Privacy Policy

This Privacy Policy describes how BioShieldUV Inc. (“we”, “us”), operator of bioshielduv.com (the “Site”), collects, uses and discloses your Personal Information when you visit or make a purchase from the Site.

Contact

If you have questions, want more information about our privacy practices, or would like to make a complaint, contact us by email at [email protected], or by mail at BioShieldUV Inc., 1621 Central Ave, Cheyenne, WY, 82001, United States.

Collecting personal information

When you visit the Site we collect certain information about your device, your interaction with the Site, and the information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this policy, any information about an identifiable individual is “Personal Information”.

  • Device information — browser version, IP address, time zone, cookie information, which pages and products you view, search terms, and how you interact with the Site. Collected automatically using cookies, log files, web beacons, tags and pixels, so that the Site loads correctly for you and so that we can analyse and improve it.
  • Order information — name, billing address, shipping address, payment information, email address and phone number. Collected from you, to fulfil our contract with you: to process payment, arrange shipping, send invoices and order confirmations, communicate with you, screen orders for fraud, and — where you have told us you want it — send you information about our products.
  • Customer support information — your name, your contact details and the content of your messages, collected from you so that we can support you.

Who processes your data

We do not sell your personal information. We share data only with trusted partners who help us operate our business and serve you better, and only to the extent necessary for those services. Our service partners are: Stripe, PayPal and Shop Pay (payment processing); USPS, FedEx, UPS and DHL (shipping); Google Analytics (analytics); and Amazon (services).

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Behavioural advertising

We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. We share information about your use of the Site, your purchases and your interaction with our ads on other websites with our advertising partners, directly and in some cases through cookies or similar technologies.

You can opt out of targeted advertising through Facebook, Google, Bing, or the Digital Advertising Alliance's opt-out portal.

Using personal information

We use your Personal Information to provide our services to you: offering products for sale, processing payments, shipping and fulfilling your order, and keeping you up to date on new products, services and offers.

Lawful basis. If you are a resident of the European Economic Area, we process your personal information under the following lawful bases: your consent; performance of the contract between you and the Site; compliance with our legal obligations; to protect your vital interests; to perform a task carried out in the public interest; and for our legitimate interests, where those do not override your fundamental rights and freedoms.

Retention

We keep Personal Information only as long as we need it:

  • Order records — seven years, for tax and legal compliance, even if you ask us to delete your account.
  • Account data — until you ask us to delete your account.
  • Analytics data — aggregated and anonymised after 26 months.
  • Marketing consents — for as long as your consent is active.

When you exercise your right of erasure, we delete everything that is not subject to a legal retention requirement.

Automated decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making, including profiling, where that decision has a legal effect on you or otherwise significantly affects you. We do not make fully automated decisions of that kind using customer data. Our processor Shopify uses limited automated decision-making to prevent fraud: a temporary denylist of IP addresses associated with repeated failed transactions, which persists for a few hours, and a temporary denylist of cards associated with those addresses, which persists for a few days.

Your rights

GDPR. If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that it be corrected, updated or erased. To exercise these rights, contact us at [email protected]. Your Personal Information is initially processed in Ireland and then transferred outside Europe for storage and further processing, including to Canada and the United States.

CCPA/CPRA. If you are a resident of California, you have the right to know what Personal Information we hold about you, to port it, and to ask that it be corrected, updated or erased. To exercise these rights, or to designate an authorised agent to do so on your behalf, contact us at [email protected].

We respond to verified requests within the time required by applicable law.

Cookies

A cookie is a small amount of information downloaded to your computer or device when you visit our Site. We use functional, performance, advertising and analytics cookies. Cookies make browsing better by letting the website remember your actions and preferences, and they tell us how people use the site.

How long a cookie stays on your device depends on whether it is a session cookie, which lasts until you stop browsing, or a persistent cookie, which lasts until it expires or you delete it. You can control and manage cookies through your browser settings; most browsers let you refuse or accept cookies, delete existing ones, and set preferences per site. Removing or blocking cookies can affect your experience and parts of the site may not work fully. Blocking cookies may not completely prevent how we share information with third parties such as our advertising partners — to exercise your rights with those parties, follow the instructions under Behavioural advertising above.

Do Not Track

Because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect one.

Data security

We use industry-standard security measures to protect your personal information from unauthorised access, alteration, disclosure or destruction. All data transmitted to and from our website is encrypted using SSL/TLS, and we maintain PCI DSS compliance for payment processing. We do not store your complete credit card information on our servers. In the event of a data breach, affected users are notified within 72 hours of discovery, in accordance with applicable regulations.

Children's privacy

Our services are not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we discover that we have, we delete it promptly. A parent or guardian who believes their child has given us personal information should contact us at [email protected].

International data transfers

Your data may be transferred to and held on servers outside your country. We apply appropriate safeguards to all international transfers, those transfers comply with applicable data protection regulations, and standard contractual clauses are used where required.

Complaints and changes

We may update this Privacy Policy from time to time, to reflect changes in our practices or for other operational, legal or regulatory reasons. To make a complaint, contact us at [email protected] or by mail at the address above. If you are not satisfied with our response, you have the right to lodge your complaint with the relevant data protection authority.