PRIVACY POLICY

Last Updated: June 2026

Introduction

This Privacy Policy describes how THERIVEO LLC ("Theriveo™", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, make a purchase from www.theriveo.com (the "Site"), or otherwise communicate with us regarding our products and services (collectively, the "Services").

For purposes of this Privacy Policy, "you" and "your" means any customer, website visitor, or individual whose information we collect pursuant to this Privacy Policy.

Please read this Privacy Policy carefully before using our Services.

Changes To This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, technological developments, or regulatory requirements.

Any updates will be posted on this page along with the revised "Last Updated" date.

Your continued use of the Site after any modifications constitutes your acceptance of the revised Privacy Policy.

How We Collect And Use Your Personal Information

To provide our Services, we collect personal information from various sources depending on how you interact with our Site.

We may use the information we collect to:

• Process and fulfill orders
• Provide customer support
• Improve our website and services
• Personalize your shopping experience
• Detect fraud and unauthorized activity
• Send marketing communications
• Comply with legal obligations
• Protect our business and customers

Personal Information We Collect

The categories of personal information we may collect include:

Information You Provide Directly

Contact Information

• Full name
• Email address
• Phone number
• Billing address
• Shipping address

Order Information

• Order details
• Payment confirmations
• Purchase history
• Shipping information

Account Information

If you create an account, we may collect:

• Username
• Password
• Account preferences
• Security credentials

Shopping Activity

We may collect information regarding:

• Products viewed
• Products added to cart
• Wishlist activity
• Product reviews
• Loyalty rewards
• Referral participation
• Gift card usage

Customer Support Information

When you contact us, we may collect:

• Messages
• Emails
• Support tickets
• Feedback
• Photos or documents you voluntarily provide

You may choose not to provide certain information; however, some features may not function properly without it.

Information We Collect Automatically

When you use our Site, we may automatically collect information regarding your interaction with our Services ("Usage Data").

This may include:

• IP address
• Browser type
• Device information
• Operating system
• Language settings
• Referral URLs
• Pages viewed
• Session duration
• Click behavior
• Purchase behavior
• Geographic location derived from IP address

We collect this information through:

• Cookies
• Pixels
• Web beacons
• Analytics technologies
• Similar tracking technologies

Information We Receive From Third Parties

We may obtain information from third-party service providers including:

Shopify

Our ecommerce platform provider may provide information necessary to process and manage transactions.

Payment Processors

Payment providers may collect:

• Credit card information
• Debit card information
• Billing details
• Payment verification information

Theriveo™ does not store full payment card information on our servers.

Advertising And Analytics Partners

We may receive information from:

• Google
• Meta (Facebook and Instagram)
• TikTok
• Pinterest
• Microsoft Advertising
• Shopify Audiences
• Other marketing and analytics partners

These partners may provide information regarding:

• Ad engagement
• Website activity
• Conversion tracking
• Audience insights

How We Use Your Information

Order Fulfillment

We use your information to:

• Process payments
• Ship products
• Manage returns
• Manage exchanges
• Provide order updates
• Verify transactions

Customer Support

We use your information to:

• Respond to inquiries
• Resolve disputes
• Provide warranty assistance
• Improve customer experience

Marketing And Advertising

We may use your information to:

• Send promotional emails
• Deliver special offers
• Provide product recommendations
• Measure advertising performance
• Personalize marketing content

You may unsubscribe from marketing communications at any time.

Fraud Prevention And Security

We may use information to:

• Detect fraudulent transactions
• Prevent abuse of our Services
• Verify customer identity
• Protect customer accounts
• Investigate suspicious activity

Service Improvement

We may analyze customer behavior and website performance to:

• Improve website functionality
• Improve product offerings
• Enhance user experience
• Develop new features
• Optimize customer support

Cookies And Tracking Technologies

Like many websites, Theriveo™ uses cookies and similar technologies to improve your browsing experience and better understand how visitors use our website.

Cookies may be used to:

• Remember your preferences
• Keep items in your shopping cart
• Improve website performance
• Analyze visitor behavior
• Measure advertising effectiveness
• Deliver personalized content and advertisements

We may use:

• Browser Cookies
• Pixels
• Web Beacons
• SDKs
• Analytics Technologies
• Advertising Technologies

Some cookies are essential for the operation of the website, while others help us improve performance and marketing effectiveness.

Most web browsers automatically accept cookies. You may modify your browser settings to block or remove cookies. However, disabling cookies may affect certain website functionality.

For information regarding Shopify cookies, please visit:

https://www.shopify.com/legal/cookies

Global Privacy Control (GPC)

Our website recognizes Global Privacy Control (GPC) signals.

