Privacy Policy – VIVALLI

Last Updated: October 8, 2026

At VIVALLI, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit https://vivallibags.com, purchase our products, contact customer support, or otherwise interact with our services.

VIVALLI is operated by FQ Group Holdings LLC, a limited liability company formed in the State of Delaware, United States.

We process personal information in accordance with applicable privacy and data protection laws, including the European Union General Data Protection Regulation (EU GDPR) and the United Kingdom General Data Protection Regulation (UK GDPR), where applicable.

1. Who We Are

VIVALLI is an international online retail brand operated by FQ Group Holdings LLC, a limited liability company formed in the State of Delaware, United States.

Our business operates exclusively through online sales and does not maintain physical retail stores.

Brand: VIVALLI

Legal Entity: FQ Group Holdings LLC

Country of Establishment: United States

State of Formation: Delaware

Website: https://vivallibags.com

Customer Support and Privacy Contact: contact@vivallibags.com

For inquiries concerning our business, purchases, or the processing of personal information, please contact us using the email address above.

2. Personal Information We Collect

Depending on your interactions with our website and services, we may collect the following categories of personal information.

2.1 Personal and Contact Information

Full name.
Email address.
Telephone number.
Billing and shipping addresses.

2.2 Order and Transaction Information

Products purchased.
Order numbers and purchase history.
Payment status and transaction references.
Shipping and delivery information.
Return and refund requests.
Customer support communications.

2.3 Payment Information

Payments are processed through third-party payment service providers.

We may receive transaction confirmations, payment status information, limited payment identifiers, and information necessary to manage orders, refunds, and fraud prevention.

We do not ordinarily receive or store complete payment card numbers through our standard checkout processes.

2.4 Technical and Usage Information

When you access our website, we and our service providers may collect:

IP address.
Device and browser information.
Operating system.
Website interactions and browsing activity.
Referral sources.
Approximate location derived from technical information.
Cookie identifiers and similar online identifiers.

2.5 Marketing Information

Where applicable, we may collect:

Newsletter subscriptions.
Marketing preferences.
Interactions with promotional emails.
Advertising and campaign interaction data.

3. How We Collect Personal Information

We collect personal information through several methods.

Directly from you: When you place an order, create an account, subscribe to marketing communications, submit a request, or contact customer support.

Automatically: Through website functionality, cookies, analytics tools, and similar technologies, subject to applicable consent requirements.

From service providers: Including payment processors, shipping companies, fraud prevention services, and other providers supporting our operations.

From advertising partners: Where permitted by law, we may receive information relating to advertising interactions and campaign performance.

4. Purposes and Legal Bases for Processing

Where the EU GDPR or UK GDPR applies, we rely on an appropriate legal basis for each processing activity.

Processing Purpose	Legal Basis
Processing orders, payments, and deliveries	Performance of a contract
Managing returns, refunds, and order-related customer service	Performance of a contract and, where applicable, legal obligation
Maintaining legally required financial and transaction records	Legal obligation
Preventing fraud and protecting website security	Legitimate interests and, where applicable, legal obligation
Responding to general inquiries	Legitimate interests or steps requested before entering a contract
Improving website functionality and customer experience	Legitimate interests, subject to applicable cookie and privacy requirements
Sending promotional emails	Consent or another lawful basis where specifically permitted
Using non-essential advertising and analytics cookies	Consent where required
Complying with lawful requests from public authorities	Legal obligation

Where we rely on legitimate interests, we consider the necessity of the processing and its potential impact on individuals' rights and freedoms.

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Shopify and E-Commerce Services

Our online store is powered by Shopify, which provides technology supporting our storefront, checkout, order management, and related e-commerce functions.

Personal information may be processed by Shopify and its service providers to support the operation, security, and functionality of our store.

Depending on the specific service and processing activity, Shopify may act as a processor on our behalf or as an independent controller.

For additional information about Shopify's privacy practices, please visit:

https://www.shopify.com/legal/privacy

6. Sharing Personal Information

We may disclose personal information to third parties where reasonably necessary and legally permitted.

These may include:

E-commerce and Hosting Providers: To operate our website and manage transactions.
Payment Processors: To process payments, refunds, and payment-related security checks.
Shipping and Logistics Providers: To fulfill orders, arrange deliveries, and process returns.
Customer Support and Communication Providers: To respond to inquiries and send transactional communications.
Analytics Providers: To understand website performance and improve our services.
Advertising and Marketing Partners: To manage marketing activities and measure campaign performance, subject to applicable consent requirements.
Professional Advisers: Including legal, accounting, and compliance professionals where necessary.
Public Authorities: Where disclosure is legally required.

We do not sell personal information in exchange for money.

However, certain advertising and data-sharing practices may fall within broader legal definitions of the sale or sharing of personal information in some jurisdictions. Where applicable, we provide the required disclosures and choices.

We require processors acting on our behalf to handle personal information under appropriate contractual and security obligations.

7. Cookies and Similar Technologies

Our website may use cookies, pixels, and similar technologies for the following purposes.

Essential Cookies

These support necessary website functions, including shopping cart functionality, checkout, security, and session management.

Analytics Cookies

These help us understand website traffic, user interactions, and website performance.

Advertising Cookies

These may support advertising measurement, campaign attribution, and personalized advertising.

Preference Cookies

These may remember customer preferences and improve browsing functionality.

Where required by applicable law, we will request consent before storing or accessing non-essential cookies or using similar tracking technologies.

You may manage your preferences through the cookie consent tools made available on our website, where applicable.

You may also adjust cookie settings through your browser.

Refusing non-essential cookies should not prevent access to essential shopping functions.

You may withdraw or change cookie consent where consent management functionality is provided.

8. Marketing Communications

Where permitted by law, we may send promotional communications relating to VIVALLI products, collections, offers, and store updates.

Where consent is legally required, promotional communications will be sent only after obtaining appropriate consent.

You may unsubscribe at any time by:

Clicking the unsubscribe link in a marketing email.
Contacting contact@vivallibags.com.

Unsubscribing from promotional communications does not prevent us from sending essential transactional messages concerning existing orders.

9. International Transfers of Personal Information

VIVALLI operates internationally, and personal information may be transferred to or processed in countries outside your country of residence, including the United States.

Some destination countries may not provide the same level of data protection as the European Union or the United Kingdom.

Where the EU GDPR or UK GDPR requires appropriate safeguards for international transfers, we will use a legally valid transfer mechanism.

Depending on the transfer and recipient, such mechanisms may include:

An applicable adequacy decision.
The European Commission's Standard Contractual Clauses.
The United Kingdom's International Data Transfer Agreement or applicable UK Addendum.
Another transfer mechanism permitted under applicable law.

We will implement any additional safeguards required by the circumstances of the transfer.

Customers may contact us to request further information about applicable transfer safeguards.

10. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected, subject to applicable legal obligations.

Retention periods or the criteria used to determine them depend on the category of information and the relevant purpose.

Order and Transaction Records: Retained for the periods required by applicable tax, accounting, consumer protection, and commercial laws.

Customer Support Records: Retained as reasonably necessary to resolve inquiries, manage disputes, and establish or defend legal claims.

Marketing Information: Retained while the relevant lawful basis remains valid, subject to withdrawal of consent, objections, and applicable retention requirements.

Technical and Analytics Information: Retained according to the purpose of processing, configured retention periods, and applicable privacy requirements.

Fraud Prevention Records: Retained for a proportionate period necessary to investigate suspicious activity, protect transactions, or comply with legal obligations.

When personal information is no longer necessary, we take appropriate steps to delete or anonymize it, unless continued retention is legally required or otherwise justified.

11. Data Security

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, alteration, misuse, or disclosure.

These measures may include:

Secure website connections.
Restricted access to personal information.
Payment processing through established providers.
Account authentication and access controls.
Appropriate service provider security arrangements.

No electronic system or internet transmission method is completely secure.

In the event of a personal data breach, we will assess our obligations and notify the relevant authorities and affected individuals where required by applicable law.

12. Your Rights Under the EU GDPR and UK GDPR

Where applicable, you may have the following rights:

Right of Access: Request confirmation of whether we process your personal information and obtain access to it.

Right to Rectification: Request correction of inaccurate personal information.

Right to Erasure: Request deletion of personal information where the legal conditions are satisfied.

Right to Restrict Processing: Request restrictions on certain processing activities.

Right to Data Portability: Receive eligible personal information in a structured, commonly used, machine-readable format and request its transmission where applicable.

Right to Object: Object to processing based on legitimate interests in certain circumstances.

Right to Object to Direct Marketing: Object at any time to processing of personal information for direct marketing purposes.

Right to Withdraw Consent: Withdraw consent where consent is the legal basis for processing.

Rights Relating to Automated Decision-Making: Exercise applicable rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

You also have the right to lodge a complaint with the competent supervisory authority.

How to Exercise Your Rights

Please contact:

contact@vivallibags.com

We may request reasonable information to verify your identity.

Where the GDPR applies, we will generally respond without undue delay and within one month of receiving a valid request.

Where legally permitted, this period may be extended by up to two additional months for complex or numerous requests, with appropriate notification.

We will not charge a fee for ordinary requests, except where permitted by applicable law.

13. European Union and United Kingdom Representatives

VIVALLI is operated by a company established in the United States.

Where Article 27 of the EU GDPR or the corresponding provisions of the UK GDPR require the appointment of a representative, we will designate an appropriate representative in the relevant jurisdiction and make the representative's contact information available.

EU Representative: [Insert appointed representative's name and contact details if required]

UK Representative: [Insert appointed representative's name and contact details if required]

The appointment of a representative does not replace the responsibilities of FQ Group Holdings LLC as data controller.

14. Complaints and Supervisory Authorities

If you have concerns about how we handle your personal information, we encourage you to contact us first.

Email: contact@vivallibags.com

If you are located in the European Union, you may have the right to lodge a complaint with a competent data protection supervisory authority.

A list of European data protection authorities is available through the European Data Protection Board:

https://www.edpb.europa.eu

If you are located in the United Kingdom, you may contact the Information Commissioner's Office:

https://ico.org.uk

Your right to contact a supervisory authority is not conditional upon contacting VIVALLI first.

15. Children's Privacy

Our website is intended for individuals who are legally permitted to purchase our products.

We do not knowingly collect personal information from children in circumstances prohibited by applicable law.

If you believe that a child has provided personal information to us unlawfully, please contact us so that we can investigate and take appropriate action.

16. Third-Party Websites

Our website may contain links to third-party websites or services.

Those websites may have independent privacy policies and data processing practices.

We encourage customers to review the privacy notices of third-party services before providing personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, business operations, data processing activities, or applicable legal requirements.

The latest version will be published on this page with an updated revision date.

Where required by law, we will provide additional notice or obtain renewed consent before implementing material changes affecting personal information.

18. Contact Information

For questions about this Privacy Policy, personal information processing, or requests to exercise your privacy rights, please contact:

VIVALLI