Privacy notice

1. Data controller

TRICOVIVA is responsible for the processing of your personal data.

Contact for privacy matters and to exercise your rights: info@tricoviva.com.

2. What data we collect

We collect only what is necessary to sell to you, deliver to you and look after you:

• Identification and contact: full name, email address and mobile phone number.
• Delivery: destination country, street address, apartment, suite or unit, city or town, state, province or region, and postal code.
• Payment: your card details are captured and processed directly by our payment provider. We receive only the confirmation of the transaction and the last 4 digits.
• Orders: purchase history, the status of your shipments and guarantee requests.
• Messages: what you write to us on WhatsApp or by email, so we can follow it up.
• Browsing: technical and usage data collected through cookies, as explained in section 6.
• Progress photos: only if you choose to upload them to your account, as explained in section 10.

3. What we use it for

Purposes necessary for your purchase

• Processing your order, charging for it and delivering it to you.
• Contacting you about matters relating to your order, including the courier’s call before delivering.
• Handling your questions, requests and complaints.
• Managing guarantees, cancellations and returns.
• Meeting legal, accounting and tax obligations.

Purposes you can refuse

These are not necessary for your purchase and refusing them affects neither your order nor your guarantee in any way:

• Sending you promotions and news by email or on WhatsApp.
• Reminding you that the moment to reorder is approaching.
• Inviting you to surveys about your experience.
• Measuring and personalizing the advertising you see on third party platforms.

To refuse them, do not tick the corresponding boxes when buying, use the unsubscribe link at the foot of every email, reply BAJA to us on WhatsApp, or write to us at info@tricoviva.com. We apply it within a maximum of 5 business days.

4. Who we share it with

We share your data only with those needed for your order to arrive and for the shop to work:

Several of these providers are outside your country, so your data is transferred internationally to the extent necessary to fulfill your order and the purposes you accepted. We do not sell your personal data to anyone.

5. Your rights over your data

You have the right to access your data, to correct it if it is wrong, to ask us to delete it and to object to its use. You may also withdraw at any time the consent you gave us.

To exercise them, write to info@tricoviva.com with:

1. Your name and an email or phone number where we can reply to you.
2. A copy of official identification, only to confirm that it is you. We use it for that and do not keep it afterwards.
3. Which right you want to exercise and over what data. If you ask for rectification, tell us what the correct data is.

We reply within 1 month and, where applicable, we carry it out within 1 month. The reply goes by the same means you wrote to us through.

If you consider that we did not handle your request properly, you may complain to the data protection authority of the country where you live.

6. Cookies and tracking technologies

We use 3 kinds of cookies and you can choose which ones you accept:

• Necessary. Without them the shop does not work: cart, session and security. Always on.
• Analytics. They tell us which pages are used and where people get stuck.
• Advertising. They allow us to measure our advertising and to show you relevant advertising on third party platforms.

tv_exp: when one of our pages is testing 2 versions, this cookie keeps a random number so you always see the same version, and so we can count which one works better without knowing who you are. It does not hold your name, your email or what you buy. It belongs to this site only, lasts 30 days, and is not set if your browser asks not to be tracked (Do Not Track or Global Privacy Control).

7. Security

We encrypt the site end to end, we do not host card data, we limit internal access to the people who handle orders and we review our providers periodically.

That said, no system connected to the internet is infallible and we are not going to promise you otherwise. If an incident affecting your data ever occurred, we would notify you.

8. Minors

This site and this product are aimed at people of legal age. We do not knowingly collect data from minors. If you believe a minor gave us their data, write to us and we delete it.

9. Changes to this notice

We may update this notice. The version in force is always the one published on this page, with its last updated date. If the change is significant, we tell you by email before it comes into force.

10. Progress photos

After a purchase, you may upload photos of your own hair, seen from above, to a private My photos section of your account on the site: a starting photo before your first session and one photo a week after that. We ask for the hair only, without the face. We process these photos for 2 purposes only: to let you keep and compare your own photos over time, and to review a claim under the 120 day guarantee, whose conditions require a starting photo and a weekly photo.

The photos are uploaded to and stored on the servers of our hosting provider, Railway (United States), acting as our processor, together with the upload date, the week number and the link to your account. They are not published, not used in advertising, not shared with the supplier, and not placed in analytics, advertising platform events or logs. Only you and authorized members of our team can see them, and every staff access is recorded.

Because a photo of the hair and scalp may be read as revealing information about health, we treat these photos as sensitive data: nothing is uploaded until you give explicit consent through an unticked checkbox shown before the first upload, which we record with its text version and time, and consent is required to use the feature. We keep the photos until one year after your last purchase and then delete them; copies that remain in our backups are deleted when those backups expire. You can delete any photo at any time from the same section, with immediate effect, and you can withdraw consent by deleting your photos. Deleting photos needed for a guarantee claim leaves that record incomplete.