When you order, information can include your name, email, phone number, billing and delivery addresses, items purchased and order notes. If you create an account, account details and related order history are also involved. Payment providers handle the payment credentials submitted through their payment flow; we receive transaction information needed to manage the order.

When you contact support, we receive your message, contact details, order reference and any attachments you choose to send. Please avoid unnecessary health information, intimate images and full financial credentials. A product question can usually be answered without a medical history. If you send sensitive details voluntarily, we limit their use to addressing the issue and any lawful related obligation.

A visit can generate information such as an IP address, browser and device characteristics, approximate location inferred from network information, pages requested, timestamps, error records and cart activity. Necessary cookies or similar storage support functions such as a shopping session, cart, security and recording privacy preferences.

Additional measurement or advertising technologies, if used, involve different choices from essential store functions. Where consent is required, optional technologies follow the consent choices you make. Cookie lifetimes depend on the technology and provider. Browser settings can restrict storage, although blocking essential functions may prevent checkout from working correctly.

We use order and contact information to receive and fulfil purchases, arrange delivery, answer questions, manage returns, issue refunds and communicate about an existing transaction. Technical and transaction information also supports troubleshooting, fraud prevention, service security and keeping reliable business records.

Marketing communications, where offered, are handled according to applicable consent and opt-out requirements. Buying a product does not automatically amount to consent to every advertising use. If optional analytics or advertising is used, your applicable choices govern those activities. You can ask us about the options available for your visit or information.

Where a legal-basis framework such as the GDPR applies, processing necessary to accept and fulfil an order is based on the contract or steps you request before it. Tax, accounting and legally required disclosures are based on legal obligations. Consent is used where required for optional communications or technologies and may be withdrawn.

Some processing, such as proportionate fraud prevention, resolving customer enquiries and maintaining service security, may rely on legitimate interests where lawful after considering your rights. We will explain the relevant basis for a particular activity on request. Withdrawing consent does not affect processing already lawfully carried out or processing supported by another lawful basis.

Information needed to operate the store may be shared with hosting or commerce service providers, payment processors, delivery and fulfilment partners, customer support tools and professional advisers. A carrier needs delivery information; a payment provider needs transaction information. Access should be limited to the purpose and service involved.

We may disclose relevant records to comply with a valid legal requirement, protect legal rights or investigate unlawful activity. If a business reorganisation affects customer records, any transfer must respect applicable safeguards and notice requirements. We do not use this general disclosure to authorise unrelated public disclosure of your purchase history.

We operate from China, and service providers may process information in other countries. The countries involved depend on the services necessary for your transaction. Where applicable law restricts a cross-border transfer, we use the lawful transfer mechanism and safeguards required for that transfer. You may ask us about the arrangements relevant to your information.

Information is kept for the period reasonably needed for the purpose, including order fulfilment, returns, accounting obligations, fraud prevention and legal claims. Different records have different retention needs. We consider legal retention periods and unresolved disputes, then delete, anonymise or restrict information when it is no longer needed. Deletion requests may be subject to lawful recordkeeping exceptions.

We use reasonable organisational and technical measures appropriate to the information and service. No storage or transmission method is completely secure. If you suspect an account or order security issue, contact us promptly and do not include passwords or verification codes in the report.

Personal hygiene purchases can reveal private preferences, so support enquiries should include only what is needed. We do not need medical diagnoses to process an ordinary purchase. The store is not intended to invite children to submit personal information independently. A parent or guardian who believes a child has supplied information may contact us for review and appropriate action.

Depending on your location and the law that applies, you may request access to or a copy of your information, correction, deletion, restriction, portability or an objection to certain processing. You may withdraw consent where processing depends on consent and complain to the competent data protection authority. These rights are subject to their legal conditions and exceptions.

Where applicable US state privacy law grants opt-out rights for sale, sharing or targeted advertising, you may exercise them in relation to any activity that meets those legal definitions. Recognised browser preference signals will be handled where legally required. You may also have a right to limit certain sensitive-data uses, use an authorised agent or appeal a decision. We will not unlawfully discriminate against you for exercising a right.

Send a request to service@hygivaro.com, describe the right you want to exercise and provide an order reference or contact detail that helps locate the records. Do not send identification documents unless a proportionate verification step is necessary and a suitable method has been explained. An authorised agent may need to provide proof of authority.

We respond within the period required by applicable law and explain any lawful extension, refusal or retention exception. If you are dissatisfied, you may ask us to reconsider and use any available authority or appeal route. We may update this notice when practices or obligations change, providing additional notice or obtaining consent where required. Changes do not retrospectively authorise an incompatible use of information.

Certain information is necessary to complete a particular service: a delivery address to send goods, a contact route for order communications, and transaction information to reconcile payment. If you choose not to provide information required for that service, we may be unable to complete it. We will distinguish a necessary detail from an optional preference where relevant.

You can ask why a requested detail is needed before providing it. An ordinary purchase does not require a detailed medical profile. If a delivery authority requires additional recipient information, the purpose and appropriate collection route may differ from the details normally collected by the store.

