Privacy Policy
Privacy Policy
Last updated: April 2026
Elvéra respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how Elvéra collects, uses, stores and shares your personal information when you visit getelvera.com, place an order, start or manage a subscription, create an account, contact customer support, sign up for marketing or otherwise interact with us.
This Privacy Policy applies to our UK website, checkout pages, landing pages, customer account and subscription portals and other online services that link to this Privacy Policy.
By using our website, you acknowledge that you have read this Privacy Policy.
PERSONAL INFORMATION WE COLLECT
The personal information we collect depends on how you interact with Elvéra.
Information You Provide Directly
When you place an order, create an account, start a subscription or contact us, we may collect:
• Full name
• Billing address
• Delivery address
• Email address
• Phone number
• Order history
• Subscription details
• Customer support communications
• Information you otherwise choose to provide
Payment Information
Payments are processed by our payment service providers.
Depending on the payment method used, we may receive limited payment-related information such as:
• Payment method type
• Last four digits of a payment card
• Payment status
• Payment authorisation results
• Transaction information
We do not generally store complete payment card details ourselves. Full payment information is normally processed securely by our payment providers.
Account and Subscription Information
If you create an account or start a subscription, we may process information including:
• Login and account information
• Subscription status
• Billing dates
• Recurring order information
• Shipment history
• Subscription changes
• Pauses or cancellations
• Account activity
Elvéra subscriptions renew every 30 days unless cancelled.
Information Collected Automatically
When you use our website, we and our service providers may automatically collect information such as:
• IP address
• Browser type
• Device type
• Operating system
• Referral information
• Pages viewed
• Time spent on pages
• Website interactions
• Cart and checkout activity
• Purchase activity
• Session identifiers
• Cookie and tracking technology data
Marketing and Communications Data
If you sign up for marketing communications, interact with our advertising, complete a form or participate in a promotion, we may collect:
• Email marketing status
• SMS marketing status
• Campaign engagement information
• Email opens and clicks
• Advertising attribution information
• Survey responses
• Communication preferences
Information From Third Parties
We may receive personal information from third parties that help us provide and operate our services, including:
• Payment processors
• Fulfilment and delivery providers
• Subscription management platforms
• Ecommerce platforms
• Analytics providers
• Advertising platforms
• Fraud prevention providers
• Customer support providers
• Email and SMS service providers
HOW WE USE YOUR PERSONAL INFORMATION
We process personal information only where we have an appropriate legal basis under applicable data protection law.
Depending on the circumstances, this may include processing that is necessary to perform our contract with you, comply with a legal obligation, pursue our legitimate interests or where you have provided consent.
Providing Products and Services
We use personal information to:
• Process and fulfil orders
• Arrange delivery
• Manage subscriptions and recurring orders
• Process returns and refunds
• Send order confirmations
• Provide tracking and delivery updates
• Provide customer account access
• Respond to customer support requests
Where necessary, this processing is carried out to perform our contract with you.
Processing Payments and Preventing Fraud
We may process information to:
• Process and verify payments
• Detect suspicious transactions
• Prevent fraud
• Prevent unauthorised payment activity
• Investigate chargebacks and payment disputes
• Protect our customers and business
• Enforce our Terms and policies
Where applicable, we process this information because it is necessary to perform our contract with you, comply with legal obligations or pursue our legitimate interests in preventing fraud and protecting our business.
Communicating With You
We may use your information to send:
• Order confirmations
• Delivery updates
• Subscription communications
• Billing notifications
• Account notifications
• Customer service responses
• Marketing communications where permitted
Transactional communications relating to an order or subscription may be sent even if you have opted out of marketing communications.
Improving Our Website and Services
We may use information to:
• Analyse website performance
• Understand how customers use our website
• Improve the customer experience
• Improve checkout and subscription functionality
• Develop products and offers
• Measure business performance
• Diagnose technical problems
Where appropriate, we rely on our legitimate interests in operating and improving our business.
Advertising and Marketing
Subject to applicable consent requirements, we may use information to:
• Measure advertising performance
• Understand how customers interact with advertisements
• Create relevant advertising audiences
• Display relevant advertising
• Retarget website visitors
• Exclude existing customers from certain campaigns
Where cookies or similar technologies require consent under UK law, we will request that consent before using them.
Legal and Regulatory Requirements
We may process personal information where necessary to:
• Maintain accounting and tax records
• Respond to lawful requests
• Establish, exercise or defend legal claims
• Resolve disputes
• Enforce our agreements
• Comply with applicable laws and regulations
COOKIES AND TRACKING TECHNOLOGIES
We and our service providers may use cookies, pixels, tags and similar technologies.
These technologies may be used for:
• Essential website functionality
• Shopping cart and checkout functionality
• Account authentication
• Analytics
• Website personalisation
• Advertising and retargeting
• Advertising measurement
Some cookies are necessary for the website to function and do not require consent where permitted by law.
Where required under UK law, non-essential cookies, including certain analytics and advertising cookies, will only be used after you have provided consent.
You can manage your preferences through our cookie consent tools where available. You may also be able to control cookies through your browser settings.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
HOW WE SHARE PERSONAL INFORMATION
We do not disclose personal information unnecessarily.
We may share information with third parties where reasonably necessary to operate our business and provide our services.
