Privacy Policy

Welcome to the Privacy Policy of HELVOR LLC. Your privacy is not an afterthought; it is a foundational principle of how we operate. When you visit helvor.space, create an account, make a purchase, or interact with our customer service team, you trust us with your personal information. We take that trust extremely seriously.

This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, and what rights you have over your own data. It applies to all users of our website, including those who browse without purchasing, those who create accounts, and those who make purchases from our collections of women’s athletic apparel for Golf, Running, Tennis & Pickleball, Training, and Yoga & Pilates.

Please read this policy carefully. By using helvor.space, you consent to the data practices described below. If you do not agree with any part of this policy, you must stop using our website and services. We may update this policy from time to time; any changes will be posted on this page with an updated “Last Updated” date. Your continued use after changes constitutes acceptance.

If you have any questions about this Privacy Policy or your personal data, please contact us at:

• Email: hello@helvorshop.com

• Phone: +84857491111

• Mail: HELVOR LLC, 30 N Gould St Ste R Sheridan, WY 82801

---

1. Information We Collect

We collect several categories of personal information, depending on how you interact with our website. We aim to collect only what is necessary to provide our services, improve your experience, and comply with legal obligations.

1.1 Information You Provide Directly to Us

You voluntarily provide this information when you create an account, place an order, sign up for our newsletter, participate in a promotion, or contact customer support.

• Identity and Contact Data: Full name, billing address, shipping address, email address, phone number (if provided).

• Account Credentials: Username, password (stored in hashed, non-readable form), and security questions (if any).

• Order and Transaction Data: Products purchased, order date, order total, payment method (but not full payment card numbers – those go directly to Stripe), shipping preferences, and any notes or gift messages.

• Customer Service Interactions: Records of your emails, phone calls, chat messages, and any supporting documentation you provide (such as photos of defective products).

• Marketing Preferences: Your choices regarding receiving promotional emails, SMS messages (if opted in), and your participation in surveys or contests.

• User-Generated Content: Product reviews, ratings, photos, or comments you post on our website. Please note that reviews are public; do not include personal information you do not want shared.

1.2 Information Collected Automatically When You Use Our Website

Even if you do not create an account or make a purchase, our servers and third-party tools automatically collect certain technical information.

• Device and Browser Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, language preference.

• Usage Data: Pages visited, time and date of visit, time spent on each page, clickstream data (links clicked), search queries, referral source (e.g., Google, Facebook, or another website).

• Cookies and Similar Technologies: We use cookies, web beacons, and pixel tags to remember your preferences, keep you logged in, analyze site traffic, and personalize content. For more details, see Section 7 (Cookies and Tracking Technologies).

• Location Data: We may approximate your general location (city/region) based on your IP address. We do not collect precise GPS location without your explicit consent.

1.3 Information from Third Parties

We may receive information about you from other sources, such as:

• Payment Processors (Stripe): Stripe provides us with a transaction identifier, the last four digits of your credit card, the card brand (Visa, Mastercard, etc.), and the billing postal code. Stripe does not share your full card number with us.

• Fraud Prevention Services: We use third-party tools to screen orders for fraud. These tools may provide us with a risk score or flag suspicious patterns.

• Social Media Platforms: If you interact with our social media accounts (Instagram, Facebook, etc.) or use social login (if offered), we may receive your public profile information (name, email address, profile picture) in accordance with the platform’s terms.

• Shipping Carriers: Carriers may provide us with delivery confirmation and, in some cases, the name of the person who signed for a package.

1.4 Sensitive Personal Information

HELVOR does not intentionally collect sensitive personal information such as government identification numbers (Social Security numbers), precise geolocation, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data (except as necessary for product fit, e.g., bra size – which is not considered sensitive under most laws), or data concerning sexual orientation. Please do not provide such information to us. If you accidentally do, we will delete it promptly.

---

2. How We Use Your Information

We use the information we collect for the following purposes. The legal bases for processing (for GDPR purposes) are indicated in parentheses: (C) Consent, (K) Contract, (L) Legitimate Interest, (O) Legal Obligation.

2.1 To Process and Fulfill Your Orders (K)

• Verify your identity and payment method.

