Privacy policy

AYVA - AOE Ecom AB - Last updated: June 2026

AYVA is operated by AOE Ecom AB (org. nr. 559458-2925), registered in Sweden ("we", "us", "our"). This Privacy Policy explains what personal information we collect when you visit or use our website, make a purchase, or communicate with us, how we use it, and what rights you have over it.

By using our Services, you acknowledge that you have read and understood this policy. If there is a conflict between this Privacy Policy and our Terms of Service, this Privacy Policy governs in matters relating to personal data.

1. Who is the data controller

AOE Ecom AB is the data controller for personal information collected through this store. Our Services are hosted by Shopify Inc. Where Shopify processes data independently (e.g. for platform improvement across merchants), Shopify acts as a separate data controller. See the Shopify Consumer Privacy Policy for details.

2. What information we collect

We collect this information directly from you (when you place an order or contact us), automatically through the Services (via cookies and similar technologies), from our service providers, and in some cases from business or marketing partners.

3. Legal basis for processing (EU/UK customers)

If you are located in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:

• Contract performance - to process your order, arrange shipping, handle returns, and manage your account.
• Legitimate interests - to prevent fraud, secure our Services, improve our offerings, and send direct marketing to existing customers (where permitted).
• Legal obligation - to comply with applicable laws including tax, accounting, and consumer protection requirements.
• Consent - for certain marketing communications and non-essential cookies, where we ask for and rely on your consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. How we use your information

• Order fulfillment - processing payments, arranging shipping, handling returns and exchanges, and sending order confirmations and tracking updates.
• Customer support - responding to inquiries and resolving issues.
• Marketing - sending promotional emails, SMS, or postal communications (where permitted). You can opt out at any time via the unsubscribe link in any marketing email. Opting out does not affect transactional communications related to your orders.
• Advertising - showing you relevant ads on our website and third-party platforms, including based on your browsing and purchase history. Depending on where you live, you may have the right to opt out of this.
• Fraud prevention and security - detecting and preventing fraudulent transactions, unauthorized account access, and other illegal activity.
• Legal compliance - meeting our obligations under applicable law, responding to lawful requests from authorities, and enforcing our Terms of Service.
• Service improvement - analyzing usage patterns to improve the performance and usability of our store.

5. How we share your information

We do not sell your personal information. We may share it with:

• Shopify - as our platform provider for hosting, payments, and infrastructure. Shopify processes data in accordance with its own privacy policy.
• Payment processors - to securely process transactions.
• Shipping and fulfillment providers - to deliver your order.
• Marketing and advertising partners - to deliver targeted advertising and measure campaign performance, in accordance with their own privacy policies.
• Analytics providers - to help us understand how customers use our store.
• Legal or regulatory authorities - where required by law, court order, or to protect the rights, property, or safety of AYVA or others.
• Business transfers - in connection with a merger, acquisition, or sale of assets, in which case your information may be transferred as part of the transaction.

All third parties we work with are required to handle your data in accordance with applicable privacy laws and our data processing agreements.

6. Cookies and tracking technologies

We use cookies and similar technologies (including pixels and web beacons) to operate the Services, remember your preferences, analyze traffic, and deliver targeted advertising. You can manage your cookie preferences through your browser settings or any consent tool we provide. Note that disabling certain cookies may affect the functionality of the Services.

7. International data transfers

As a Swedish company using global service providers including Shopify, your personal information may be transferred to and processed in countries outside the European Economic Area (EEA) or the United Kingdom. When we transfer data outside the EEA or UK, we rely on recognized safeguards such as the European Commission's Standard Contractual Clauses (SCCs), or equivalent mechanisms approved by the relevant authority.

8. Data retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including to maintain your account, process ongoing transactions, comply with legal obligations (such as tax and accounting records), resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it securely.

9. Children's data

Our Services are not directed at children under the age of majority in their jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided us with their personal information, please contact us and we will delete it promptly.

10. Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access - request a copy of the personal information we hold about you.
• Correction - request that inaccurate or incomplete information be corrected.
• Deletion - request that we delete your personal information, subject to legal retention requirements.
• Portability - receive your data in a structured, machine-readable format and request its transfer to another party.
• Objection - object to processing based on legitimate interests, including for direct marketing.
• Restriction - request that we limit how we process your data in certain circumstances.
• Withdrawal of consent - where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at hey@ayvaofficial.com. We may need to verify your identity before processing your request. We will respond within the timeframes required by applicable law. We will not discriminate against you for exercising your rights.

11. Complaints

If you have concerns about how we handle your personal information, please contact us first at hey@ayvaofficial.com. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

12. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and recommend that you avoid sending sensitive information over unsecured channels.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated policy on this page with a revised "Last updated" date and notify you of material changes as required by applicable law. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.

14. Contact