Information can come directly from you, from the device used to visit the store, and from services involved in an order. For example, a payment provider can confirm payment status and a carrier can provide tracking or delivery information. These records help us understand whether the service you requested has been completed.

A message from an authorised representative can also provide information about an enquiry, subject to authority checks. We do not assume that every person with an order number is entitled to the complete order record. If you ask about the source of particular personal information, we will explain it to the extent required by applicable law.

Order records can include the selected item, quantity, transaction amount, destination and communications about fulfilment. A support conversation may record the reported issue, evidence supplied, a decision and the action taken. Keeping those records together can prevent a later question from being answered without the context of an earlier agreed remedy.

Access should relate to a legitimate service or business need. We do not need to share an entire conversation with a carrier if only an address correction is required. Records retained for a legal claim, refund reconciliation or accounting obligation remain subject to applicable restrictions even when the active support issue has ended.

An order can reveal something about a person’s routine or preferences even if it does not state a medical condition. We treat order and support details as personal information where the law defines them that way. Customer service questions should be answered using the product and transaction information reasonably needed for the task.

Please avoid sending information about a diagnosis, another person’s health or an intimate situation unless it is genuinely necessary for the issue you choose to raise. If such information is received, we consider its sensitivity, restrict its use appropriately and apply any additional legal requirements relevant to processing it.

Essential store functions can involve remembering a cart, maintaining a session, preventing abuse and recording privacy preferences. Optional measurement or advertising serves a different purpose, such as assessing campaigns or understanding browsing patterns. Whether a particular technology is essential depends on its actual purpose, not merely on a name assigned to it.

Where an applicable choice is available, you can accept, decline or later change optional uses through that mechanism or contact us for help understanding it. Blocking all browser storage can affect essential shopping functions. Changing a browser setting also may not automatically change information already lawfully recorded in a completed order.

A dispatch message, payment notice or return update is sent to manage the transaction rather than simply promote a new purchase. Marketing communications, where provided, are subject to the applicable consent or opt-out rules. We distinguish the purpose of the communication instead of treating every order email as permission for unrestricted promotional contact.

If you opt out of marketing, necessary service communications about an existing order can still be sent on an appropriate legal basis. Allow any lawful processing period for a preference change, and tell us if a message appears inconsistent with your choice. A marketing preference does not prevent you from asking for order support.

A provider may need a particular part of a customer record to perform its service. Delivery information supports dispatch; transaction information supports payment or refund; technical records support security. We assess the purpose of a disclosure and use the contractual or other safeguards required for the provider relationship.

Some services also have independent obligations, such as payment fraud checks or carrier delivery records. You can ask about the categories of recipients relevant to your information. The involvement of a provider does not mean your full purchase history is made available to every company involved in the transaction.

A retention period depends on the type of record, the original purpose, applicable accounting or tax duties and whether a claim remains unresolved. An unsuccessful enquiry may need a different retention assessment from a completed order or an active payment dispute. We do not apply a single indefinite period merely because information is inexpensive to store.

If you request deletion, we identify information that can be deleted and explain any lawful reason for retaining other records. Retained information should not be repurposed without a lawful basis. Backup or system records may follow their own protected deletion cycle, subject to the limits and obligations imposed by applicable law.

You can identify the information you want to access by reference to an order, contact address or support conversation. A precise description can make it easier to locate the record, but a request is not invalid merely because you do not know our internal system names. Where applicable law grants access, we will explain the relevant process.

If an address or contact detail is wrong, tell us what needs correction and whether an order is still being fulfilled. Correcting a customer record does not guarantee that an already dispatched parcel can be rerouted. Historical accounting records may need an auditable correction rather than silent removal, depending on the legal obligation involved.

Before disclosing personal information or making certain changes, we may need to verify that the request concerns you. A proportionate check can use information already connected with the order rather than routinely collecting a new identity document. We consider the sensitivity of the information and the risk of disclosure to the wrong person.

If someone acts on your behalf, we may require evidence of their authority and, where legally appropriate, confirmation from you. A family relationship alone does not automatically authorise access to every record. We will explain any necessary verification step and an appropriate way to provide the relevant information.

Where applicable law grants these rights, you may object to certain processing, ask that processing be restricted, or request a portable copy of qualifying information. The legal conditions differ among rights, so not every request has the same scope. We will assess the request rather than assume an objection requires immediate deletion of every transaction record.

Where processing relies on consent, you may withdraw that consent for future use through the relevant route. Information may still need to be processed for an existing contract or legal duty on another valid basis. We will explain a lawful limitation and any available route to challenge the decision.

If you believe information was used incorrectly, explain what happened and the result you are seeking. We will review the concern and respond within the period required by applicable law, including an explanation of any permitted extension. A request should not be met with a demand to waive unrelated consumer rights.

You may also use a complaint or appeal route available in your jurisdiction, including contacting a competent privacy authority. Where a recognised opt-out preference signal or authorised-agent process must be honoured, the applicable requirement governs. We do not unlawfully disadvantage customers merely for exercising a privacy right or asking how their information is handled.