respond to your inquiry. Form submissions are sent to our email inbox and are not stored in a third-party CRM.

When you browse the site

We use Google Analytics 4 to understand how visitors use our site. This collects:

• Pages visited and time spent on each page
• General geographic location (city or region level, not precise)
• Device type, browser, and operating system
• How you arrived at our site (search engine, direct link, referral)
• Interactions such as clicks, scroll depth, and form submissions

Google Analytics uses cookies and assigns an anonymous identifier to your browser. It does not collect your name, email address, or payment information.

Automatically collected information

When you visit luvitol.com, our web server and hosting provider (Hostinger) automatically record your IP address, browser type, referring URL, and the date and time of your visit. This information is used for security and server diagnostics only.

3. How we use your information

We use the information we collect only for the following purposes:

• Processing and fulfilling your order
• Sending order confirmation, shipping, and delivery emails
• Responding to your contact form messages
• Processing refund or guarantee requests
• Understanding how visitors use our site so we can improve it (analytics)
• Complying with legal obligations (such as tax record-keeping)

We do not use your information for targeted advertising. We do not build behavioral profiles for advertising purposes. We do not use automated decision-making or profiling that has legal or significant effects on you.

4. When we share your information

We do not sell, rent, or trade your personal information. We share your data only in these limited circumstances:

Service providers

We share information with third-party services that help us operate our business:

• Hostinger — web hosting and server infrastructure. Your data is stored on Hostinger’s servers.
• WooCommerce / WordPress — e-commerce platform for order processing and account management.
• Payment processor — your payment information is processed securely by our payment gateway. We do not store full card numbers on our servers.
• Google Analytics — website analytics. Google processes anonymized usage data on our behalf. See Google’s privacy policy at policies.google.com/privacy.
• Cloudflare Turnstile — bot protection on our contact form. Cloudflare processes minimal data to verify form submissions are human. See Cloudflare’s privacy policy at cloudflare.com/privacypolicy.

Legal requirements

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights or the safety of others.

Business transfer

If Luvitol is acquired, merged, or sold, customer information may be transferred as part of that transaction. We will notify you by email or a notice on this website before your data is transferred or becomes subject to a different privacy policy.

5. Cookies and tracking

Our website uses cookies — small text files stored in your browser. Here is what we use and why:

Strictly necessary cookies

These cookies are required for the website to function. They cannot be disabled.

• WooCommerce session cookies — maintain your shopping cart and checkout session
• WordPress authentication cookies — keep you logged in to your account if you have one
• Cloudflare Turnstile — security cookie used on our contact form

Analytics cookies

We use Google Analytics 4, which sets cookies to collect anonymous usage data. These cookies do not identify you personally. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by using your browser’s “Do Not Track” setting.

How to manage cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies may prevent parts of the website from working correctly. For instructions specific to your browser, visit your browser’s help documentation.

6. How long we keep your data

• Order information — kept for 7 years to comply with tax and accounting requirements, then securely deleted.
• Contact form submissions — kept in our email inbox for as long as needed to resolve the inquiry, then deleted. We do not archive contact form submissions in a database beyond standard email retention.
• Google Analytics data — retained for 14 months per our GA4 settings, then automatically deleted by Google.
• Server logs — Hostinger retains server logs for up to 30 days for security purposes.

7. How we protect your data

We take reasonable steps to protect your personal information from unauthorized access, loss, or disclosure:

• Our website uses HTTPS encryption (SSL/TLS) for all data transmitted between your browser and our server
• Payment processing is handled by our payment gateway using PCI-compliant infrastructure — full card numbers are never stored on our servers
• Access to our WordPress admin and WooCommerce backend is password-protected and limited to authorized personnel
• Our hosting provider (Hostinger) maintains physical and network security for our server infrastructure

No method of data transmission or storage is 100% secure. If you have concerns about a specific data security issue, contact us at sales@luvitol.com.

8. California residents — CCPA/CPRA rights

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you specific rights regarding your personal information.

Your rights

• Right to know — you can request a summary of the categories and specific pieces of personal information we have collected about you in the past 12 months
• Right to delete — you can request that we delete personal information we have collected about you, subject to certain exceptions (such as legal obligations)
• Right to correct — you can request that we correct inaccurate personal information we hold about you
• Right to opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioral advertising. No opt-out action is required, but you may submit a request to confirm this.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights

Categories of personal information collected

In the past 12 months, we have collected the following categories of personal information from California residents:

• Identifiers (name, email address, shipping address, IP address)
• Commercial information (purchase history, products ordered)
• Internet or other electronic network activity (pages visited, time on site, browser type)

We collect this information for the business purposes described in Section 3 above. We do not sell this information.

How to submit a request

To exercise any of your California privacy rights, contact us at:

• Email: sales@luvitol.com
• Contact form: luvitol.com/contact-us/

We will respond to verifiable consumer requests within 45 days. We may need to verify your identity before processing your request.

Do Not Sell or Share My Personal Information

We do not sell or share your personal information as defined under CCPA/CPRA. If you would like written confirmation of this, contact us at sales@luvitol.com.

9. Children’s privacy

Our website and products are intended for adults. We do not knowingly collect personal information from children under the age of 13. If you believe we have inadvertently collected information from a child under 13, contact us immediately at sales@luvitol.com and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For significant changes, we will notify customers by email if we have your email address, or by placing a notice on our homepage.

Your continued use of luvitol.com after any changes constitutes acceptance of the updated policy.

11. Contact us

If you have questions about this Privacy Policy, want to exercise your data rights, or have a privacy concern, please contact us: