Privacy Policy

Last Updated: September 17, 2026

At Eluravia, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how Shenzhen Ciweitong Trading Co., Ltd., doing business as Eluravia (“Eluravia,” “we,” “us,” or “our”), collects, uses, discloses, stores, and otherwise processes your personal information when you visit, browse, create an account on, make a purchase from, subscribe to communications from, or otherwise interact with https://www.eluravia.com (the “Site”), our customer service team, and any other services that link to this Privacy Policy (collectively, the “Services”).

For purposes of applicable data protection laws, Shenzhen Ciweitong Trading Co., Ltd. is generally the controller or business responsible for the personal information described in this Privacy Policy, except where otherwise stated.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood the practices described in this Privacy Policy.

1. Who We Are

The Eluravia online store is operated by:

Shenzhen Ciweitong Trading Co., Ltd.
Room 603, No. 4, Area 6, Shangchuan Village, Community 31,
Shangchuan Community, Xin'an Subdistrict, Bao'an District,
Shenzhen, China

Brand: Eluravia
Website: https://www.eluravia.com
Email: support@eluravia.com

If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, you may contact us using the information provided in the “Contact Us” section below.

2. Personal Information We Collect

The personal information we collect depends on how you interact with Eluravia and the Services. We may collect information directly from you, automatically from your device, and from service providers or other third parties.

Information You Provide Directly to Us

When you purchase or attempt to purchase products through the Site, create an account, contact us, subscribe to marketing communications, participate in a promotion, or otherwise interact with us, we may collect information such as your name, email address, telephone number, billing address, shipping address, country or region, account information, order information, product selections, purchase history, returns and refund information, customer service communications, and other information you choose to provide.

If you contact customer support, we may collect the content of your communications, attachments you provide, order details, and information necessary to investigate or respond to your request.

Because Eluravia offers beauty and personal-care products, you may voluntarily provide information about your beauty preferences, skin type, skin concerns, product preferences, or similar information when using a product recommendation tool, quiz, survey, review feature, or customer-support service, if such features are made available.

Unless specifically requested and permitted by applicable law, please do not provide us with medical records, medical diagnoses, government identification numbers, or other highly sensitive personal information through ordinary contact forms, reviews, or customer service communications.

Account Information

If you create a customer account, we may collect and process your name, contact details, account identifier, authentication information, saved addresses, order history, preferences, and other account-related information.

Authentication credentials may be processed by Shopify or other authentication service providers on our behalf.

Order and Transaction Information

When you make or attempt to make a purchase, we may collect information about the products you purchase or place in your cart, order value, discounts, currency, transaction status, shipping method, delivery address, billing address, returns, refunds, chargebacks, and related transaction information.

Payment card information and other payment credentials are generally processed directly by our payment service providers. Eluravia does not necessarily receive or store your complete payment card number, security code, or other full payment credentials.

Marketing Information

If you subscribe to our email list or otherwise agree to receive promotional communications, we may collect your email address, marketing preferences, consent status, interactions with marketing messages, and information about whether you open or click certain communications where permitted by applicable law.

You may unsubscribe from promotional email messages at any time by using the unsubscribe link contained in those messages or by contacting us.

Device, Usage, and Online Activity Information

When you visit or interact with the Site, we and our service providers may automatically collect certain information about your browser, device, and use of the Services.

This may include your Internet Protocol (“IP”) address, browser type, device type, operating system, device identifiers, language settings, approximate geographic location derived from your IP address, referring URLs, pages viewed, products viewed, search queries, clicks, shopping-cart activity, timestamps, session information, interaction with advertisements, and information about how you use the Site.

Cookies and Similar Technologies

We may use cookies, pixels, tags, software development kits, local storage, web beacons, and similar technologies to operate the Site, remember preferences, maintain shopping sessions, understand Site performance, conduct analytics, prevent fraud, measure marketing effectiveness, and, where permitted, provide advertising that may be more relevant to you.

More information is provided in the “Cookies, Analytics, and Advertising” section below.

Information We Receive From Third Parties

We may receive personal information from companies that help us provide the Services, including Shopify, payment processors, payment providers, fraud-prevention providers, fulfillment partners, shipping carriers, analytics providers, advertising platforms, customer-service providers, subscription providers, and other vendors.

We may also receive information when you interact with us through third-party platforms or use a third-party payment, login, or shopping service.

3. How We Use Personal Information

We may use personal information to provide, operate, maintain, and improve the Services; process and fulfill orders; accept and process payments; arrange shipping and delivery; provide order confirmations and tracking information; process cancellations, returns, refunds, exchanges, and warranty requests; create and administer customer accounts; communicate with you about your account, orders, products, or inquiries; provide customer support; personalize the shopping experience; recommend products where applicable; maintain shopping carts and preferences; operate loyalty, subscription, promotion, or similar programs where offered; detect, investigate, and prevent fraudulent, unauthorized, harmful, or illegal activity; maintain the security and integrity of the Site and our systems; conduct analytics and understand customer use of our Services; improve our products, website, marketing, and customer experience; send marketing communications where permitted; measure and improve advertising; comply with legal, tax, accounting, regulatory, and contractual obligations; enforce our Terms of Service and other policies; protect our rights, property, users, employees, and business partners; and establish, exercise, or defend legal claims.

We may also use information for other purposes disclosed to you at the time of collection or with your consent.

4. Legal Bases for Processing for EEA and UK Users

If the European Union General Data Protection Regulation (“GDPR”), UK GDPR, or similar law applies to our processing of your personal data, we rely on one or more appropriate legal bases.

We process personal data when necessary to perform a contract with you or take steps at your request before entering into a contract, such as processing an order, delivering products, processing payments, managing your account, and responding to transaction-related requests.

We may process personal data based on our legitimate interests, including operating and improving our business, preventing fraud, protecting the security of our Services, understanding how customers use our Site, providing customer service, and marketing our products where permitted, provided those interests are not overridden by your rights and interests.

Where required, we rely on your consent, including for certain non-essential cookies, tracking technologies, targeted advertising, or direct marketing activities.

We may also process personal data where necessary to comply with applicable legal obligations, including tax, accounting, consumer-protection, regulatory, and law-enforcement requirements.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

5. Cookies, Analytics, and Similar Technologies

We use cookies and similar technologies to support essential Site functionality and, where permitted, analytics, personalization, and advertising.

Strictly necessary cookies may be required for functions such as shopping carts, checkout, fraud prevention, account authentication, security, country or currency settings, and remembering privacy preferences.

Analytics cookies and technologies may help us understand how visitors find and use the Site, which pages and products are popular, how visitors navigate the Site, and how we can improve performance and usability.

Advertising and marketing technologies may help us measure advertising campaigns, understand conversions, create audiences, or display advertising that may be based on your interactions with our Site or, where permitted, activity across different websites or services.

Where applicable law requires consent before non-essential cookies or similar technologies are used, we will request such consent through the cookie or privacy controls available on the Site.

You can manage available cookie choices through the Cookie Preferences link or privacy controls provided on our Site.

Your browser may also allow you to block, delete, or restrict cookies. Blocking certain cookies may affect the functionality of the Site, including shopping-cart, login, or checkout functionality.

6. Targeted Advertising and Sale or Sharing of Personal Information

We do not sell personal information to third parties for money in the ordinary meaning of the word “sell.”

However, certain privacy laws in the United States define “sale,” “sharing,” or “targeted advertising” broadly. Under those definitions, the use of certain advertising, analytics, or cross-site tracking technologies may be considered a sale or sharing of personal information or processing for targeted advertising.

Where applicable, you may opt out through the privacy or data-sharing controls available on our Site.

We may also recognize legally required browser-based opt-out preference signals, such as the Global Privacy Control (“GPC”), where required by applicable law and where supported by our systems.

When a valid opt-out request is recognized, we will process it in accordance with applicable law.

We do not knowingly sell or share personal information belonging to individuals under 16 years of age for cross-context behavioral advertising.

7. Shopify

Our online store is hosted and powered by Shopify.

Shopify provides the ecommerce infrastructure that enables us to offer the Services, including storefront functionality, customer accounts, shopping carts, checkout services, order processing, fraud detection, security, analytics, and other ecommerce functions.

As a result, Shopify may collect and process personal information about visitors and customers when they interact with the Site.

Depending on the Shopify services and features enabled for our store, Shopify may process information as our service provider or processor and, in certain circumstances, for its own purposes as described in Shopify's privacy notices.

You can learn more about Shopify's privacy practices at:

https://www.shopify.com/legal/privacy

Shopify's privacy information for consumers is available at:

https://www.shopify.com/legal/privacy/consumers

If Shopify Network Intelligence or other enhanced Shopify services are enabled, Shopify may process certain customer information in connection with those services. Where required, applicable customer privacy choices, including consent and sale/sharing opt-outs, will be communicated through Shopify's customer privacy systems or other properly integrated privacy tools.

8. Payment Processing

We may use Shopify-supported payment processors and other payment service providers to process transactions.

Depending on the payment method you select, your payment provider may collect information such as your name, billing information, payment account information, transaction information, device information, and fraud-prevention information.

Payment service providers process information under their own terms and privacy policies where they act as independent controllers or businesses.

We encourage you to review the applicable privacy policy of the payment service you choose before submitting your payment information.

For security purposes, Eluravia generally does not directly store complete payment-card numbers or card security codes when those details are processed directly by an authorized payment processor.

9. How We Disclose Personal Information

We may disclose personal information to third parties when reasonably necessary to operate our business and provide the Services.

Recipients may include Shopify and ecommerce platform providers; payment processors and payment service providers; warehouses, fulfillment providers, logistics providers, shipping carriers, and tracking providers; customer-service providers; email and communications providers; cloud hosting, information technology, and cybersecurity providers; fraud detection and risk-management providers; analytics providers; advertising and marketing partners where permitted; subscription, loyalty, review, or ecommerce application providers that we use; professional advisers such as lawyers, accountants, auditors, and insurers; government, regulatory, law-enforcement, or judicial authorities where legally required; and potential purchasers, investors, lenders, or successors in connection with a merger, financing, reorganization, sale, acquisition, or other business transaction.

We may also disclose information when you request or authorize us to do so.

We require service providers acting on our behalf to process personal information in accordance with applicable contractual and legal requirements.

10. International Data Transfers

Eluravia operates internationally, and our company is located in China.

As a result, your personal information may be transferred to, stored in, or processed in countries other than the country where you live, including China, Canada, the United States, and other countries in which Shopify, our service providers, fulfillment partners, payment processors, or other partners operate.

Data protection and privacy laws in these jurisdictions may differ from those in your country.

Where applicable law requires specific safeguards for international transfers of personal data, we will use legally recognized transfer mechanisms or safeguards as appropriate. These may include contractual protections, standard contractual clauses, adequacy mechanisms, or other lawful transfer mechanisms.

For transfers of personal data subject to the GDPR, we may rely, where appropriate, on European Commission-approved Standard Contractual Clauses or another legally recognized transfer mechanism.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining your account, completing transactions, managing customer-service requests, complying with legal and accounting obligations, resolving disputes, preventing fraud, enforcing agreements, and establishing or defending legal claims.

The appropriate retention period depends on factors including the nature of the information, why it was collected, our legal and contractual obligations, applicable limitation periods, security requirements, and whether you maintain an active relationship with us.

For example, certain transaction and order records may need to be retained after completion of an order for accounting, tax, fraud-prevention, consumer-protection, or legal purposes.

Marketing information may generally be retained until you unsubscribe or otherwise object, after which we may retain limited information necessary to record and respect your opt-out.

If you request deletion of personal information, some information may nevertheless be retained where permitted or required by law.

Information may also remain temporarily in backup systems until those backups are overwritten or deleted according to our normal retention cycles.

12. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, destruction, loss, alteration, disclosure, or misuse.

These measures may include access controls, encryption or secure transmission methods where appropriate, secure ecommerce infrastructure, authentication controls, monitoring, and use of service providers with appropriate security practices.

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should not share your password or authentication information with others.

If you believe your interaction with us is no longer secure or that your account has been compromised, please contact us promptly at support@eluravia.com.

13. Marketing Communications

If you consent to receive marketing communications from us, we may send you information about Eluravia products, promotions, offers, launches, or other news.

You may unsubscribe from promotional emails at any time by selecting the unsubscribe link contained in the email or by contacting us at support@eluravia.com.

Even if you opt out of marketing communications, we may continue to send non-promotional messages where necessary, such as order confirmations, shipping notifications, account notices, security messages, product-safety communications, or responses to customer-service requests.

14. Your Privacy Rights

Depending on where you live and subject to applicable law, you may have rights regarding your personal information.

These may include the right to request confirmation of whether we process your personal information; access or obtain a copy of personal information we hold about you; correct inaccurate or incomplete information; request deletion of personal information; request restriction of certain processing; object to certain processing; obtain certain information in a portable format; withdraw consent where processing relies on consent; opt out of certain targeted advertising, sale, or sharing of personal information; and lodge a complaint with an applicable data protection authority.

These rights are not absolute and may be subject to legal exceptions.

To exercise a privacy right, please contact us at support@eluravia.com and use the subject line “Privacy Request.”

Please describe the nature of your request and provide sufficient information for us to identify the records relevant to your request.

We may need to verify your identity before processing certain requests. Information collected for verification will be used only for verification and related security purposes.

Where legally permitted, an authorized agent may submit a request on your behalf. We may require proof that the agent is authorized to act for you and may need to verify your identity directly.

We will not unlawfully discriminate against you because you exercise a privacy right.

15. Additional Information for Residents of the European Economic Area and United Kingdom

If you are located in the European Economic Area (“EEA”) or United Kingdom, applicable law may provide you with rights of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent, subject to applicable conditions and exceptions.

Where we process personal data based on legitimate interests, you may have the right to object to that processing based on circumstances relating to your particular situation.

You have the right to object at any time to the processing of your personal data for direct marketing purposes.

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

You may also have the right to lodge a complaint with the data protection authority responsible for your country or region.

We encourage you to contact us first so that we have an opportunity to address your concerns.

16. Additional Information for United States Residents

Residents of certain U.S. states, including California and other states with comprehensive consumer privacy laws, may have additional privacy rights, subject to applicable legal thresholds, definitions, exceptions, and exemptions.

Depending on applicable law, these rights may include the right to know or confirm whether we process personal information; access personal information; correct inaccurate personal information; delete personal information; obtain a portable copy of certain information; opt out of targeted advertising; opt out of the sale or sharing of personal information; limit certain uses or disclosures of sensitive personal information; and appeal certain decisions regarding privacy requests.

For purposes of California privacy law, the categories of personal information that we may collect, depending on how you interact with the Services, include identifiers; customer records information; commercial information; Internet or other electronic network activity; approximate geolocation information; payment and transaction information; communications; and inferences regarding shopping or product preferences.

The sources of this information, purposes for which we process it, and categories of recipients are described throughout this Privacy Policy.

We do not sell personal information for monetary compensation.

Some disclosures through advertising or analytics technologies may, however, be considered “sale,” “sharing,” or targeted advertising under certain U.S. privacy laws.

Where applicable, you can exercise the relevant opt-out right through the privacy or data-sharing controls available on the Site or by contacting us at support@eluravia.com.

Where required by applicable law, we also recognize valid opt-out preference signals such as Global Privacy Control.

To the extent that we process information defined as “sensitive personal information” under applicable U.S. privacy law, such as certain authentication or payment information, we intend to use such information only for permitted purposes such as providing requested services, completing transactions, authentication, fraud prevention, security, and compliance, unless otherwise disclosed to you.

17. Additional Information for Individuals in China

Where the Personal Information Protection Law of the People's Republic of China (“PIPL”) or other applicable Chinese data protection laws apply to our processing, you may have rights regarding your personal information, including rights to know about and make decisions concerning processing, restrict or refuse certain processing, access and copy personal information, request correction or supplementation, request deletion in circumstances provided by law, withdraw consent where processing is based on consent, and request an explanation of our personal information handling rules.

You may exercise applicable rights by contacting support@eluravia.com.

Where separate consent or another specific legal mechanism is required under applicable Chinese law for particular processing activities, we will take appropriate measures as required.

18. Do Not Track

Some browsers offer a “Do Not Track” (“DNT”) setting.

Because there is not a universally accepted technical or legal standard for interpreting DNT signals in all jurisdictions, our Services may not respond to traditional DNT signals.

However, where required by applicable law, we may recognize legally required opt-out preference signals such as Global Privacy Control.

You can also use the privacy and Cookie Preferences controls available on the Site.

19. Children's Privacy

The Services are intended for individuals who are at least 18 years old.

We do not knowingly collect personal information from children in violation of applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us without appropriate authorization, please contact us at support@eluravia.com.

If we learn that we have collected personal information from a child in circumstances prohibited by applicable law, we will take reasonable steps to delete or otherwise appropriately handle that information.

We do not knowingly sell or share personal information belonging to individuals under 16 years of age for cross-context behavioral advertising.

20. Third-Party Websites and Services

The Services may contain links to websites, applications, payment services, shipping services, social networks, or other services operated by third parties.

If you follow a third-party link or use a third-party service, that third party may collect and process information under its own privacy policy and terms.

This Privacy Policy does not govern the privacy practices of third parties acting independently from Eluravia.

We encourage you to review the privacy notices of third-party services before providing personal information to them.

21. Business Transfers

If Eluravia or Shenzhen Ciweitong Trading Co., Ltd. is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

Where legally required, we will provide appropriate notice regarding material changes in the controller or use of your personal information.

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our business, technologies, services, legal requirements, regulatory requirements, or privacy practices.

When we update this Privacy Policy, we will revise the “Last Updated” date at the top of this page.

Where required by applicable law, we may provide additional notice of material changes or request renewed consent.

We encourage you to review this Privacy Policy periodically.

23. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or the personal information we hold about you, or if you wish to exercise an applicable privacy right, please contact us at:

Shenzhen Ciweitong Trading Co., Ltd.

Room 603, No. 4, Area 6, Shangchuan Village, Community 31,
Shangchuan Community, Xin'an Subdistrict, Bao'an District,
Shenzhen, China

Email: support@eluravia.com

Website: https://www.eluravia.com

For privacy-related requests, please use the email subject line:

“Privacy Request”