Privacy Notice

1. Scope

This notice explains data handling for the prelaunch HEATTOVA website. The website is hosted on Shopify. No orders or payment card details are collected by our proposed lunch box storefront at this stage.

2. Information we may receive

• Contact form: name, email and message you submit.
• Optional launch list: your email and request to receive launch communications.
• Technical information: Shopify and enabled website services may process browser, device, network, security and cookie data.

3. Purposes and legal bases

We use voluntarily provided information to respond to enquiries and, if you opt in, to send launch updates. Depending on applicable privacy law, the relevant legal grounds may include consent, legitimate interest in maintaining and securing our service, and legal obligations. We do not use your information to fulfil purchases at this stage.

4. Email choices

You can withdraw marketing consent and unsubscribe from product updates at any time using the email unsubscribe mechanism or by contacting us. If you request deletion, we will consider your request in accordance with applicable privacy laws.

5. Service providers and international processing

Shopify hosts the website and processes forms and certain operational data. Additional service providers may be involved as we configure analytics, newsletters and customer support. Relevant information and safeguards will be reviewed and updated before commercial launch. Technical data can be processed in countries outside your location, subject to applicable protections.

6. Cookies and privacy preferences

Shopify and optional integrations may use cookies or similar technology for website operation, security, analytics or marketing, depending on store configuration. Where required, relevant consent settings must be configured before non-essential tracking is enabled.

7. Retention and security

We aim to retain enquiries and email-list information only as long as appropriate for their purpose, legal obligations and business security. We use the controls available in Shopify but cannot guarantee complete security of electronic communications.

8. Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict or object to certain processing, withdraw consent, or lodge a complaint with a competent authority. Use Contact Us to submit requests.

9. Business contact and updates

The legal name, registered address and dedicated privacy email of the final trading entity are not yet confirmed. These details will be supplied and this notice reviewed before we begin trading. The store's global Shopify Privacy Policy also exists and will be reconciled to the final business settings before launch.