• Process payments through Stripe.

• Pack and ship your products to the address you provided.

• Send you order confirmations, shipping updates, and delivery notifications.

• Handle returns, refunds, and exchanges.

• Communicate with you about your order (e.g., if an item is out of stock or delayed).

2.2 To Provide Customer Support (K, L)

• Respond to your emails, phone calls, and other inquiries.

• Troubleshoot issues with your account, order, or website functionality.

• Investigate and resolve disputes (e.g., lost packages, defective products).

2.3 To Improve Our Website and Products (L)

• Analyze how customers use our website to identify areas for improvement.

• Conduct A/B testing to optimize product pages, checkout flow, and navigation.

• Gather feedback through surveys and product reviews.

• Monitor and prevent technical issues, crashes, or security breaches.

2.4 For Marketing and Promotional Communications (C, L)

• Send you promotional emails about new collections, sales, and exclusive offers (only if you have opted in or, under some laws, if you have made a purchase and not opted out).

• Show you personalized advertisements on social media platforms (Facebook, Instagram, Google) based on your browsing behavior.

• Administer contests, sweepstakes, or giveaways.

• Measure the effectiveness of our marketing campaigns.

You can opt out of marketing emails at any time by clicking the “Unsubscribe” link in any email or by contacting us. We will still send you transactional emails (order confirmations, shipping updates, password resets).

2.5 For Legal Compliance and Fraud Prevention (O, L)

• Detect and prevent fraudulent transactions, money laundering, or other illegal activities.

• Comply with court orders, subpoenas, or other legal processes.

• Enforce our Terms and Conditions and other policies.

• Protect the rights, property, or safety of HELVOR, our customers, or others.

2.6 For Business Operations (L)

• Manage our internal accounting, auditing, and record-keeping.

• Train our customer service and warehouse teams.

• Facilitate a merger, acquisition, or sale of assets (if such a transaction occurs, your data may be transferred to the new owner).

---

3. How We Share Your Information

We do not sell your personal information to third parties for their own marketing purposes. We never have, and we never will. However, we do share your information with trusted third parties who help us operate our business. These disclosures are limited to what is necessary.

3.1 Service Providers (Processors)

We engage the following categories of service providers, who are contractually obligated to use your data only on our behalf and in compliance with strict confidentiality and security standards:

• Payment Processing: Stripe (stripe.com). Stripe handles all credit card, debit card, Apple Pay, and Google Pay transactions. Your full payment details are sent directly to Stripe, not to us. Stripe’s privacy policy is available at stripe.com/privacy.

• Shipping and Fulfillment: Carriers such as USPS, UPS, FedEx, and DHL receive your name, shipping address, and phone number (if provided) to deliver your order.

• Email and Messaging: We use email service providers (e.g., Klaviyo, Mailchimp, or similar) to send transactional and marketing emails. These providers may track opens and clicks.

• Website Hosting and Analytics: Our website is hosted on a secure platform (e.g., Shopify, WooCommerce, or a custom solution). We use analytics tools like Google Analytics and possibly Microsoft Clarity to understand user behavior. These tools use cookies and collect anonymized IP addresses.

• Fraud Prevention: We use fraud detection services that receive order information (name, address, IP, device fingerprint) to screen for risk.

• Customer Support Platforms: We may use a helpdesk system (e.g., Zendesk, Gmail business) to manage support tickets.

• Review and Rating Platforms: If you leave a product review, that review (including your display name) may be shared with a third-party review platform that syndicates reviews across the web.

3.2 Legal and Safety Disclosures

We will share your information if we believe in good faith that disclosure is necessary to:

• Comply with a subpoena, warrant, court order, or other legal process.

• Investigate and defend against third-party claims or allegations.

• Protect the security of our website, including detecting and preventing fraud or cyberattacks.

• Protect the rights, property, or personal safety of HELVOR, our customers, or the public.

3.3 Business Transfers

If HELVOR LLC is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, or sale of substantially all of its assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or use of your personal information.

3.4 With Your Consent

We may share your information for other purposes if you give us explicit consent (e.g., sharing your email with a co-branded partner for a joint promotion).

3.5 Aggregated and Anonymized Data

We may share aggregated, anonymized data (i.e., data that cannot identify you personally) with third parties for research, marketing, or other purposes. For example, we might report that “30% of customers who bought yoga leggings also bought a matching sports bra” without identifying any specific individual.

---

4. Your Privacy Rights (Including CCPA, GDPR, and Other Laws)

Depending on where you live, you may have certain legal rights regarding your personal information. HELVOR respects these rights and provides easy ways to exercise them.

4.1 Rights for All Users (Regardless of Location)

• Right to Access: You can request a copy of the personal information we hold about you.

• Right to Correction: If any information is inaccurate or incomplete, you can request that we correct it.

• Right to Deletion: You can request that we delete your personal information, subject to certain exceptions (e.g., we may need to retain data for legal compliance, fraud prevention, or completing a transaction).

• Right to Object to Processing: You can object to processing based on our legitimate interests (e.g., marketing analytics).

• Right to Withdraw Consent: If we rely on your consent for processing (e.g., marketing emails), you can withdraw that consent at any time.

4.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request, up to twice in a 12-month period, the categories and specific pieces of personal information we have collected, the sources of that information, the business purposes for collection, and the categories of third parties with whom we have shared it.

• Right to Delete: You may request deletion of your personal information, with exceptions noted above.

• Right to Correct: You may request correction of inaccurate information.

• Right to Opt-Out of “Sale” or “Sharing”: Under California law, we do not sell your personal information for monetary value. However, we do use cookies and tracking technologies that some interpretations consider “sharing” for cross-context behavioral advertising (i.e., showing you ads on other websites). You can opt out of this by enabling “Do Not Track” in your browser or using our cookie preference center (see Section 7). Additionally, you can opt out of the sale of your data by emailing hello@helvorshop.com with “CCPA OPT-OUT” in the subject line.

• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by the CPRA.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights (e.g., we will not deny goods, charge different prices, or provide a different level of service).

To exercise your California rights, please use the contact information in Section 12. We will verify your identity by asking for information such as your order number, email address, and possibly the last four digits of a payment method used on a recent order. Authorized agents may submit requests on your behalf, but they must provide written proof of your authorization.

4.3 Additional Rights for European Economic Area (EEA), UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and its UK equivalent:

• Lawful Basis for Processing: As described in Section 2, we rely on contract, legitimate interest, consent, and legal obligation.

• Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, machine-readable format (e.g., CSV or JSON) and have it transmitted to another controller.

• Right to Restrict Processing: You may request that we stop processing your data while we verify its accuracy or the lawfulness of processing.

• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority (e.g., the ICO in the UK, the CNIL in France, or the relevant body in your country). We would, however, appreciate the opportunity to resolve your concerns first – please contact us.

Data Transfers: HELVOR LLC is based in the United States. If you are in the EEA, UK, or Switzerland, your data will be transferred to the US. We rely on Standard Contractual Clauses (SCCs) adopted by the European Commission to ensure adequate protection for such transfers. You may request a copy of these clauses by contacting us.

EU/UK Representative: We are currently evaluating whether we are required to appoint an EU or UK representative under Article 27 of the GDPR. If you have concerns that cannot be resolved with us directly, you may contact your local supervisory authority.

4.4 Rights for Other Jurisdictions

If you reside in Canada, Australia, or other countries with comprehensive privacy laws, you generally have rights similar to those under the CCPA and GDPR. Please contact us to exercise your rights. We respond to all verifiable requests within 30 days (or as required by local law).

---

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

• Account Information: If you create an account, we retain your name, email, and hashed password for as long as your account is active. If you request account deletion, we will delete your account and all associated personal information within 30 days, except where we are required to retain data (see below).

• Order Information: We retain order records (including your name, address, and purchase history) for 7 years to comply with tax, accounting, and warranty obligations.

• Customer Service Communications: We retain emails and chat logs for 3 years from the last interaction, to help resolve future issues.

• Marketing Data: If you opt in to marketing, we retain your email address and preferences until you unsubscribe. After unsubscribing, we keep your email on a suppression list indefinitely to ensure we do not accidentally re-subscribe you.