Service Providers
This may include providers that assist us with:
• Ecommerce infrastructure
• Payment processing
• Order fulfilment
• Shipping and logistics
• Subscription management
• Customer support
• Email and SMS communications
• Fraud prevention
• Analytics
• Cloud hosting and IT services
These providers may process personal information on our behalf or as independent controllers depending on the services they provide.
Advertising and Analytics Providers
Subject to applicable consent requirements, we may share certain identifiers, website activity and transaction information with advertising and analytics providers.
This may be used to measure advertising effectiveness, understand customer behaviour and deliver relevant advertising.
Professional Advisers
We may disclose information where reasonably necessary to professional advisers including accountants, auditors, lawyers and insurers.
Business Transactions
If Elvéra or the business operating Elvéra is involved in a merger, acquisition, restructuring, financing, sale of assets or similar transaction, relevant personal information may be disclosed as part of that process where permitted by law.
Legal Requirements
We may disclose personal information where reasonably necessary to:
• Comply with a legal obligation
• Respond to lawful requests from authorities
• Establish, exercise or defend legal claims
• Investigate suspected fraud
• Protect our rights, customers or property
EMAIL AND SMS MARKETING
Where permitted by law, we may send promotional emails or SMS messages about Elvéra products, offers, educational content and other relevant updates.
Where consent is required, we will obtain it before sending marketing communications.
You can unsubscribe from marketing emails by using the unsubscribe link contained in the email.
Where applicable, you can unsubscribe from SMS marketing by following the opt-out instructions contained in the message.
You can also contact us at:
Opting out of marketing does not prevent us from sending necessary transactional communications relating to your orders, payments, subscriptions or account.
SUBSCRIPTIONS AND RECURRING BILLING DATA
If you start an Elvéra subscription, we process information necessary to administer your subscription and recurring orders.
This may include:
• Subscription status
• Recurring billing dates
• Payment tokens managed by our payment providers
• Recurring order history
• Shipment history
• Account changes
• Pauses and cancellations
• Customer support communications relating to your subscription
Elvéra subscriptions renew every 30 days unless cancelled.
We may use subscription and transaction information to administer recurring payments, fulfil recurring orders, provide customer support, investigate payment disputes and prevent fraud.
Full payment card information is generally handled by our payment providers rather than stored directly by Elvéra.
CUSTOMER SUPPORT COMMUNICATIONS
If you contact us by email, chat, contact form or another support channel, we may retain and review those communications where reasonably necessary for:
• Responding to your request
• Managing your order or subscription
• Training and quality assurance
• Resolving disputes
• Preventing fraud
• Enforcing our policies
Please avoid sending sensitive personal information that is not necessary for us to resolve your request.
REVIEWS AND USER GENERATED CONTENT
If you submit a review, testimonial, photograph, comment or similar content, we may process that information in accordance with our Terms and applicable law.
Content you choose to submit for publication may become publicly visible.
Please do not submit personal information that you do not want to be made public.
DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:
• Fulfil orders and subscriptions
• Provide customer support
• Maintain accounting and tax records
• Comply with legal obligations
• Resolve disputes
• Prevent fraud
• Establish, exercise or defend legal claims
Retention periods vary depending on the type of information, why it was collected and applicable legal requirements.
When personal information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.
DATA SECURITY
We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, destruction, alteration, unauthorised access or disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
INTERNATIONAL DATA TRANSFERS
Some of our service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps where required under UK data protection law to ensure that an appropriate level of protection is provided.
Depending on the destination and provider, these safeguards may include UK adequacy regulations, approved contractual safeguards or other lawful transfer mechanisms recognised under UK data protection law.
CHILDREN'S PRIVACY
Our website and products are intended for adults.
We do not knowingly collect personal information from children where we do not have a lawful basis to do so.
If you believe a child has provided personal information to us inappropriately, please contact:
YOUR PRIVACY RIGHTS
Under UK data protection law, you may have rights regarding your personal information.
Depending on the circumstances, these may include the right to:
• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Request restriction of processing
• Object to certain processing
• Request transfer of certain personal information
• Withdraw consent where processing relies on consent
• Object to direct marketing
• Lodge a complaint with the relevant data protection authority
These rights are not absolute and may be subject to legal exceptions.
To exercise your privacy rights, contact:
We may request information necessary to verify your identity before completing your request.
YOUR RIGHT TO OBJECT TO DIRECT MARKETING
You have the right to object to the use of your personal information for direct marketing.
You can exercise this right at any time by using the unsubscribe mechanism in our marketing communications or by contacting us.
Where you object to direct marketing, we will stop using your personal information for that purpose.
INFORMATION COMMISSIONER'S OFFICE
If you are located in the United Kingdom and have concerns about how we process your personal information, we encourage you to contact us first so we can try to resolve your concern.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection authority.
Information about your rights and how to make a complaint is available through the ICO.
THIRD PARTY WEBSITES AND SERVICES
Our website may contain links to third-party websites, platforms or services.
We are not responsible for the privacy practices of those third parties.
When you leave our website or interact directly with a third-party service, their own privacy policies and terms may apply.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our business, services, technology or legal obligations.
When we make changes, we will publish the updated Privacy Policy on our website and update the “Last updated” date.
Where required by law, we will provide additional notice of material changes.
CONTACT US
If you have questions about this Privacy Policy, how we process your personal information or wish to exercise your privacy rights, please contact:
Elvéra
Email: info@getelvera.com