Privacy Policy
How we collect, use, and protect your personal data — GDPR-compliant.
Data controller
The data controller for personal information processed on krevalo.co is:
Pedroso Digital Ventures LLC
d/b/a Krevalo
Registered in Florida, USA
EIN: 98-1892153
Email: legal@krevalo.co
Data we collect
Information you provide
- Account & order data: name, email, phone, shipping address, billing address
- Payment data: processed by our PCI-DSS-compliant payment providers (Stripe, PayPal, Klarna). We do not store full card numbers.
- Communications: content of emails or messages you send us
- Newsletter subscription: email address, if you opt in
Information collected automatically
- Device & browser data: IP address, browser type, operating system, screen size
- Usage data: pages visited, time on site, referring URL, clickstream
- Cookies: see our Cookie Policy
How we use your data
- Processing and shipping your orders (including customs clearance for DDP)
- Customer support and responding to your questions
- Sending order confirmations, shipping notifications, and return information
- Fraud prevention and security
- Improving our website and products through aggregated analytics
- Marketing communications, only with your consent (you can withdraw at any time)
- Legal compliance (tax, customs, accounting)
Legal basis for processing
Order fulfilment & shipping: Contract (GDPR Art. 6.1.b)
Customer support: Contract / Legitimate interest (Art. 6.1.b / 6.1.f)
Marketing emails: Consent (Art. 6.1.a)
Analytics & tracking cookies: Consent (Art. 6.1.a)
Fraud prevention: Legitimate interest (Art. 6.1.f)
Tax & accounting records: Legal obligation (Art. 6.1.c)
Retention
- Order data: 10 years (EU tax/accounting obligations)
- Account data: for the life of your account, plus 2 years
- Marketing consent: until you unsubscribe, plus 3 years for compliance audit
- Support emails: 3 years
- Analytics data: 14 months maximum
Your rights
Under GDPR, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data, subject to our legal retention obligations (Art. 17)
- Restrict processing (Art. 18)
- Portability — receive your data in a machine-readable format (Art. 20)
- Object to processing based on legitimate interest or direct marketing (Art. 21)
- Withdraw consent at any time, without affecting prior lawful processing
- Lodge a complaint with your local data protection authority
To exercise any of these rights, email legal@krevalo.co. We respond within 30 days (usually within 1 week).
Contact & Data Protection
Privacy contact: legal@krevalo.co
EU representative (Art. 27): appointed — details available on request
Supervisory authority: you may lodge a complaint with your national DPA.