• Cookies and Analytics Data: Most website analytics data is aggregated and retained for no more than 26 months.

• Legal Holds: If we need to retain data for pending litigation or government investigation, we will do so until the matter is resolved.

---

6. Data Security

Protecting your personal information is one of our highest priorities. We implement a combination of technical, administrative, and physical safeguards designed to protect against unauthorized access, disclosure, alteration, or destruction.

6.1 Technical Safeguards

• Encryption: All data transmitted between your browser and our website is encrypted using TLS 1.2 or higher (the padlock icon in your address bar). We also encrypt sensitive data stored in our databases.

• Access Controls: Only employees who need your information to perform their jobs (e.g., customer service, order fulfillment, accounting) have access. Access is granted on a least-privilege basis and is logged and audited.

• Firewalls and Intrusion Detection: We use network firewalls and intrusion detection/prevention systems to block malicious traffic.

• Secure Development: Our software development lifecycle includes security reviews, dependency scanning, and regular penetration testing.

6.2 Payment Security

As noted throughout this document, we do not store your full credit card numbers. They are processed directly by Stripe, which is a PCI DSS Level 1 certified provider. Stripe uses tokenization, encryption, and continuous monitoring to protect your payment data.

6.3 Employee Training

All HELVOR employees receive mandatory privacy and security training. They are bound by confidentiality agreements and may be subject to disciplinary action, including termination, for any breach of data protection policies.

6.4 Limitations

No security system is 100% invulnerable. While we strive to protect your personal information, we cannot guarantee its absolute security. If you have reason to believe that your interaction with us is no longer secure (e.g., you feel your account has been compromised), please notify us immediately at hello@helvorshop.com.

---

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content.

7.1 What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, or phone) when you visit a website. They allow the website to recognize your device and remember your actions and preferences (such as login, language, font size, and other display preferences) over a period of time.

7.2 Types of Cookies We Use

7.3 Third-Party Cookies

We allow certain third parties to place cookies on our site for analytics and advertising purposes. These include:

• Google Analytics – provides anonymized traffic data.

• Facebook Pixel – helps us measure the effectiveness of Facebook/Instagram ads and build retargeting audiences.

• TikTok Pixel (if applicable) – similar to Facebook Pixel.

• Stripe – uses essential cookies for fraud prevention.

Each third party has its own privacy policy. We do not control their cookies.

7.4 Your Cookie Choices

When you first visit helvor.space, a cookie banner will appear asking for your consent to non-essential cookies. You may:

• Accept all cookies – gives us permission to set analytics and marketing cookies.

• Reject non-essential cookies – we will only set essential cookies.

• Manage preferences – select which categories of non-essential cookies you accept.

You can also change your cookie preferences at any time by clicking the “Cookie Preferences” link in the footer of our website. Additionally, most browsers allow you to block or delete cookies altogether. However, blocking essential cookies will prevent you from using the shopping cart and checkout features. To learn how to manage cookies in your browser, visit aboutcookies.org.

7.5 Do Not Track (DNT)

Some browsers have a “Do Not Track” feature that signals to websites that you do not wish to be tracked. Our website currently does not respond to DNT signals because there is no universally accepted standard for how to interpret them. However, you can use our cookie preference center to opt out of tracking as described above.

---

8. Children’s Privacy

HELVOR LLC does not knowingly sell, market, or collect personal information from children under the age of 13. Our products are designed for adult women (age 18 and over). If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us immediately at hello@helvorshop.com. We will take steps to delete that information promptly.

For users between 13 and 18, we require parental or guardian consent. If we learn that we have collected information from a teenager without verifiable parental consent where required by law, we will delete it.

---

9. Third-Party Links

Our website may contain links to third-party websites, such as social media platforms, payment processors, or shipping carriers. This Privacy Policy applies only to helvor.space. When you click a link to another website, we encourage you to read their privacy policy. HELVOR is not responsible for the privacy practices or content of third-party sites.