When a valid GPC signal is detected, we will treat it as a request to opt out of certain forms of targeted advertising and information sharing where required by applicable law.

We do not currently recognize other browser-based "Do Not Track" signals.

How We Share Personal Information

In certain situations, we may share your information with third parties to operate our business and provide Services.

These situations may include:

Service Providers

We may share information with trusted service providers such as:

• Shopify
• Payment processors
• Shipping carriers
• Fulfillment partners
• Customer support providers
• Cloud storage providers
• Analytics providers

These providers may only use your information as necessary to perform services on our behalf.

Marketing And Advertising Partners

We may share information with advertising and marketing partners including:

• Google
• Meta
• TikTok
• Pinterest
• Microsoft
• Shopify Audiences
• Other advertising partners

This information may be used to:

• Measure advertising effectiveness
• Build custom audiences
• Deliver personalized advertisements
• Improve campaign performance

Legal Compliance

We may disclose information when necessary to:

• Comply with legal obligations
• Respond to lawful requests
• Protect our rights
• Prevent fraud
• Enforce our policies
• Protect customers and business operations

Business Transfers

If Theriveo™ is involved in:

• A merger
• Acquisition
• Sale of assets
• Financing transaction
• Bankruptcy proceeding

Your information may be transferred as part of that transaction.

Categories Of Information Shared

Over the previous 12 months, we may have disclosed the following categories of personal information:

Identifiers

• Name
• Email address
• Phone number
• Account information

Customer Records

• Billing address
• Shipping address
• Order history

Commercial Information

• Purchase history
• Product preferences
• Shopping behavior

Internet Activity

• Browser activity
• Website interactions
• Usage data

Geolocation Information

• Approximate location based on IP address

Recipients may include:

• Service providers
• Advertising partners
• Analytics providers
• Business affiliates

We do not use or disclose sensitive personal information for profiling purposes without your consent.

Personalized Advertising

With your consent where required by law, we may use personal information for personalized advertising purposes.

This may include:

• Retargeting campaigns
• Custom audiences
• Lookalike audiences
• Behavioral advertising

Categories of information used may include:

• Email address
• Phone number
• Purchase history
• Website activity
• Advertising engagement

You may opt out of personalized advertising through:

• Email unsubscribe links
• Cookie preferences
• Browser privacy controls
• Applicable privacy rights requests

To learn more about Shopify privacy controls, visit:

https://privacy.shopify.com

User Generated Content

The Services may allow customers to submit:

• Product reviews
• Testimonials
• Ratings
• Comments
• Photos
• Videos

Any content submitted to public areas of the website may become publicly visible.

Theriveo™ cannot control how other users may use information that you voluntarily make public.

You are solely responsible for any content you choose to publish.

Third-Party Websites And Links

Our Site may contain links to third-party websites, applications, or services.

We do not control and are not responsible for:

• Privacy practices
• Security measures
• Content accuracy
• Policies of third-party websites

We encourage users to review third-party privacy policies before providing personal information.

The inclusion of a link does not imply endorsement of any third-party website or service.

Children's Privacy

Our Services are not directed toward children under the age of 16.

We do not knowingly collect personal information from children.

If you believe that a child has provided us with personal information, please contact us immediately.

Upon verification, we will take reasonable steps to delete the information.

Security Of Your Information

We implement commercially reasonable security measures designed to protect personal information against:

• Unauthorized access
• Disclosure
• Alteration
• Misuse
• Destruction

These safeguards may include:

• SSL encryption
• Secure payment processing
• Access controls
• Monitoring systems
• Fraud prevention tools

However, no system can guarantee absolute security.

You acknowledge that any transmission of information over the Internet carries inherent risks.

Data Retention

We retain personal information only for as long as reasonably necessary to:

• Fulfill orders
• Provide Services
• Maintain customer accounts
• Resolve disputes
• Enforce agreements
• Comply with legal obligations

Retention periods may vary depending on:

• The type of information
• Legal requirements
• Business needs
• Customer requests

When information is no longer required, we will securely delete or anonymize it where reasonably practicable.

International Data Transfers

Theriveo™ operates internationally.

Your information may be transferred to, stored in, or processed in countries outside your country of residence.

These countries may have different data protection laws than your jurisdiction.

Where required by law, we implement appropriate safeguards to protect personal information during international transfers, including:

• Standard Contractual Clauses (SCCs)
• Approved transfer mechanisms
• Contractual protections
• Security safeguards

By using our Services, you acknowledge that your information may be processed in countries where data protection laws may differ from those in your home country.