---

10. SMS and Text Messaging (If Applicable)

If you provide your mobile phone number and explicitly opt in to SMS marketing, we may send you text messages about order updates, promotions, or abandoned cart reminders. You may opt out at any time by replying “STOP” to any message. Standard message and data rates may apply. We will never share your phone number with third parties for their own marketing purposes. For SMS-specific privacy concerns, please email hello@helvorshop.com.

---

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The “Last Updated” date at the top of this page indicates when the most recent changes were made. If we make material changes that affect your rights, we will notify you prominently on our website or via email (if we have your address) at least 30 days before the changes take effect. Your continued use of the website after the effective date constitutes your acceptance of the revised policy.

---

12. How to Contact Us and Exercise Your Rights

We want to make it easy for you to exercise your privacy rights and to ask questions.

12.1 For General Privacy Inquiries and Rights Requests

• Email (preferred): hello@helvorshop.com

• Phone: +84857491111

• Mail: HELVOR LLC, 30 N Gould St Ste R Sheridan, WY 82801

When making a request to access, delete, or correct your data, please include “PRIVACY REQUEST” in the subject line of your email or clearly state the nature of your request. To protect your account, we may ask you to verify your identity by providing your order number, email address, and possibly the last four digits of a payment method used on a recent order.

12.2 Response Timeline

We will respond to all verifiable consumer requests within 30 days of receipt. If we need more time (up to 90 days total for complex requests under CCPA/GDPR), we will notify you of the extension and the reason for it. There is no fee for making a request unless it is excessive, repetitive, or manifestly unfounded, in which case we may charge a reasonable fee or refuse to act on the request.

12.3 Complaints

If you are not satisfied with our response, you may escalate your complaint to your local data protection authority. In the United States, you may file a complaint with the Federal Trade Commission (FTC) at ftc.gov/complaint. For EU residents, you can find your supervisory authority at edpb.europa.eu/about-edpb/about-edpb/members.

---

13. Glossary of Key Terms

To ensure clarity, here are definitions of some key terms used in this Privacy Policy:

• Personal Information: Any information that identifies, relates to, describes, or is reasonably capable of being associated with a particular individual (e.g., name, email, address, IP address).

• Processing: Any operation performed on personal information, including collection, storage, use, disclosure, deletion, or alteration.

• Controller: The entity (HELVOR LLC) that determines the purposes and means of processing personal information.

• Processor: A third party that processes personal information on behalf of the controller (e.g., Stripe, USPS).

• CCPA: California Consumer Privacy Act of 2018, as amended by the CPRA.

• GDPR: General Data Protection Regulation (Regulation (EU) 2016/679).

• Cookies: Small text files stored on your device by your web browser.

---

14. California Privacy Rights (Shine the Light)

Under California’s “Shine the Light” law (Civil Code Section 1798.83), California residents who have an established business relationship with us may request information once per year about whether we have disclosed their personal information to third parties for direct marketing purposes. As noted, we do not sell or share your data for third-party direct marketing. If you still wish to make such a request, please email hello@helvorshop.com with “Shine the Light Request” in the subject line.

---

15. Nevada Privacy Rights

Nevada residents have the right to opt out of the sale of their personal information. We do not sell personal information as defined by Nevada law. If you still wish to submit an opt-out request, please contact us at the email above with “Nevada Opt-Out” in the subject line.

---

16. Virginia, Colorado, Connecticut, Utah, and Other State Privacy Laws

For residents of states that have enacted comprehensive privacy laws (e.g., Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Utah Consumer Privacy Act (UCPA)), you have rights similar to those under the CCPA and GDPR, including the right to opt out of targeted advertising and profiling. We provide those rights to all users regardless of state. To exercise any of these rights, please follow the process in Section 12.

---

17. Final Assurance

We know that privacy policies can be long and legally dense. We have written this one with care and transparency because we respect you. HELVOR LLC was founded on the principle that women deserve better – better quality, better fit, better value, and better treatment. That extends to how we handle your data. We are not a faceless corporation. We are real people building a brand we are proud of, and we hope you will be proud to wear our apparel.

If you ever have a concern that is not fully addressed by this policy, please reach out. We will listen. We will adapt. And we will always be honest with you.

Thank you for trusting HELVOR LLC.

Move confidently. Shop securely. Live actively.

helvor.space