Your Privacy Rights

Depending on where you reside, you may have certain rights regarding your personal information under applicable privacy laws.

These rights may include:

• Right to Access
• Right to Know
• Right to Correct
• Right to Delete
• Right to Data Portability
• Right to Restrict Processing
• Right to Withdraw Consent
• Right to Opt-Out of Personalized Advertising
• Right to Appeal Certain Decisions

Please note that these rights are not absolute and may be subject to legal exceptions.

Right To Access

You may request access to personal information that we maintain about you.

Upon verification of your identity, we may provide:

• Categories of information collected
• Specific information collected
• Sources of information
• Purposes for collection
• Categories of third parties receiving information

Right To Correct

You may request correction of inaccurate personal information that we maintain about you.

We may request additional information necessary to verify the accuracy of requested changes.

Right To Delete

You may request deletion of personal information that we maintain about you.

Certain information may be retained where permitted or required by law, including for:

• Fraud prevention
• Tax obligations
• Accounting requirements
• Legal compliance
• Contract enforcement

Right To Data Portability

Where applicable, you may request a copy of certain personal information in a portable format.

Where technically feasible, you may request that we transfer such information to another service provider.

Right To Restrict Processing

In certain circumstances, you may request that we limit the way we process your personal information.

This right may be available where:

• Information is inaccurate
• Processing is unlawful
• Information is no longer necessary
• Legal claims are involved

Right To Withdraw Consent

Where we rely upon your consent to process personal information, you may withdraw that consent at any time.

Withdrawal of consent will not affect the lawfulness of processing conducted prior to withdrawal.

Marketing Communications

You may unsubscribe from promotional emails at any time by:

• Clicking the unsubscribe link in any email
• Contacting our support team

Even if you opt out of marketing communications, we may still send transactional messages related to:

• Orders
• Returns
• Account activity
• Customer support

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

These rights may include:

• Right to Know
• Right to Access
• Right to Delete
• Right to Correct
• Right to Opt-Out of Sale or Sharing
• Right to Limit Use of Sensitive Personal Information
• Right Against Discrimination

Theriveo™ will not discriminate against you for exercising any privacy rights available under applicable law.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you may have rights under applicable data protection laws including GDPR.

These rights may include:

• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection
• Withdrawal of Consent

Where required by law, we rely on lawful bases for processing personal information, including:

• Contractual necessity
• Legitimate interests
• Legal obligations
• Consent

Exercising Your Rights

To exercise any privacy rights available to you, please contact us using the information provided below.

For security purposes, we may request information necessary to verify your identity before fulfilling your request.

Examples may include:

• Email address
• Order number
• Billing information
• Account verification details

We reserve the right to deny requests where permitted by applicable law.

Authorized Agents

Where permitted by law, you may authorize another person to submit privacy requests on your behalf.

Before honoring such requests, we may require proof that:

• You authorized the agent
• The agent has authority to act on your behalf
• Your identity has been verified

Complaints

If you have concerns regarding how we process your personal information, we encourage you to contact us first.

We will make reasonable efforts to investigate and address your concerns promptly.

Depending on your jurisdiction, you may also have the right to file a complaint with:

• Your local privacy authority
• Data protection regulator
• Consumer protection agency

If you are located in the European Economic Area, you may contact your local Data Protection Authority.

International Users

Our Services are operated internationally.

By using our Services, you understand that your personal information may be transferred, processed, and stored in countries outside your country of residence.

These countries may have privacy laws that differ from those in your jurisdiction.

Where required by law, we implement appropriate safeguards to protect personal information during international transfers.

Security Disclaimer

Although we employ commercially reasonable safeguards designed to protect personal information, no method of transmission over the Internet or electronic storage system is completely secure.

Accordingly, we cannot guarantee absolute security of any information transmitted to or from our Services.

Users provide information at their own risk.

Contact Information

If you have questions regarding this Privacy Policy, our privacy practices, or would like to exercise any privacy rights available to you, please contact:

THERIVEO LLC

Email:
support@theriveo.com

Business Address:

2080 Broadleaf Crescent
Burlington, Ontario L7L 6S3
Canada

Website:
www.theriveo.com

Customer Support Hours:

Monday – Friday
9:00 AM – 5:00 PM (EST)

We aim to respond to all privacy-related inquiries within 1–2 business days.

For the purposes of applicable privacy and data protection laws, THERIVEO LLC is the data controller of your personal information unless otherwise stated.

Effective Date

This Privacy Policy is effective as of June 2026 and supersedes any previous versions.